Internet ima zelo slab dan glede kibernetske varnosti.
Več pomembnih kibernetskih varnostnih incidentov se je pojavilo hkrati v globalni infrastrukturi, ki se je začela s kritičnimi ranljivostmi v programskem jeziku PHP, zaradi katerih so številne vladne spletne strani bile izključene. Ameriška agencija za nacionalno varnost je izdala opozorilo, v katerem poziva organizacije, naj takoj posodobijo svoje sisteme ali jih izključijo, da bi preprečili izkoriščanje. Hkrati je projekt Node.js razkril popravke za štiri ranljivosti visoke resnosti, vključno s pomanjkljivostmi, ki omogočajo daljinsko izvajanje kode in obiti TLS validacije. Poleg tega je odprtokodni proxy LiteLLM potrdil, da je bil ogrožen, z zlonamerno kodo, ki vsebuje lopove informacij in trojanske konje z oddaljenim dostopom, ki se distribuirajo prek glavnih registrov paketov, kot sta PyPI in Docker Hub. V ločenem, vendar povezanem incidentu je indijski certifikacijski organ eMudhra utrpel kompromitiranje svojih zasebnih ključev, kar je povzročilo zaskrbljenost zaradi možnih napadov na spletno stran, ki so primerljivi z zgodovinsko napako Heartbleed. Ti dogodki sovpadajo z nedavnimi kršitvami, ki vključujejo TiDB Cloud, aktivno izkoriščanje pomanjkljivosti strežnika Plex Media Server in doslej neznan ničelni dan v BeyondTrustovih izdelkih.
Government websites across Europe and parts of Asia went offline on Wednesday following the disclosure of two critical security vulnerabilities in PHP, a foundational programming language that powers a large share of the global web. The flaws, which had existed in the software for more than a decade, were identified using advanced artificial intelligence tools. To mitigate the risk of unauthorized access, organizations ranging from national governments to local councils took their digital services offline while awaiting the deployment of urgent security patches. The vulnerabilities allow attackers to gain remote control of web servers running PHP without requiring passwords or other credentials. The United States National Security Agency warned that the weaknesses provide a direct path to a server’s file system or database. This exposure could enable hackers to steal sensitive data, including passwords, credit card details, and personal contact information. Because PHP is embedded in major content management systems such as WordPress, Drupal, Joomla, and Magento, the potential impact is extensive. Tiffany Farriss, interim chief executive of the Drupal Association, stated that all servers using any version of PHP released in the last 20 years are vulnerable. She noted that the issue impacts the majority of the internet. The discovery process marked a shift in cybersecurity dynamics. Researchers at Wiz, an Alphabet-owned cybersecurity firm, utilized its autonomous vulnerability discovery system, Wiz Atlas, alongside Google’s Gemini 4 Argon and OpenAI’s GPT-5.6 Sol to surface the bugs. A separate effort led by OpenAI also contributed to identifying the flaws. Ryan Austin, a researcher at the cybersecurity company Calif, reportedly discovered the initial flaw in August using an advanced AI model developed by OpenAI. OpenAI stated that it had led a team of researchers addressing the critical flaw over the previous two months. The company described the incident as one of the most impactful security issues in recent memory. It emphasized that frontier AI found these vulnerabilities before attackers did, creating a window for defenders to prepare fixes. Despite the coordinated defense efforts, the situation escalated rapidly. PHP developers had originally planned to release a security update on Thursday. However, the release was brought forward to Wednesday after details regarding the work to address the vulnerabilities leaked online. The developers issued an emergency advisory urging all site owners and server administrators to update immediately. Organizations that could not upgrade their software right away were advised by national cyber agencies in Britain, Europe, Japan, and Australia to take their public-facing pages offline. Specific entities affected included the Finnish government’s website, which was partially disabled, along with sites for several local authorities in the United Kingdom. Oxford City Council and the City of Edinburgh Council took their websites offline. Pages for some BBC programmes became unavailable. In France, websites for prefectures, which are local administrative offices, were taken down. The Netherlands’ cybersecurity agency also shut down its website. Additionally, government websites in Australia and Japan were impacted. The Port of Rotterdam, the Paris police force, and the website 4Chan were among other notable sites that went dark. Certain services at Wikipedia were also temporarily offline. The timing of the disclosure coincided with a broader wave of cybersecurity incidents attributed to AI-enabled attacks. In recent weeks, criminals and state-backed attackers have used AI to hack into more than 100 companies, including John Deere and SharkNinja. Attackers also automated hacks on approximately 400 financial institutions in Latin America and stole hundreds of thousands of credit-card records. On the same day as the PHP disclosure, developers of Node.js, a platform used by nearly half of software developers, disclosed multiple high-severity vulnerabilities. Four high-severity vulnerabilities were patched in the latest Node.js release, including one that allowed remote code execution and two that permitted a TLS validation bypass. Furthermore, the open-source proxy LiteLLM was compromised by an attacker who injected malicious code. The malicious artifacts were published to PyPI, Docker Hub, and GitHub Container Registry. The code included an information stealer targeting cloud credentials, passwords, and AI service credentials, as well as a remote access trojan. LiteLLM removed the malicious releases and advised users to follow remediation guidance. Separately, the Indian certificate authority eMudra had its private keys compromised, potentially allowing attackers to issue fraudulent certificates. Security professionals described this as a massive cleanup job, comparing its scale to the historical Heartbleed vulnerability. Cybersecurity experts warn that the balance between attackers and defenders is shifting. The rate of software vulnerabilities identified per month has doubled over the past year. Meanwhile, the time needed for hackers to begin exploiting those vulnerabilities has fallen from weeks to hours. Some estimates suggest that an actual intrusion, if automated with AI, can take as little as 39 seconds. Wiz noted that pre-AI, the manual work required to exploit the PHP flaw would have been difficult to implement and scale. With AI, this is no longer a barrier. Costin Raiu, co-founder of TLP Black, stated that AI is fueling a race to exploitation, with the next step being the mass compromise of vulnerable web servers. Data from Censys indicates that approximately 1.5 million hosts out of 2.6 million indicate they are using a version of PHP for which no correction exists. The widespread reliance on open-source software maintained largely by volunteers highlights the fragility of modern internet infrastructure. Defenders have historically relied on the gap between a vulnerability being discovered and it being exploited. That gap is narrowing as AI tools accelerate both the discovery and exploitation processes. Governments and tech firms, including Google, OpenAI, and Anthropic, are currently working with agencies worldwide to shore up defenses against these emerging threats.
Pojdite k primarnim virom (4)
Uradni viri, na katerih temelji poročanje. Preberite jih neposredno in se izognite uokvirjanju.
Več pomembnih kibernetskih varnostnih incidentov se je pojavilo hkrati v globalni infrastrukturi, ki se je začela s kritičnimi ranljivostmi v programskem jeziku PHP, zaradi katerih so številne vladne spletne strani bile izključene. Ameriška agencija za nacionalno varnost je izdala opozorilo, v katerem poziva organizacije, naj takoj posodobijo svoje sisteme ali jih izključijo, da bi preprečili izkoriščanje. Hkrati je projekt Node.js razkril popravke za štiri ranljivosti visoke resnosti, vključno s pomanjkljivostmi, ki omogočajo daljinsko izvajanje kode in obiti TLS validacije. Poleg tega je odprtokodni proxy LiteLLM potrdil, da je bil ogrožen, z zlonamerno kodo, ki vsebuje lopove informacij in trojanske konje z oddaljenim dostopom, ki se distribuirajo prek glavnih registrov paketov, kot sta PyPI in Docker Hub. V ločenem, vendar povezanem incidentu je indijski certifikacijski organ eMudhra utrpel kompromitiranje svojih zasebnih ključev, kar je povzročilo zaskrbljenost zaradi možnih napadov na spletno stran, ki so primerljivi z zgodovinsko napako Heartbleed. Ti dogodki sovpadajo z nedavnimi kršitvami, ki vključujejo TiDB Cloud, aktivno izkoriščanje pomanjkljivosti strežnika Plex Media Server in doslej neznan ničelni dan v BeyondTrustovih izdelkih.
Ocena pristranskosti (Sredina): Članek poroča o tehničnih kibernetskih incidentih, ki vplivajo na programsko infrastrukturo. Medtem ko vpletenost NSA dodaja manjšo vladno razsežnost, je osrednja tema nepolitično vzdrževanje tehnologije in zmanjševanje groženj. Ton je dejanski in nujen glede varnosti sistema
Zakaj dejstva (85): This is the only article that accurately reflects the primary source. It correctly identifies the Node.js security release, specifies the four high-severity vulnerabilities (including RCE and TLS bypasses), and aligns with the source's description of the issues. It also correctly contextualizes the
Zakaj objektivnost (90): The tone is professional and informative. While it uses phrases like 'cybersecurity day' and 'surprise,' the overall presentation remains balanced, factual, and free of excessive bias or emotional manipulation.
Vlade in podjetja po vsej Evropi, vključno s tistimi finske države in različnih lokalnih svetov v Združenem kraljestvu, so bili začasno izključeni zaradi kritičnih varnostnih ranljivosti v programskem jeziku PHP. Napake, ki bi lahko omogočile daljinsko upravljanje spletnih strežnikov, je avgusta ugotovil raziskovalnik v Kaliforniji z uporabo naprednega modela AI, ki ga je razvil OpenAI. Čeprav so razvijalci PHP prvotno načrtovali popravek za četrtek, je bila izdaja pospešena, ko so se na spletu pojavile podrobnosti o popravilu ranljivosti. Ameriška agencija za nacionalno varnost je opozorila, da je pomanjkljivost zagotovila neposredno pot do strežniških datotek in podatkovnih baz, zaradi česar je britanski nacionalni center za kibernetsko varnost svetoval, naj takoj posodobijo ali odstranijo spletno mesto, če posodobitve ni mogoče izvesti takoj. OpenAI je izjavil, da je njegova udeležba pomagala pri prepoznavanju težav, preden bi jih potencialni napadalci lahko izkoristili, in opisal dogodek kot enega najpomembnejših varnostnih incidentov v novi zgodovini.
Ocena pristranskosti (Sredina): Članek poroča o tehničnem incidentu kibernetske varnosti, ki vključuje ranljivost programske opreme in organizacijske odzive. Medtem ko omenja vladne enote, ki ukrepajo, je osrednja tema tehnološka infrastruktura in varnost, ne pa politična politika, ideologija ali partijski konflikt.
Zakaj dejstva (10): The article describes a completely different event (PHP vulnerabilities) than the primary source document (Node.js security releases). It fails to mention Node.js, the specific CVEs listed in the source, or the correct timeline/details of the Node.js patch. It is entirely unfaithful to the provided
Zakaj objektivnost (85): The tone is relatively neutral and journalistic, presenting the facts of the PHP incident without heavy editorializing or emotional language, though it focuses exclusively on the wrong subject.
Times of IndiaNeodvisenSredinaDejstva 10Objektivnost 75pred 13 urami
Vladni portali in javne institucije po vsej Evropi in drugih regijah so se 21. oktobra začasno izklopile po razkritju kritičnih, več desetletij starih ranljivosti v programskem jeziku PHP. Razvojna ekipa PHP je izdala nujni nasvet, v katerem poziva k takojšnjim posodobitvam, medtem ko so nacionalne kibernetske agencije v več državah upraviteljem naročile, naj popravijo sisteme ali izklopijo strežnike, da bi preprečili izkoriščanje. Varnostna družba Wiz je razkrila, da je bila napaka odkrita z uporabo orodij, ki jih je poganjala AI, vključno z Googlovimi modeli Gemini in OpenAI's GPT, namesto s tradicionalnim ročnim testiranjem. Analitiki opozarjajo, da zmogljivosti umetne inteligence znižujejo oviro za napadalce, da obrnejo inženirstvo in izkoristijo te ranljivosti v obsegu, kar ustvarja nujno tekmo med zagovorniki, ki uvajajo popravke, in zlonamernimi akterji, ki ciljajo na nepremostljeno infrastrukturo.
Ocena pristranskosti (Sredina): Članek obravnava tehnični incident kibernetske varnosti, ki vpliva na globalno infrastrukturo. Medtem ko so vladni organi omenjeni kot odgovorni, je osrednja tema ranljivost programske opreme in njeni tehnološki učinki, ki so po naravi apolitični. Govoriti moramo nevtralno in na dejstvih.
Zakaj dejstva (10): Similar to Articles 0 and 1, this article discusses PHP vulnerabilities rather than the Node.js security release detailed in the primary source. It does not contain any verifiable information regarding the Node.js CVEs, versions, or specific technical details from the ground truth document.
Zakaj objektivnost (75): The tone is serious and somewhat alarmist ('decades-old flaw', 'race to exploit'), but it maintains a generally objective journalistic structure, avoiding the extreme sensationalism seen in Article 1.
The AtlanticNeodvisen🔒SredinaDejstva: uradni vir/dokument ni zaznanObjektivnost 40pred 12 urami
Dve kritični varnostni ranljivosti v programskem jeziku PHP, ki poganja približno 70% spletnih strani, sta bili javno razkriti, potem ko sta bila več kot desetletje nezaznavna. Odkritje je bilo omogočeno s pomočjo orodij umetne inteligence, kar je privedlo do takojšnjega obrambnega uničenja številnih vladnih, zdravstvenih in izobraževalnih spletnih strani po vsej Evropi, vključno s tistimi finske zdravstvene agencije in Rotterdamskega pristanišča. Strokovnjaki za kibernetsko varnost opozarjajo, da je umetna inteligenca temeljno spremenila prizor groženj, saj je napadalcem omogočila, da prepoznajo izkoriščanja in ustvarijo zlonamerno programsko opremo s hitrostjo, ki presega človeške zmogljivosti, kar je privedlo do naraščanja globalnih napadov na podjetja in infrastrukturo. Poleg tega je treba upoštevati, da je bila v zvezi s to dejavnostjo ugotovljena tudi drugačna ocena, kot je bila ugotovljena v zvezi s to dejavnostjo, in da je bila ta ocena izvedena v skladu s točkami (a), (b) in (c). Voditelji industrije trenutno situacijo opisujejo kot potencialno prelomnico, kjer bo avtomatizirano hekerstvo, ki ga bo vodila umetna inteligenca, preseglo tradicionalne ročne cikle popravljanja.
Ocena pristranskosti (Sredina): Članek se osredotoča predvsem na tehnično infrastrukturo in mehanizme kibernetske varnosti, ne pa na politične stranke. Medtem ko omenja vladne enote, ki ukrepajo, pripoved predstavlja težavo kot tehnološko krizo, ki jo poganja napredek umetne inteligence, in ne kot politični spor. Ton je ap.
Zakaj dejstva: uradni vir/dokument ni zaznan
Zakaj objektivnost (40): The writing style is highly dramatic and sensationalist ('total meltdown', 'devastating'), employing fear-based framing and hyperbolic language that significantly reduces objectivity compared to standard news reporting.
Kako je poročala vsaka stran
Isti dogodek, razvrščen po političnem nagibu medijev, ki so o njem poročali.
progresivno
sredina
konservativno
★
Kako je poročala vsaka stran
Podprite neodvisne novice z zavedanjem pristranskosti in odklenite družbeni utrip, glasovanje skupnosti in vse druge funkcije za podpornike.
