Sydney Sweeney reveals in an interview that she doesn’t care about the PHP vulnerability because she moved everything to Rust in 2024.
“They said the rewrite would take six months. We’re on month 30. We haven’t shipped a feature since, but I’m having a very normal Wednesday.”
Just used LiteLLM to create my first PHP website. The AI even suggested getting a certificate from eMudhra for HTTPS to protect my login page. The future looks really bright 🥳
> wake up
> take a shit
> get out of bed
> check beep boop
> everyone saying ooga booga PHP
> wtf why
> look inside
> ultra mega fuck off exploit coming
> php2shell
> so bad PHP devs begs nerds to patch tomorrow
> proof of concept video released
> pwn website easily
> video has dancing anime lady?
> nobody explains why dancing anime lady
> no one even asks why proof of concept has dancing anime lady
> ok
> cybersecurity nerds bamboozled
> some saying will be up there with Log4J in severity
> goopocalypse
pic unrelated
@J4ck3LSyN You just stressed out 48.4M web admins across the world by not following responsible disclosure protocols.
Brilliant work, retarded roll out.
Learn from the shame. Never do this again or people will assume you’re a bad actor.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
@rzchit@Perfekt_Shawn No need to be rude lol.
Sacred timeline is only sacred because He who remains labeled it and pruned all other timelines.
It could've been any other kang who may have won the war and pruned other TLs making his own TL as the sacred one.
After the death of his father, underage Waseem Abbas was sent to an orphanage in Multan. The orphanage administration allegedly handed him over to a cruel employer.
Waseem did not want to live with the electrician who later ran him over with a vehicle. He had reportedly run away before, but the employer brought him back. The orphanage owner should also be arrested.
But this is Pakistan, where the murderer will likely be released within a few months.
Chill, it’s only been 3 hours. He’s 5 years old so it takes time.
Anyways, we started with bijections and cardinality, moved on to countable versus uncountable infinities, Cantor’s diagonal argument, Hilbert’s Hotel, ordinal arithmetic and transfinite induction. I’m trying to get to the aleph hierarchy before bedtime, but he’s really struggling with the axiom of choice and Zorn’s lemma.
I think I’ll wait until the morning to cover the continuum hypothesis—don’t want to give him bad dreams, ya know.