Una brecha en PHPXO obliga a actualizar sistemas de siete de cada diez sitios web

La identificación de fallas críticas en cerca del 70% de los sitios web del mundo quedó a cargo, en parte, de un modelo de inteligencia artificial. El hallazgo versiones de PHP, un lenguaje de programación ampliamente utilizado por sitios institucionales, plataformas comerciales, enciclopedias colaborativas y sistemas de pequeños_VOLUME empresas.

La inteligencia artificial acortó el tiempo de detección

Vamos a los números: según el material, siete de cada diez sitios web utilizan PHP, mientras que agentes de inteligencia artificial pueden rastrear vulnerabilidades a una velocidad que supera con claridad la capacidad humana. GPT-5.6, un modelo de OpenAI que ya no es su versión más reciente,ianak contributed to identifying the flaws.

La campañaale coordinated by OpenAI with researchers and PHP’s technical team under the name “Emparchar al Planeta”. Developers released security updates and technicians around the world installed them on affected servers in the shortest possible time. Participants described the initiative as one of the largest and fastest cybersecurity response campaigns in recent history.

Alertas oficiales y medidas de protección

Entre el martes y el miércoles, governments of the United States, the United Kingdom, Japan and several European countries issued official alerts urging system administrators to act immediately. Some governments temporarily suspended services to prevent attacks while the updates were being applied.

• El riesgo alcanzaba a municipios, provincial governments, small business platforms and collaborative encyclopedias.
• A vulnerability can allow malicious actors to access a system, extract or modify private data, and reach critical infrastructure.
• OpenAI coordinated the campaign with researchers and the team responsible for PHP.
• Security updates were published and installed on affected servers as quickly as possible.

The severity of the problem also had an institutional dimension in Argentina. The Centro Nacional de Ciberseguridad, presented in May 2025, did not publish alerts on its social networks or website, which has remained “under construction” since its launch. Government sources acknowledged that no general guidance was provided.

Some organizations responded independently through their own technical teams, but there was no guarantee that all affected systems had been protected. The internal situation at the center added another complication: its first public event was scheduled for Tuesday the 20th at the Centro Cultural de la Ciencia, and the night before organizers received…