Rush is on to patch AI-discovered software vulnerability that could impact 70% of websites worldwide

The two critical flaws identified by AI could allow bad actors to get unauthenticated access to sites which, in theory, could allow them to control a web server remotely without needing a password, said James Sullivan, Director of Cyber and Tech at the Royal United Services Institute in London. That could allow a hacker to steal data, alter data or use the system as a platform from which to launch other attacks, he said. Taking websites offline while fixing the problem is “good practice,” and appropriate cyber risk management but it’s “staggering” that some of the flaws are more than a decade old, Sullivan said.