7/ That's why we invested up to £5m in SCI Semiconductor, last month. The ONLY company bringing CHERI-based silicon to market.
Also a founding member of the CHERI alliance, SCI is spearheading the long overdue shift to memory-safe hardware.
The PHP2Shell incident is realistically more of a hardware than a software problem, and what’s crazier is the tech to stop it exists, but no one really knows about it.
The sooner the world gets serious about CHERI, the fewer PHP2Shell-style events we’ll see.
Over the past two months, we have been leading a coalition to mitigate one of the most severe bugs in open source software found in recent memory, php2shell, found as part of our Patch the Planet initiative. https://t.co/rBsz7lrlwo
6/ Patching doesn’t solve the problem in the long run.
Speeding up CHERI implementation and development is one of the most crucial moves in security. Particularly as we move to an AI first world.
Every second without hardware-first safety is just another opportunity for zero-days like this one to be exposed.