1. News
  2. Alerts
  3. OpenAI · Cybersecurity
AlertOpenAI · Cybersecurity2 min read

OpenAI's AI helped find a serious flaw in code behind many websites

An OpenAI model helped spot a potentially catastrophic flaw in a programming language behind millions of sites. Website owners should check that they are covered.

By the Dashline deskSource: Bloomberg Technology
OpenAI's AI helped find a serious flaw in code behind many websites
Photo: Pauli Rautakorpi, CC BY 2.0
Act this week
What happenedAn OpenAI model helped find a potentially catastrophic security flaw in a programming language used by millions of websites and applications.
Who is affectedAnyone who runs or uses websites and apps built on that language, especially small businesses with their own sites.
What to do
  1. 1Ask your web developer or host whether your site is affected by this flaw.
  2. 2Install the latest software and security updates, or turn on automatic updates.
  3. 3Ask whether a protection service such as Cloudflare is shielding your site.
  4. 4Keep a recent backup of your website and data in a separate place.

An AI model from OpenAI helped find a serious security flaw in a programming language that runs millions of websites and apps. It was described as potentially catastrophic. Cloudflare, a company that helps protect websites, shielded sites before the flaw became public.

What changed

Security researchers hunt for hidden weak spots in software so they can be fixed before criminals use them. In this case, an OpenAI model helped identify one. The weak spot sits in a programming language, which is the set of instructions that developers use to build sites and apps. Because so many sites rely on it, a flaw there can reach a lot of people.

Greg Brockman, president of OpenAI, and Matthew Prince, CEO of Cloudflare, discussed the find in an interview with Bloomberg Technology. They talked about AI helping both sides of security.

Who it affects

Anyone who runs a website or app built on that language could be touched, especially small businesses with their own sites. Visitors and customers are affected indirectly, since a hacked site can put their data at risk. If you only browse the web, there is little you need to do yourself.

What we do not know yet

The material does not name the programming language or describe how the flaw works. It does not say whether attackers used it, or how many sites are still exposed. Those details matter and have not been confirmed here.

What to do

The alert box above lists the steps. The short version is to ask your developer or host whether the fix is in place and whether your updates are current. Then watch for word from them on whether your site was affected.

The takeaway

If you own a website, ask your developer or host this week whether the fix is in place and your updates are current.

More articles

You should really read these.

Next step

Let’s talk