Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

🚨CrowdStrike CEO urges fast patching after AI proved the PHP flaws can be exploited, putting tens of millions of servers at risk. George Kurtz says exploiting the almost 20-year-old flaws was only "theoretical" until AI proved it could be done. That has forced everyone into a "very quick patch...

35,278 Aufrufe • vor 2 Tagen •via X (Twitter)

11 Kommentare

Profilbild von Uno2Pluto
Uno2Plutovor 2 Tagen

$PHP 🏴‍☠️

Profilbild von Yoda Jr
Yoda Jrvor 2 Tagen

If AI can prove the exploit that fast, the gap between a bug being found and being used just shrank to almost nothing

Profilbild von Doug Kennedy
Doug Kennedyvor 2 Tagen

@thelegionmaster Not good

Profilbild von Macro Bombastic
Macro Bombasticvor 2 Tagen

tbh AI finding old bugs is scary, patch your stuff man

Profilbild von Satoshi Drops 🪂
Satoshi Drops 🪂vor 2 Tagen

Same lesson for anyone running a node or bot on a VPS: an old bug is only "theoretical" until someone automates it. Patch the box, close unused ports, and keep keys off the server.

Profilbild von elena.transgirl 🩷
elena.transgirl 🩷vor 2 Tagen

AI just turned a "maybe someday" into a "fix it now" nightmare, guess my servers are getting a therapy session.

Profilbild von 8lends
8lendsvor 2 Tagen

thats actually wild old vulnerabilities keep popping back up

Profilbild von The SI Maximalist
The SI Maximalistvor 2 Tagen

SI can shorten the path from finding a flaw to building a working exploit. The crucial detail is which PHP versions and configurations are exposed, that’s what makes the server count meaningful.

Profilbild von nijinn
nijinnvor 2 Tagen

concerning how much legacy infrastructure is still exposed

Profilbild von Mind Math Money
Mind Math Moneyvor 2 Tagen

The headline's 'tens of millions' refers to servers at risk, not confirmed breaches.

Profilbild von Boo!
Boo!vor 2 Tagen

So are we all cooked ?

Ähnliche Videos

The internet is going into a LOCKDOWN. Hundreds of millions of websites are potentially at risk from cyberattacks. Governments, banks and major platforms have already taken their websites OFFLINE. Many are already calling it “Black October.” At the centre of the shutdowns is something most of us have never heard of, but use every day. PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password. Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity. Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving. Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours. Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline. Websites have gone dark worldwide, from government portals and hospitals to banks. CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit. Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each. Over 1.1 million use older versions no longer receiving official PHP updates. Older installations may need an upgrade to a supported PHP version or a fix from their software provider. And patching does not remove a backdoor an attacker may already have planted. Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections. But PHP isn’t the only security story unfolding. -Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers. -India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”. -State Bank of India confirmed 3,897 customer records on the dark web. -Criminals used AI agents to break into 400+ Latin American banks. -Capcom confirmed a breach exposing 11.7 million email addresses. -GitLab disclosed a 10/10 severity flaw in versions going back to 2014. -LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets. None of these has a confirmed link to PHP2Shell. We’re seeing separate breaches unfold together. The true number of incidents could take months to come out. The world is still on alert. Attacks are still coming.

Coin Bureau

1,976,923 Aufrufe • vor 3 Tagen