Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis

One day after governments around the world warned that newly publicized software vulnerabilities were so severe that websites should consider going offline until they could fix them, experts and insiders said there are few, if any, reports of widespread damage.

That could still change, of course, and cybersecurity experts warn that the threat will remain for weeks, if not longer. Still, there were early signs Thursday that hackers were finding it difficult to capitalize on the vulnerabilities.

“Across all our telemetry, and we are looking hard, we have only seen a couple of real exploitation attempts,” said Don Smith, vice president of threat research at the British software security firm Sophos.

Experts agree that that was in part because of a behind-the-scenes, global effort that identified the flaw and quietly designed a fix to address it.

The effort was aided, inadvertently, by the current limits of some widely available AI models, which did not appear to be very helpful at exploiting the vulnerabilities. And perhaps, they said, a little bit of luck.

“My sense is that these [vulnerabilities] are harder to exploit than folks thought at first, so this could be a slow burn,” Smith said.

The flaws were in…

Original source: https://www.nbcnews.com/business