AI News Feed
Market watch
Dream Incubation Gets Renewed Look From Researchers and CliniciansAI Inference Leaves a Hidden Storage Bill, MIT Technology Review SaysPHP Patches Two Critical RCE Flaws After Early Exploitation AttemptsSouth Korea raises cyber alert level over critical PHP vulnerabilitiesTesla Operating Profit Falls 56% as Musk Extends Bets on FSD, Robotaxi and OptimusMaxinsights Emerges as Egocentric Data Supplier to OpenAI and Physical AI Firms
Dream Incubation Gets Renewed Look From Researchers and CliniciansAI Inference Leaves a Hidden Storage Bill, MIT Technology Review SaysPHP Patches Two Critical RCE Flaws After Early Exploitation AttemptsSouth Korea raises cyber alert level over critical PHP vulnerabilitiesTesla Operating Profit Falls 56% as Musk Extends Bets on FSD, Robotaxi and OptimusMaxinsights Emerges as Egocentric Data Supplier to OpenAI and Physical AI Firms
Cybersecurity

South Korea raises cyber alert level over critical PHP vulnerabilities

South Korea raised its cyber warning to 'caution' over critical PHP flaws and urged systems to be patched.

AI News Feed · 2026-10-22 18:25

The "caution" level is the second lowest in South Korea's four-tier warning system, according to the ministry. Science Minister Bae Kyung-hoon said the PHP flaw could affect many websites and required an urgent response because exploit code had already been made public, Yonhap News reported.

The measure came a day after government agencies and companies worldwide shut down websites because of the vulnerabilities, which were found with the use of artificial intelligence, according to Yonhap News. Cybersecurity firm Wiz, one of the companies whose researchers uncovered the flaws, called them the most severe vulnerabilities ever detected by AI.

PHP, short for Hypertext Preprocessor, powers a large number of platforms, including online shopping malls, Wikipedia and WordPress, an open-source content management service behind many websites and blogs.

The ministry said the flaw discovered Wednesday could allow attackers to control affected web servers without authentication and carry out major cyberattacks, including data leakage, system shutdown and website defacement.

Developers of the PHP platform have rolled out patches, and the Korea Internet & Security Agency posted a security update advisory, the ministry said.

The presidential office's National Security Office then held an emergency meeting to coordinate the government's response to PHP-related cyber threats, the office said. The meeting reviewed PHP use by the public, private and defense sectors and their response measures, and participating officials pledged to cooperate in sharing information and coordinating responses. Public institutions and the military remained relatively secure from PHP-related threats because they have low rates of PHP use, the office said.