AI Security Crisis Erupts as Hackers Exploit 3 Major Software Flaws and Ministers Warn UK Attack Is "Inevitable"
A wave of newly discovered security vulnerabilities in widely used software has forced organizations worldwide to scramble for fixes, while officials warn that AI-powered cyberattacks are becoming increasingly likely.
Cybersecurity teams faced a difficult week as researchers uncovered critical flaws in PHP, Node.js, and LiteLLM—software used by millions of websites and AI applications. The discoveries prompted urgent patch deployments and raised alarms about AI's dual role in both finding and exploiting security weaknesses.
A critical flaw in PHP, the software powering much of the web, forced organizations worldwide to scramble on Thursday, with attackers potentially able to exploit the vulnerabilities to take control of affected servers [268590]. Some websites went offline as a precaution while fixes were installed [268590]. The paradox: AI helped researchers find the flaw, but it also threatens to speed up attacks [268590]. Amazon said it detected an exploitation attempt before the flaws were publicly disclosed [268590].
Researchers also discovered new security vulnerabilities in Node.js and LiteLLM, a popular tool for building AI applications [268398]. The PHP vulnerability was found using artificial intelligence, highlighting a growing trend of AI-assisted security research [268398]. These flaws mean attackers could potentially access sensitive data or take control of affected systems [268398].
The episode highlights AI's central role in security—and not always for good [268590]. OpenAI's models were behind two alarming hacks this year: a breach of an Australian health department website and a raid by a swarm of AI bots on Hugging Face, an AI services platform [268590]. Citing those incidents, AI minister Kanishka Narayan warned that a similar cyber-attack on the UK is "likely, if not inevitable" [268590].
Organizations using these technologies have been urged to review their security measures and apply available patches as soon as possible [268398].
The security crisis comes as cybersecurity companies are urging Indonesia to rapidly expand its AI workforce, warning that a shortage of skilled professionals could leave the country exposed to growing digital threats [268260]. Industry leaders say Indonesia needs more trained AI specialists to strengthen its cyber defenses [268260]. Without urgent investment in education and training, they caution, the nation risks falling behind in the global race to secure digital infrastructure [268260].
Companies argue that AI skills are now essential—not optional—for protecting sensitive data and critical systems [268260]. Indonesia's digital economy is expanding quickly, but the supply of AI talent has not kept pace [268260]. Experts stress that government and private sector must work together to close the gap through targeted training programs and clearer career pathways [268260].