Pete Outlines How AI Is Changing Cybersecurity for Developers and Crypto Users

Pete Bui explored how artificial intelligence is changing cybersecurity in a recent Learn Cardano video, describing its role in discovering software vulnerabilities, developing exploits and helping security teams respond.

The web developer discussed issues affecting PHP, Node.js, Fortinet products, digital certificates and AI tools. He also explained how he uses AI agents to review code and monitor security updates.

Vulnerabilities Across Web and Business Infrastructure

Pete began with PHP2Shell, the name given to two PHP vulnerabilities that can allow remote code execution on affected servers. He noted that both received a severity score of 9.2 out of 10.

PHP supports many websites, including those built with WordPress. Pete works as a WordPress developer and previously worked with Drupal and Joomla, two other content management systems he mentioned in the video.

He described how some organizations temporarily took websites offline while assessing their systems and applying patches. He also referred to an exploitation attempt observed by Amazon before the public announcement and to attack attempts detected by Cloudflare afterward.

The discussion extended to crypto-related websites and WordPress payment plugins. Pete noted that vulnerabilities in the software supporting those services can create opportunities for attackers to compromise them.

He also covered a Node.js vulnerability involving Brotli, a compression technology used to reduce the size of data. The issue was reported by OpenAI’s Codex Security team and can affect applications that process maliciously crafted compressed data.

Pete’s review included Fortinet products used by organizations to secure networks and give employees remote access. He referred to reports of attackers obtaining credentials and accessing devices within corporate environments.

AI Tools, Digital Certificates and Access Keys

Pete described an incident involving weak cryptographic keys associated with a group of eMudhra intermediate certificate authorities. These authorities form part of the certificate system applications use to verify servers when establishing secure connections.

He explained that a researcher recovered one of the weak keys quickly and discussed the response involving affected certificates.

Another example concerned LiteLLM, a tool that connects applications to AI models. Pete described an incident in which malicious code sought credentials, including cloud access details and API keys for AI services.

An attacker who obtains an API key may be able to use a service billed to its owner. Pete also raised the possibility of stolen access being used to support further attempts to find vulnerabilities.

The time between disclosure and patching was a recurring concern in his discussion. AI tools can help identify flaws and develop ways to exploit them, he explained, while defenders can use the same technology to investigate code and prepare fixes.

Pete referred to a public test in which a researcher placed Bitcoin on a server as an incentive to exploit a PHP vulnerability. He explained that a necessary PHP file was initially missing and was later added. In Pete’s account, the funds were taken 19 hours after the researcher issued the challenge.

[NEWSBREAK]

AI Agents and Precautions for Crypto Users

Alongside the examples of attacks, Pete described how he uses scripts and AI agents to review code, monitor vulnerability announcements and help apply updates to software dependencies.

He receives a report each morning showing what was patched overnight. After reviewing the changes, he can communicate updates to users of the plugins he maintains.

For website operators, Pete recommended checking software versions and asking hosting providers whether their PHP installations have been updated. He also encouraged developers to follow security releases for Node.js, Ruby and other tools in their environments.

His advice for cryptocurrency users focused on phishing and website verification. He recommended accessing frequently used services through saved bookmarks and checking the website address before signing in.

Pete also warned about emails that pressure recipients to resolve an alleged problem or install an urgent update. Such messages can lead to fraudulent websites designed to collect passwords or other credentials.

Before sending cryptocurrency, he recommended checking the destination address a second time.