-

 

PHP Ki Wo Chhupi Hui Kamzori Jisne Poori Duniya Ko Hila Diya: AI Ne Kaise Pakda 10 Saal Purana Raaz

Meta description: 10 saal se internet ke andar chhupe PHP ke bade security flaws ko AI ne dhoondh nikala. Jaaniye php2shell kya hai, kaun se sites offline hui, aur aap ko kya karna chahiye.

Tags: #CyberSecurity #PHP #AI #WordPress #php2shell #TechNews

Ek aisi khabar jo aam logon ki nazar se nikal gayi, par internet ki jad tak pahunch gayi

Socho, aapke ghar ki neev mein 10 saal se ek darar thi, aur kisi ko pata hi nahi chala. Phir ek din ek naya aur taqatwar scanner aaya aur usne woh darar dikha diya.

Internet ke saath yahi hua hai. 21 October 2026 ko duniya bhar ke security experts ne ek alert jaari kiya jisme PHP ke do gambhir flaws saamne aaye. Sarkarein, bade tech companies aur universities sab raaton-raat harakat mein aa gaye. Kuch ne apni websites tak offline kar di.

Chaliye aasaan bhasha mein samajhte hain ki hua kya, kyun hua, aur aapko isse kya lena-dena hai.

PHP hai kya? (Aur aap ise roz use karte ho, bina jaane)

PHP ek open-source programming language hai jo website ke back-end par kaam karti hai. Jab aap koi website kholte ho, PHP hi data ikattha karke use us page mein badalti hai jo aap screen par dekhte ho.

Ye 1990s ke shuruaati dino mein dynamic web pages banane ke liye bani thi, aur aaj bhi ye bahut jagah chal rahi hai:

  • Wikipedia
  • WordPress, jis par ek bahut badi sankhya mein websites bani hain
  • Online shops
  • Laravel, Symfony, Drupal jaise mashhoor frameworks

Security firm Wiz ke mutabiq PHP duniya ki lagbhag 70% websites ko power karti hai. Ise ek non-profit, PHP Foundation, maintain karta hai.

Yaani agar PHP mein gadbad hai, toh asar sirf ek-do sites par nahi, poore internet par padta hai.

"php2shell": Naam chhota, khatra bada

Wiz aur Calif ke researchers ne do vulnerabilities ka khulasa kiya jinhe naam diya gaya "php2shell". Sabse badi baat ye hai ki ye flaws kisi ek plugin ya app mein nahi, PHP language ke andar hi the. Pichle ek dashak ke versions is se prabhavit bataye gaye.

Wiz ke mutabiq sahi halaat milne par hackers:

  • Web server ka control haath mein le sakte hain
  • Sensitive data chura sakte hain

Calif ke researcher Ryan Austin ne ise apne career ki sabse serious vulnerability bataya. Wiz ne ise AI dwara dhoondhe gaye flaws mein "sabse severe" kaha, aur OpenAI ne ise haal ke samay ke sabse asardaar security issues mein ginaya.

Is khabar ka sabse dilchasp hissa: AI ne dhoondha

Ye bug naya nahi tha. Ye 10 saal se wahin baitha tha, aur insaan ya purane tools ise nahi pakad paye. Calif aur Wiz ke researchers ne advanced AI tools use kiye jo code ko insaanon se kahin tez analyse karte hain.

UNSW Sydney ke researcher Salil Kanhere ne sahi baat kahi: bugs naye nahi the, badla ye ki unhe dhoondhne ki hamari kshamta badal gayi.

Lekin is sikke ka doosra pehlu bhi hai. OpenAI ne khud mana ki AI se security flaws milte bhi hain, aur attackers ke liye offensive tools aur exploits banana bhi aasaan ho sakta hai. Matlab AI ek hi waqt par dhaal bhi hai aur talwar bhi.

Alert ke baad duniya mein kya hua?

PHP Foundation ne Wednesday ko hi patches release kar diye aur sabhi users se turant update karne ko kaha. Uske baad ka manzar kuch aisa tha:

Sarkarein aur agencies

  • US NSA ne kaha ki jo organisations turant patch nahi kar sakti, woh apne systems offline kar dein. Unke mutabiq ye flaw database tak "direct path" de sakta hai.
  • UK NCSC ne bhi aisi hi salah di aur kaha ki check karein kahin attacker ne backdoor toh nahi chhod diya.
  • EU, Singapore aur Australia ki agencies ne bhi alerts nikale.
  • Japan ki PM Sanae Takaichi ne X par logon se kaha ki aaj raat hi apni websites check karein.

Jo sites offline hui

  • Wikimedia ne kuch systems precaution ke taur par band kiye
  • Finland ki sarkar, Edinburgh council, BBC
  • Netherlands ki cyber-security agency
  • University of Geneva
  • Scotland ke kai councils aur health boards

Attacks ki raftaar: Cloudflare ke numbers hairaan karte hain

Cloudflare ke boss Matthew Prince ne jo numbers share kiye, woh is khatre ki raftaar dikhate hain:

Samay Exploit attempts
Announcement se 10 ghante pehle Hazaaron
Announcement ke 45 minute baad Das hazaar+
2 ghante baad Lakhon
Uske baad Millions

Amazon ne bhi bataya ki public disclosure se kuch din pehle hi uspar kai attempts hue the, par uski websites normal chalti rahin.

Ek aur dhyan dene wali baat: discovery ki details pehle hi online leak ho gayi thi, jisse PHP ke developers ko jaldi mein announcement karni padi. Experts ke mutabiq ab technical details public hain, toh agle kuch hafton mein aur exploit attempts aa sakte hain.

Aap par iska kya asar hai?

Aam user hain? Zyadatar logon ko kuch karne ki zaroorat nahi, kyunki ye back-end ka mamla hai. Bas do cheezein dhyan mein rakhein:

  1. Agar koi service password badalne ko kahe, toh dhyan se uski official advice follow karein.
  2. Phishing se savdhan. Is khabar ki publicity ka fayda uthakar scammers fake messages bhej sakte hain.

Website owner hain (khaaskar WordPress)?

  • Ek zaroori baat: ye fix PHP par hi lagana padta hai. Sirf WordPress ya plugins update karne se kaam nahi chalega.
  • Agar hosting company ya developer aapki site sambhalta hai, toh unse seedha poochiye ki PHP security fix lag gaya ya nahi.
  • Agar aap khud manage karte hain, toh ethical hacker Ken Munro ke shabdon mein zimmedari aapki hai. Unke hisaab se patching kaafi had tak ek Windows update chalane jaisi hai.
  • Agar turant patch ya temporary protection possible nahi, toh site ko kuch der ke liye offline karne par vichar karein.
  • Patch ke baad compromise ke nishaan, jaise backdoor, zaroor check karein.

Mera nazariya: Ye sirf ek bug ki kahani nahi hai

Is ghatna se teen badi seekh milti hain:

  1. Purana code, naye khatre. Bahut saari technology functionality ko dhyan mein rakhkar bani thi, security ko nahi. Aise "diye tale andhera" waale darar kab tak chhupe rahenge?
  2. AI ne khel badal diya hai. Jo kaam saalon mein hota tha, woh ab ghanton mein ho sakta hai, aur ye dono taraf ke liye sach hai.
  3. Patching ek aadat honi chahiye, mushkil kaam nahi. Jin sites ne update time par kiya, woh sabse surakshit rahengi.

Quick Checklist: Aaj hi kya karein

  •  Pata karein ki aapki website PHP par chalti hai ya nahi
  • Hosting provider ya developer se PHP patch ki confirmation lein
  •  Patch ke baad suspicious activity aur backdoors check karein
  • Phishing messages se hoshiyar rahein
  •  Official vendor updates par nazar rakhein


Aakhri baat

Internet ka ek bahut bada hissa 10 saal tak ek chhupe darar ke upar khada raha, aur jab woh dikha, poori duniya ko ek hi raat mein jaagna pada. Achchi khabar ye hai ki fix maujood hai. Bas zaroorat hai ki hum sab jaldi, samajhdari aur sajagta se kaam lein.

Aapki website PHP par hai? Kya aapne patch laga liya? Apna anubhav comment mein bataiye aur ye post un doston ke saath share kijiye jinki website hai.



Source: harshvardhan jha.

Comments

Post a Comment

Popular posts from this blog

पंडित देवकांत झा

-
Image
देवकांत झा: एक महान ज्योतिषी, राजनेता और समाजसेवी भारत की भूमि हमेशा से महान विभूतियों की जन्मस्थली रही है, जिन्होंने अपने ज्ञान, कर्म और नेतृत्व से समाज को नई दिशा दी है। ऐसे ही एक बहुआयामी व्यक्तित्व हैं देवकांत झा। वे न केवल एक प्रसिद्ध ज्योतिषाचार्य हैं, बल्कि राजनीति के क्षेत्र में भी उनकी एक प्रभावशाली उपस्थिति है। वे अपनी भविष्यवाणियों की सटीकता, समाजसेवा और जनहितैषी सोच के लिए जाने जाते हैं। उनकी विद्वता और दूरदर्शिता ने उन्हें लोकप्रिय जननेता और आध्यात्मिक गुरु बना दिया है।   ज्योतिष शास्त्र में अपार ज्ञान देवकांत झा ने ज्योतिष विद्या में गहरी रुचि ली और इस क्षेत्र में अपनी पहचान बनाई। उनका ज्योतिषीय ज्ञान केवल पुस्तकीय नहीं, बल्कि उनके लंबे अनुभव और गहन शोध का परिणाम है। वे वैदिक ज्योतिष, अंक ज्योतिष, हस्तरेखा विज्ञान और वास्तु शास्त्र में निपुण हैं। उनके मार्गदर्शन में न केवल आम लोग, बल्कि बड़े राजनेता, व्यापारी और फिल्मी हस्तियाँ भी अपनी जीवन दिशा तय करते हैं।  उनकी भविष्यवाणियाँ इतनी सटीक होती हैं कि लोग उन्हें आधुनिक युग का महान ज्योतिषाचार्य मानते हैं।...
Read more

Delhi’s Air: A Silent Emergency We’ve Normalized

-
Image
  Delhi’s Air: A Silent Emergency We’ve Normalized If a parent ever realized that sending their child to school in Delhi is equivalent to making them inhale thirteen cigarettes a day , the reaction would not be silence — it would be fear, anger, and urgency. But today, everything is happening openly, and somehow, we’ve accepted it. Let’s start from the beginning. On one side, we see Norway’s capital city — Oslo — clean air, blue sky, and clarity. And then we look at our own capital — New Delhi. Oslo is among the world’s cleanest capitals. Delhi? At the time of writing this blog, it stands as the most polluted capital on Earth. Every year, the same excuse returns: “It’s winter haze. This isn’t pollution — it’s fog.” No — that isn’t fog. That is smog : Fog + smoke + toxic particles = slow poison. The Damage Is Real — Even If It’s Not Immediate This toxic blanket enters our lungs silently. It irritates the airways, reduces lung function, triggers asthma, and increase...
Read more

Why Your Brain Procrastinates (And How to Beat It)

-
Image
       Why Your Brain Procrastinates (And How to Beat It) Kabhi aisa hua hai ki aapke paas ek important kaam ho jaise assignment likhna, exam ki preparation karna, ya koi project start karna  lekin phir bhi aap usse baar-baar “kal kar lenge” bol kar delay kar dete ho? Aur phir last moment par stress aur panic mein kaam complete karte ho. Agar haan, toh aap akela nahi ho. Procrastination almost har insaan ki life ka hissa hai. Sach yeh hai ki procrastination laziness nahi hoti. Yeh actually hamare brain ki natural working ka result hoti hai. Humara brain hamesha un cheezon ko prefer karta hai jo easy ho aur turant pleasure de . Isi wajah se jab bhi koi difficult ya boring kaam saamne aata hai, brain automatically usse avoid karne lagta hai. Ek Chhoti Si Story Socho ek student hai, uska naam maan lo Rohit . Usse Monday tak ek important assignment submit karna hai. Friday ko woh sochta hai, “Abhi toh bahut time hai, thoda YouTube dekh leta hoon.” Saturday ko wo...
Read more