Post

Two major PHP remote code execution vulnerabilities fixed today: www.php.net/archive/2026... If you run PHP, take your site down until you can update. And be ready to do this again in a few days. ("If you see two ants in your kitchen, you don't have a two-ant problem.")

php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

21/10/26, 3:18 pm2 reposts21 likes

Josh Bleecher Snyder

@commaok.xyz

Can we stop the internet for a while please, I’d like to get off.

Russ Cox

@swtch.com

I had started a project (with Claude) over the summer to migrate the MediaWiki usage at oeis.org/wiki from PHP to Go, verifying byte-for-byte identical output for all the traffic we send to PHP. I had stopped kicking it forward; looks like I should just finish it before the next vulns arrive.

oeis.orgThe On-Line Encyclopedia of Integer Sequences (OEIS)

Josh Bleecher Snyder

@commaok.xyz

Oh hey, there's a third ant socket.dev/blog/litellm...

socket.devLiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI CredentialsA supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

manuel

@wldr.xyz

A few days? :) fedi.katze.sh/@elise/11747...

fedi.katze.shElise (@elise@katze.sh)Content warning: very very vagueposting