_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
AI finds the bugs
Researchers at Calif and Wiz use AI models and land on the same two flaws separately. Humans had walked past them for years.
_ _ _____ _____ _______ ______ | | | | __ \| __ \ /\|__ __| ____| | | | | |__) | | | | / \ | | | |__ | | | | ___/| | | |/ /\ \ | | | __| | |__| | | | |__| / ____ \| | | |____ \____/|_| |_____/_/ \_\_| |______|
Software update
You have clicked Remind Me Tomorrow for about ten years. Two critical bugs in PHP were still sitting there when AI finally looked. $UPDATE is the ticker for everyone who postponed it.
Drops at launch
PHP2Shell: two critical unauthenticated remote code execution bugs in the PHP core. A stranger sends a crafted request and runs code on your server. No login needed. Nicknamed Black October and Bugmageddon.
Swipe through how it happened.
_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
Researchers at Calif and Wiz use AI models and land on the same two flaws separately. Humans had walked past them for years.
_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
PHP maintainers, Wiz, Cloudflare and OpenAI work on fixes in secret for about two months.
_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
Nearly every PHP version from 5.4 through 8.5 is affected. The internet reads the headline and opens a terminal.
_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 go out. The only complete fix is updating.
_ _ ___ ___ _ _____ ___ | | | | _ \ \ /_\_ _| __| | |_| | _/ |) / _ \| | | _| \___/|_| |___/_/ \_\_| |___|
Cloudflare sees millions of attack attempts per minute. Some European governments pull sites offline. The FBI and GCHQ say update now.
Scroll sideways for more
Three steps. Faster than a PHP upgrade.
Phantom or any wallet you already trust.
Send SOL from an exchange to your wallet address.
Open the Pump.fun link once it is live and swap. Do not postpone it.