政策与安全约 1 分钟阅读最近更新
OpenAI和谷歌的Wiz发现影响70%网站的关键PHP漏洞OpenAI and Google's Wiz uncover critical PHP vulnerabilities affecting 70% of websites
1 家来源 · 1 篇报道 — 来源较集中（请仔细核对）
以下内容为 AI 自动翻译，英文原文附后供参考。
摘要
OpenAI和谷歌的Wiz已识别出PHP中的两个重大漏洞，该编程语言被大约70%的网站使用。这些自2004年以来存在的缺陷构成严重的安全风险，可能允许攻击者访问敏感信息。针对这一令人担忧的发现，NSA已发出警告，敦促网站管理员更新系统或暂时下线，以减轻与这些漏洞相关的风险。
OpenAI and Google's Wiz have identified two significant vulnerabilities in PHP, a programming language utilized by approximately 70% of websites. These flaws, which have existed since 2004, pose serious security risks, potentially allowing attackers to access sensitive information. In response to this alarming discovery, the NSA has issued a warning urging website administrators to either update their systems or temporarily take them offline to mitigate the risks associated with these vulnerabilities.
要点
PHP中的两个关键漏洞可能危及70%的网站。
Two critical vulnerabilities in PHP could compromise 70% of websites.
这些缺陷自2004年以来存在，目前受到紧急审查。
The flaws have been present since 2004 and are now under urgent scrutiny.
建议网站管理员更新或关闭他们的网站以防止攻击。
Website administrators are advised to update or take down their sites to prevent attacks.
为何重要
这些漏洞的发现突显了广泛使用的编程语言面临的持续安全挑战，强调了定期更新和网络安全警惕的重要性。
The discovery of these vulnerabilities highlights the ongoing security challenges faced by widely used programming languages, emphasizing the need for regular updates and vigilance in web security.
产品经理
产品经理应优先考虑安全更新，并向团队传达解决这些漏洞的紧迫性，确保他们的产品保持安全和可信。
Product managers should prioritize security updates and communicate the urgency of addressing these vulnerabilities to their teams, ensuring that their products remain safe and trustworthy.
开发者
开发者必须保持对所使用工具中的安全漏洞的了解，并实施最佳实践以进行定期更新和安全审计，以保护他们的应用程序。
Developers must stay informed about security vulnerabilities in the tools they use and implement best practices for regular updates and security audits to protect their applications.
学生与求职者
对于学生和求职者来说，理解软件开发中安全的重要性至关重要，因为这是雇主在招聘技术岗位时考虑的关键因素。
For students and job-seekers, understanding the importance of security in software development is crucial, as it is a key factor that employers consider when hiring for tech roles.
覆盖来源
来源标题与摘录保留原文，以便核对与追溯。
TechCrunch AI
PHP Armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internetThis is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.