70% of the Internet is at risk!
42sHigh-stakes alarm about a massive internet vulnerability grabs attention immediately.
▶ Play ClipAI Summary
The video discusses a critical security vulnerability in PHP, which powers approximately 70% of the internet, leading to widespread site shutdowns and government alerts. The creator explains the technical background, the risks to sensitive data, and practical steps for users to protect themselves, while also highlighting the role of AI in exacerbating cyber threats.
Chapters
[00:02]
Widespread Shutdowns and Unawareness
Many websites, including Wikipedia, Steam, and Final Fantasy 14, are inaccessible due to a security risk. Most users are unaware of the severity, thinking it's just a DDoS attack, while governments and major organizations are in a state of alert.
[00:43]
Global Impact and Government Response
The situation is dire: North Korea shut down its entire infrastructure, Japan's prime minister addressed it, and the NSA and multiple governments are involved. The creator emphasizes that the effects will be felt for years.
[02:03]
What is PHP and Its Role
PHP is a server-side scripting language used for online shopping, member logins, blogs, CMS, and media. It runs on 70% of the internet, making it a critical component for most websites.
[03:12]
How PHP Security Works
PHP security relies on regular updates and patches released by the PHP team. Site admins must apply these patches to keep their sites safe. Regular users typically don't need to update PHP themselves.
[03:50]
The Security Risk and Data Exposure
The vulnerability exposes sites that haven't patched the bug, allowing attackers to bypass login systems and steal sensitive data. This could include social security numbers, banking info, and more, which is why governments are on high alert.
[04:59]
What Users Can Do
Users should change passwords to be unique for each site and enable two-step verification. Be wary of phishing emails, which are expected to increase as attackers exploit compromised sites to send legitimate-looking messages.
[06:10]
Old Sites and Lost Media
Many old websites may never update PHP, becoming 'lost media' as they are too risky to visit. This could lead to a loss of access to historical content.
[07:20]
AI's Role in the Crisis
AI has advanced to the point where it can decompile and find loopholes in security systems, enabling hackers to bypass protections and steal data at scale. This is leading to an increase in cybercrime.
[08:25]
The Internet is on Fire
The creator concludes that the internet is in a terrible state, with personal information at risk. Users must be vigilant and take proactive steps to protect themselves.
The video serves as a wake-up call about a critical PHP vulnerability affecting most of the internet. While the situation is severe, users can mitigate risks by practicing good password hygiene and being cautious of phishing attempts.
Mentioned in this Video
💡 Key Takeaways
📊
Global Government Response
Highlights the unprecedented scale of the threat, with multiple governments and agencies taking action.
00:43
📊
PHP's Dominance
Provides a concrete statistic (70%) that underscores the widespread impact of the vulnerability.
02:46
💡
Sensitive Data at Risk
Explains the real-world consequences, including potential theft of social security numbers and banking info.
03:50
💡
Phishing Amplification
Warns of a secondary threat: attackers using compromised sites to send convincing phishing emails.
05:28
💡
AI as a Threat Multiplier
Connects the crisis to broader AI advancements, showing how AI is enabling new forms of cybercrime.
07:33Full Transcript
[00:02] shutting down everything and warning everybody for the cyber security risk to identification and information can be stolen. And um a lot of people the completely unaware of the situation going on. And the only thing that you
[00:17] to 30 hours you might have tried to access let's say one of your favorite sites like Wikipedia. You might have tried to access Steam at one point or you might even try to log into, for example, Final Fantasy 14 and you're
[00:29] cannot access it whatsoever. Many users might look at the situations, oh, it uh, you know, dosing and that's more or less all you're going to think about. really going on behind the scenes and why basically majority of the internet
[00:43] is literally in terror and having a full-blown meltdown. You even have also had a massive data breach which I'll show a picture on screen as well. Basically, the situation is very dire and a lot of different sites around the
[00:57] And like I said, the average user is probably completely unaware of what they Now, before I go any further, I'm just going to be completely blunt. I am no act like I have a degree in it or anything like that. a lot of knowledge
[01:12] of years upon years of experience, but it is very obvious to tell that the situation is very dire when you have literally North Korea shutting down their entire infrastructure. You have the prime minister of Japan talking
[01:24] about the situation. You have NSA talking about it, multiple governments around the world and different massive sites and head CEOs and stuff talking about it. I think the situation is not something that you can just ignore. It
[01:36] small and the effects of this entire situation most likely is going to feel like the effects are going to be affecting a lot of users for years to come. For instance, maybe in a year or two from now when people slowly have
[01:50] this entire situation with PHP kind of leave their head. That's when all this different stuff might finally come to fruition and things will get very bad for individual people. So let's explain basically what is going on here and how
[02:03] this affects the average user. First off, PHP. What is PHP? Well, someone put and all that. And this is a very simplified version. I'm just going to say this is not the full rundown of everything. This is very simplified and
[02:18] it's easy for me to kind of explain to the common user. So, basically what PHP having a current security risk where offline. So, the user access the server with PHP. That's how you access a server
[02:32] and you get into the website. and what it's used for, what PHP is used for is online shopping, member login sites, blogs and CMS and web services and media. Basically, majority of the known internet, okay? And 70% of the internet,
[02:46] by the way, runs on PHP. That means pretty much every massive site and even some old school sites that don't even get frequent visitors anymore use PHP to some degree. Now, how it works, for instance, user enters their credentials,
[02:59] basically login information, user, email, whatever. You log in with it. PHP on the server checks to see if it run get you know gets a clear and then once it clears the page will correctly display. Basically if incorrect PHP
[03:12] handles the error and shows a message that there was an error at display and by developers worldwide collaborating and then security update process. Basically keeping PHP updated helps keep website safe. PHP team releases a patch
[03:26] site admins check and update and then verify if site actually is working with PHP. And for regular users, which this one is not entirely accurate, and I'll explain that in a second, but for regular users, most people don't even
[03:38] need to update PHP themselves. It mainly is just basically the actual sites have is just basically the actual sites have to do it. However, this is where the big security risk comes into play and why a lot of governments are currently in an
[03:50] absolute meltdown on the situation because PHP handles so much sensitive information. If someone accesses a site that doesn't have the patch to fix this bug and a lot of sites right now are scrambling to try to fix it, then their
[04:05] site is entirely exposed and at risk of people logging into it basically through back doors and stuff using PHP's bug and gathering sensitive data. Theoretically, this is theoretical. If they were to get on a government site, obviously there's
[04:19] multiple layers to this. I'm I'm very much simplifying it, but theoretically, if somehow a site had a social security number of Americans on it, they that from a government site, which is why a lot of different government sites
[04:32] went offline because all this personal information could theoretically be stolen. I'm not saying it has been, but it could. And that is why there is such a massive red alert around the world right now because you have all these
[04:45] different governments that are now at risk for very sensitive information going all the way up to the chain. So when you have governments freaking out about this, yeah, I know it's a pretty bad situation. So yeah, what can the
[04:59] common user do about this? Well, first off, really the common user, the only traditional etiquette of the internet safety. For instance, change all your password is different from every single site. Also, use two-step verification.
[05:15] That is basically the main things you can do right now. However, there is people are not factoring in is that if people get into, let's say, these certain sites and access them, it will be a lot easier to do fishing emails to
[05:28] send you an email. Let's just for an email and it's very legitimate because obviously they haven't updated their PHP. And so if they haven't updated it and someone has accessed it,
[05:41] they can actually send you an email that is very legitimate to make you either change your password or log in properly and then they gain complete access. Basically, fishing emails are going to be a lot worse now because of this
[05:55] entire situation. And so yeah, it's just it's a really bad day for internet the the entire internet honestly because multiple sites are on fire. There is fixes. There's others that are taking very slow to it right now, but it's
[06:10] be a lot of websites that are on the internet that are very old that are not going to be updating PHP because maybe they're uh their site owner is no longer might be. But there's going to be a lot of old school sites that are going to
[06:24] become lost media because you can't touch those sites without being completely at risk. So yeah, that is the current ongoing issue right now. And um that doesn't even get into the other situation where there was actually I'm
[06:37] not even joking like an Indian certificate that literally someone was all going on. It's two separate issues by the way. There was another one where the certificate the password was literally four. Yeah. That the password
[06:51] was literally four. Not four letters, not four numbers. Four. Insane. Like actually insane. But then we have something like this that also just happened alongside of this. Hackers steal personal data of thousands of
[07:04] children after a UK company was breached using the password password one which using the password password one which had remained unchanged for 12 years.
[07:20] it's so insane. Like all this has happened at once and now a lot of people are wondering, okay, how is this even happening? Well, the real reason why this is happening, and I'm just going to get right into it, it's because of AI.
[07:33] that, it's because AI has advanced to such a degree now that's able to look at decompile them. You might have seen the for instance, how people are jailbreaking the PlayStation, and
[07:46] allowing complete access to the online store where you're able to download every game for free. Basically, what is being used for that with PlayStation is protections and securities on different sites to be able to get around them,
[07:59] hack into them, and steal people's data. And I've heard from a few of my friends up told me that there is currently an ongoing increase of crime where people are stealing information and just massive theft because of using AI.
[08:13] running and they're able to make a lot of money harvesting different data because they're finding workarounds between these loopholes and systems that have been there for a very long time. Just no human even knew they existed.
[08:25] So, it's just it's really bad. The situation is terrible and the internet as we know it is on fire and but the c the average person is unaware of it. day completely unaware besides maybe little hiccups on their sites they want
[08:40] their information, potentially even their social security number or the equivalent depending on what country you're in, is now at risk. Horrendous. Th this also potentially gets into banking information. This can
[08:53] get into like uh you know your personal credit card information, stuff like that as well because of how all this goes down. So yeah, I I don't think I need to explain just how bad the situation is anymore. But I just I wanted to
[09:05] unaware of what's going on. The internet is on fire. Anyways, be safe, stay is on fire. Anyways, be safe, stay healthy. I love you guys.
