• Cybersecurity researchers say the PHP vulnerability has repercussions for normal people, too.
• Even if you don't own a website, hackers could use the vulnerability to steal your information.
• One quick fix: diversify your passwords.

If you're still using the same password for everything, it might finally be time to get on that.

While the major cybersecurity vulnerabilities that OpenAI agents helped expose on Wednesday primarily impact the owners and operators of websites, it could also give hackers the opportunity to hijack your personal information, researchers said.

"Be extra careful visiting ANY web site in the next few days," Changpeng Zhao, the cofounder of cryptocurrency platform Binance, said on X.

OpenAI said on Wednesday that researchers using its AI models uncovered two "critical" flaws in the infrastructure of PHP, a popular open-source programming language used on about 70% of the world's websites.

Because digital commerce websites, for instance, can store personal shopper information in PHP systems, that information would be accessible to a bad actor exploiting the web provider's system if that provider hasn't updated it.

The National Security Administration warned that hackers using one of the PHP exploits could "steal sensitive data, disrupt services, or move deeper into a network."

"Even if you yourself are not building software and that's not where your core business is, a lot of your life does depend on companies that depend on those systems," Madeline Lawrence, cofounder of Aikido Security, an application security platform, told Business Insider on Thursday.

"And they could be deeply, deeply vulnerable," she added. She said that one day after the disclosure, cybersecurity platform Cloudflare reported millions of attempts to exploit the vulnerability.

If you do own a website, PHP has released updates it says will help shield websites from hackers. Instructions for applying those updates are available on PHP's homepage.

For everyone else, here are a few tips cybersecurity researchers say you can use to protect your info.

• Don't reuse passwords; use a password manager.
• Check for security advisories from your bank.
• Use two-factor authentication on your devices and accounts — especially for email, banking, and your password manager.
• If your data has been breached, expect more convincing scams and phishing emails.
• Turn auto-updates on and restart your computer weekly.

"You can ask your claude code to audit what on your laptop is out of date and needs updating," Peter Wildeford, head of policy at the AI Policy Network, a bipartisan nonprofit that advocates for safety guardrails and federal oversight, added in a post on X.

Though Lawrence called the vulnerability "very severe," she cautioned against people running to close their bank accounts to protect themselves.

"Assume that if you're getting a notification that your data has been leaked," she said. "Take action on that because you could have credentials or information floating around the dark web."

In the heart of the historic working-class and Latino Mission district in San Francisco, the door of a ground-floor unit next to a trendy coffee shop keeps opening. A private shuttle that ferries tech workers to their Silicon Valley headquarters farther south passes by every morning. The 796 sq.ft. (74-square-meter) apartment, recently renovated and furnished, is thoughtfully laid out, from the small open kitchen to the built-in closets. But it gets very little light. Of its two bedrooms, one has no windows. And it costs $4,750 a month.

Seguir leyendo

Years ago, when people asked Geoffrey Hinton why he worked on artificial intelligence, he would repeat a line from J. Robert Oppenheimer, one of the creators of the atomic bomb: “When you see something that is technically sweet, you go ahead and do it.”

Seguir leyendo

The upcoming U.S. midterms are not just another vote. They are on track to become a new testing ground for autonomous AI agents that first emerged in the Hugging Face attack. Experts are already warning of the potential for these “rogue agents,” seen in action this summer, to carry out more refined, dangerous and harder-to-trace disinformation campaigns and electoral interference than those observed in previous election cycles.

Seguir leyendo

Paul Krugman is the greatest econ writer in the world, and also a legendary economist. But I sometimes feel that he has a blind spot when it comes to the value of new technologies. In 1998 he famously wrote: The growth of the Internet will slow drastically, as the flaw in ‘Metcalfe’s law’—which states that […]

The post What the AI boom is actually doing for Americans appeared first on Asia Times.

The artificial intelligence (AI) race between the United States and China has accelerated in model protection, supply chains and talent controls, even as the two nations’ leaders agreed last week to open a new dialogue on AI safety. A string of moves announced or uncovered this week shows that both sides are now guarding their […]

The post US bans Chinese data center gear as Beijing grounds its AI talent appeared first on Asia Times.