Doug Hurley, #NASA astronaut, flew on Space Shuttle missions STS-127 (2009) and STS-135 (2011), the final shuttle flight. In 2020, he piloted SpaceX's Crew #Dragon Demo-2, the first U.S. crewed launch since 2011, bridging NASA's shuttle era with commercial spaceflight. #isaase
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Last night's slopfest surrounding the bogus PHP exploit and the subsequent panic wave is a perfect example of why good cybersecurity researchers are still needed, why LLMs are not infallible, and why critical thinking cannot be automated away.
AI can accelerate research, but clanker confidence is not evidence and consensus built on unverified claims in the end is still just speculation.
Next time we might not be so fortunate, so maybe as a community we need to tighten and review how we handle patching and assume leaks will happen and be prepared to counter that.
Impacted organizations should immediately disable this application (ID: 506e08f9-6e9a-4da4-942b-a099a03644ae) in the Entra Admin Center, following the instructions here.