λL-D1 | AI for Buzzer 🍉
@naufaldi • 19,420 subscribers
Share Tips AI, SWE and Work Culture | Business Inq on [email protected] | @Bot Ambassador | @openai Codex Ambassador | Build https://t.co/J62lghozl7
Videos
URGENT. Klo web kamu pakai PHP, segera update hari ini. Ini zero-day. Cara nyerangnya bocor duluan sebelum patch keluar. NSA sampai bilang, klo belum bisa update, matiin sistemnya sekarang. 69% website di dunia jalan pakai PHP. Web pemerintah, bank, kampus, toko online, web kantor kamu. Ini kenapa? - Ada 2 bug kritis di PHP, skornya 9.2 dari 10 - Detailnya udah bocor ke publik - Attacker tinggal cari web yg blm update Penyebabnya apa? - Attacker cukup kirim 1 form atau upload file yg udah diakalin - PHP salah ngurus memory pas request itu diproses - Dari situ attacker bisa jalanin perintah apa aja di server kamu - Ga perlu login, ga perlu password Risiko klo ga update? - Attacker masuk dan pegang server kamu - Akses langsung ke file dan database - Data user, password, data transaksi dicuri - Web dirusak, ditanam backdoor, dijadiin lapak judol Siapa aja yg kena? - Semua PHP di bawah 8.5.12, 8.4.27, 8.3.36, 8.2.35 - PHP 8.1 ke bawah ga dapat patch sama sekali Apa yg harus dilakukan sekarang? - Update PHP di server hari ini, update WordPress aja ga cukup - Belum bisa update? Matiin dulu sistemnya sampai aman - Cek versi pakai php -v atau di panel hosting - Pakai shared hosting? Tagih hosting kamu hari ini juga - Masih PHP 8.1 ke bawah? Upgrade sekarang Jangan tunggu besok. Jangan anggap remeh zero-day.
λL-D1 | AI for Buzzer 🍉159,580 Aufrufe • vor 25 Tagen
Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services
λL-D1 | AI for Buzzer 🍉42,278 Aufrufe • vor 24 Tagen
Built Fernanda Gunsan’s website, based on Kitab Audio. Built with GPT-6 Astra, while keeping the data maintained through the existing Kitab Audio Google Sheet since he still needs it to edit and add information easily. Love this kind of project — building a website for an influencer that actually helps me decide which TWS to buy 😂 If you’re an influencer or reviewer and want to collaborate with me to build something like this, DM me. Free if it’s for the community!
λL-D1 | AI for Buzzer 🍉17,732 Aufrufe • vor 2 Monaten
Yuk Warga Bantu Warga! Harga Jeruk Baby Java di Malang lagi anjlok parah 😢. Garda Pangan Surabaya ngajak kamu buat jadi bagian dari solusi: Beli atau donasi jeruk langsung dari petani dengan harga yang layak, biar mereka nggak rugi dan panennya nggak mubazir.
λL-D1 | AI for Buzzer 🍉17,316 Aufrufe • vor 1 Jahr
Keine weiteren Inhalte verfügbar