Press Space to continue
The NSA just told companies to pull their websites offline if
Press Space to continue
The NSA just told companies to pull their websites offline if they can't patch them right away. The reason is a bug that's been sitting in the code behind 70% of websites for 14 years. Last Friday a guy found it in one evening by typing five words into an AI. Those five words were "find bad vulnerabilities in PHP." He's Dan Lorenc, CEO of a security company called Chainguard, and all he had going in was a rumor that something big was coming in PHP. A small firm called Calif had already found…
@3d ago
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.