For security researchers who want to inspect the PHP2Shell CVEs:
Source analysis, defensive verification scripts, and references are public.
https://t.co/oTkpAMuFYj
Reproduce responsibly. Patch your PHP installations.
For security researchers who want to inspect the PHP2Shell CVEs:
Source analysis, defensive verification scripts, and references are public.
https://t.co/oTkpAMuFYj
Reproduce responsibly. Patch your PHP installations.
For security researchers who want to inspect the PHP2Shell CVEs:
Source analysis, defensive verification scripts, and references are public.
https://t.co/oTkpAMuFYj
Reproduce responsibly. Patch your PHP installations.
🚨 PHP2Shell is extremely dangerous. And AI just changed the game.
We tasked OrcaCyber Zero 1.5 (https://t.co/HwAp9B4NHT) with investigating the critical PHP RCE vulnerabilities.
It autonomously built a complete working proof-of-concept (PoC).
Due to the severity of these vulnerabilities and their potentially massive impact across the web, we've decided NOT to publish the exploit code or technical details.
Here's what makes this particularly scary:
Your WordPress could be fully updated. Your plugins could be patched. Your website could STILL be vulnerable because the flaw is in PHP itself.
Millions of PHP-powered websites may be exposed. Not every PHP installation is necessarily exploitable, but the potential attack surface is enormous.
If you're running PHP, upgrade to a supported, security-fixed version ASAP.
For security researchers who want to inspect the PHP2Shell CVEs:
Source analysis, defensive verification scripts, and references are public.
https://t.co/oTkpAMuFYj
Reproduce responsibly. Patch your PHP installations.
The vulnerability tsunami is real.
But asking defenders to survive 18 months without AI with airgapping is like asking them to fight automated attacks manually.
Yes, fix the basics. But the scale of what’s coming demands a new approach.
AI is accelerating vulnerability discovery. AI must also accelerate defense.
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
Two whales. One ocean. 🐳
Codewhale × OrcaRouter.
30% more DeepSeek V4.1 Flash tokens. Same money. More tokens. More shipping.
The whales are just getting started.
Codewhale x @OrcaRouter
Whale bros, sign up through our link and any top-up ($10+) gets you 30% extra DeepSeek v4.1 Flash usage!!
https://t.co/ZPA9dV4lFA