dziya

[Matthew Prince 🌥 @eastdakota]

Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server.

tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible.

The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this.

The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed.

@Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged.

For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free.

Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem.

If you’re interested in learning more, you can read our blogs:

Vulnerable roots: https://t.co/TR77Zd01A0
PHP vulnerabilities: https://t.co/qTUK8i3Oww

[Young child/golden retriever @EggMasonValue]

BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same

[#taola ⚕ @angiechuma]

Nguni necklaces from the 19th century 😍

[Typical African @Joe__Bassey]

Every disease on earth has always been cured with herbs, but westernization has made most of us demonize our herbalists just to patronize and pay heavily for drugs.

[Vivien Odin @loadedvivi4ever]

The Dinka people of South Sudan are widely known for their remarkable height and are often described as one of the tallest ethnic groups in the world.

[Vuka Africa @Thisthat_Acadmy]

Ladies and gents come this side Eugene is cooking 🔥 🔥 🔥

[Historical Africa @historical_Afr]

✊🏾✊🏾✊🏾

[Sophie Mokoena @Sophie_Mokoena]

Mozambique is still recovering from the Apartheid regime destruction.

[dziya @dziyaguru]

@Joe__Bassey 🙏🏾

[Typical African @Joe__Bassey]

May the soul of Samara Machel, murdered on this day in 1986 by Apartheid South Africa rest in peace 🕊️

[EXPLOREREYES @Gary161718]

Early mornings on safari are when the African bush feels most alive and most honest. Before the heat builds, while the air is still cool and the light is soft and golden, the savanna runs on its own ancient timetable.
Hwange National Park.
[email protected]

[dziya @dziyaguru]

@kemonoPorceline 🤣

[Mario Nawfal @MarioNawfal]

🇫🇷 Macron on France's riots:

"There has been foreign manipulation of information afterward

This led to unacceptable and downright stupid comments from many people, including foreign leaders.

People have claimed that we were invaded by hordes of migrants and Islamists, which is completely false."

Apparently, France's problems can all be explained by AI-generated images and foreign interference.

They talk to us like we're idiots...

Writer: Samuel

[J @jbulldogs4]

Televangelist Kenneth Copeland claims he was shown the punishment those who didn't vote for Trump will face on Judgment Day: They'll spend eternity listening to the names of all the babies killed by abortion

[𝟲𝗶𝘅𓅓 @six_papi]

Do other African countries have roads named after Robert Mugabe in their capitals, just as we have roads named after Nelson Mandela, Samora Machel, Kwame Nkrumah, Julius Nyerere, and Kenneth Kaunda in Zimbabwe?

[dziya @dziyaguru]

@mamakaCleo Rhodesia rhymes with Amnesia .. anyway way, forget it.

[EXPLOREREYES @Gary161718]

Soaking in paradise a local resident takes in the breathtaking views of the mighty Zambezi Rapids.

This is precisely why we say a journey here has the power to heal your soul.

The Zambezi Zimbabwe.

[Experience Zimbabwe @CurateZimbabwe]

A journey from Gweru to the engineering heart of Formula One.

Zimbabwe has every reason to be proud. 🇿🇼

Emmanuel Muzangaza is an engineer at Aston Martin F1, specialising in metal 3D printing and additive manufacturing, after working at the MTC on Rolls-Royce projects.

His story sits alongside those of other Zimbabwean engineers:

---> Samantha Nyikadzino, an electronics design engineer at Mercedes Formula One, and

---> Stephanie Travers, an engineer who specialised in trackside fuel and lubricant analysis for Petronas supporting Mercedes Formula One.

These Zimbabweans have earned their place in one of the world’s most technically demanding and competitive fields.

For a small country, that’s an outsized contribution - and a powerful reflection of Zimbabwe’s STEM culture: valuing maths, science and education, then building on those foundations through global experience.

Zimbabwe 🇿🇼

[Hon Lt Gen (Rtd) Amb. AN Sanyatwe @HonMinSanyatwe]

On Saturday, 24 October 2026, our National Rugby Team, #Sables will be playing against Namibia at the National Sport Stadium. Let’s go and rally behind our Boys!

Kick-off: 15:00 CAT
Get your ticket now at https://t.co/vIEBaOCQMl