🚨 The developers of PHP have just released new versions that patch two critical vulnerabilities that could allow remote code execution on any website running PHP (which is virtually all of them). www.php.net/archive/2026...
84 reposts206 likes
🚨 The developers of PHP have just released new versions that patch two critical vulnerabilities that could allow remote code execution on any website running PHP (which is virtually all of them). www.php.net/archive/2026...
84 reposts206 likes
Wiz: "These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history." www.wiz.io/blog/php2she...
OpenAI, whose model helped researchers discover the vulnerabilities: "Given the severity of these flaws and PHP’s widespread use, we consider this one of the most impactful security issues in recent memory." openai.com/index/coordi...
Today's xkcd: xkcd.com/3314/ Anyone curious about the story behind this comic won't be able to check explain xkcd today, because they took their website down due to the vulnerability: www.explainxkcd.com
My initial story on the PHP vulnerabilities: www.cybersecuritydive.com/news/php-web...
The Verge reported Wordfence's warning that every WordPress site will be vulnerable and the fix can't be installed through automatic updates, so manual patching may be needed quickly. https://vocemundi.com/php-developers-to-release-patches-for-two-critical-flaws-agencies-advise-isolating-systems/