This is an "oral record" article compiled based on the conversation regarding Nick Woodhead. Woodhead is the founder of AI company and also serves as the Chief Technology Officer for Rothco and Compubox. In an interview with Business Insider on Thursday, he stated that he has been working to address a vulnerability in the PHP programming language, which may affect the majority of websites around the world. The following content has been edited and refined for clarity and conciseness.
Every time this happens, it's like a nightmare. Since Tuesday night, I haven't slept a wink. I've now been working continuously for nearly 48 hours. Although I am CTO, I also have to manage an agency for multiple clients, as well as my own company and products. So, coordinating the time to update everything properly is really exhausting.
"Approximately 70% of the internet runs on a programming language called PHP. I myself am also actively involved in the PHP community, so on Tuesday evening I received a warning about this vulnerability and knew that the PHP team was already working on it. This gave me the opportunity to prepare in advance."
"I have some teams overseas, so I can take action with them immediately."
"This is not just a matter of applying patches. We also need to ensure that no previous information has been exposed. We already have the infrastructure in place, which makes it relatively easy to deploy patches, but this still requires a considerable amount of manual intervention."
“I know that as soon as I walk into the office on Wednesday, I’ll have to get the team to deal with this matter immediately. They’re already waiting for the patch to be released.”
People are willing to help.

"Especially at the customer level, one of the biggest problems is that we have many legacy systems that are running on older versions of PHP. These versions are no longer supported, and the official team will not release any patches for them. For these systems, we ultimately have to think of other solutions. For example, we might have to take the websites offline temporarily, or move them to a newer version like VPN."
Later on, since this is an open-source community, these patches have been applied by the community itself, or in other words, they have already been implemented. So now we are going back to work on those old systems again to apply patches to them.
"This is also one of the great aspects of PHP. There is a very large community here, and everyone is willing to roll up their sleeves and get straight to helping."
"Although I have been in management for the past 10 years, I have never been separated from code and infrastructure. I have always maintained close contact with the development team and the infrastructure team to help ensure that these issues are resolved. We have been reviewing logs and looking for any signs of intrusion that might indicate that this vulnerability has been exploited."
A hellish month
"I don't think that with the progress of AI, this will come to an end. AI has brought us many benefits, but it has also brought many negative impacts, and this is a perfect example of that."
“OpenAI has already indicated that they have discovered more of such vulnerabilities, and fortunately, these vulnerabilities have not been leaked yet. In the coming months, either these vulnerabilities will be patched, or this information will be leaked in the same way, causing the same panic.”
"I don't think we've reached the end yet. There will be many more things that happen in the future."












