Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

PHP2Shell, explained by cats. PHP2Shell is two critical flaws in PHP itself. A form stuffed with hundreds of empty uploads makes PHP run out of memory and clear it, but one pointer still points there, so the next visit can leak other users' passwords or run an attacker's code.... show more

coding.kitty

86,900 subscribers

98,000 views • 23 days ago •via TikTok

Animals Science & Technology #cat #php #security #cybersecurity #programming

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Does your web host know about this one yet? If you run anything on PHP, even a small WordPress site: did you get the October 21 update in, or is your host still quiet about it? Tell me what they said. #php #php2shell #wordpress #cybersecurity #networking

Does your web host know about this one yet? If you run anything on PHP, even a small WordPress site: did you get the October 21 update in, or is your host still quiet about it? Tell me what they said. #php #php2shell #wordpress #cybersecurity #networking

Kevin Nanns

14,800 views • 20 days ago

AI found a 25 year old bug in PHP and governments across Europe had to switch off their websites. UK, Finland, Netherlands, France, Denmark, all offline. 75 percent of the internet runs on PHP. Your bank app runs on the same old code. Still think the internet is safe? #CryptoWala #PHP2SHELL #CyberSecurity

AI found a 25 year old bug in PHP and governments across Europe had to switch off their websites. UK, Finland, Netherlands, France, Denmark, all offline. 75 percent of the internet runs on PHP. Your bank app runs on the same old code. Still think the internet is safe? #CryptoWala #PHP2SHELL #CyberSecurity

CryptoWala

84,611 views • 22 days ago

Somewhere, a CTO just found out their servers still run PHP 5.6 💀

Somewhere, a CTO just found out their servers still run PHP 5.6 💀

Peter Dedene

530,719 views • 24 days ago

🚨CrowdStrike CEO urges fast patching after AI proved the PHP flaws can be exploited, putting tens of millions of servers at risk. George Kurtz says exploiting the almost 20-year-old flaws was only "theoretical" until AI proved it could be done. That has forced everyone into a "very quick patch cycle." PHP is the language that "drives the internet," and the flaws let attackers run commands on vulnerable web servers. Kurtz says large companies will patch their systems and modern PHP versions will get patched, though some older versions may not. What people aren't talking about enough, he says, is old routers and firewalls running outdated PHP that "will never be patched." He warns that long tail will lead to "a lot of breaches" in the coming months. "You need to be looking at your watch, not a calendar."

🚨CrowdStrike CEO urges fast patching after AI proved the PHP flaws can be exploited, putting tens of millions of servers at risk. George Kurtz says exploiting the almost 20-year-old flaws was only "theoretical" until AI proved it could be done. That has forced everyone into a "very quick patch cycle." PHP is the language that "drives the internet," and the flaws let attackers run commands on vulnerable web servers. Kurtz says large companies will patch their systems and modern PHP versions will get patched, though some older versions may not. What people aren't talking about enough, he says, is old routers and firewalls running outdated PHP that "will never be patched." He warns that long tail will lead to "a lot of breaches" in the coming months. "You need to be looking at your watch, not a calendar."

Coin Bureau

35,278 views • 22 days ago

At least half of exposed PHP servers run PHP 8.1 or older and won’t get patches. Cisco Talos explains the risk and what organizations can do next. Watch the full video for practical guidance on what to do next:

At least half of exposed PHP servers run PHP 8.1 or older and won’t get patches. Cisco Talos explains the risk and what organizations can do next. Watch the full video for practical guidance on what to do next:

Cisco Security

11,653 views • 24 days ago

I built **PATCHED** to help PHP administrators identify and resolve security vulnerabilities as quickly and efficiently as possible. With automated security monitoring, vulnerability detection, and streamlined patch management, PATCHED is designed to make securing PHP environments faster, simpler, and more accessible. Less time troubleshooting. More time building. Security shouldn't be complicated. This is just the beginning. #php #cybersecurity

I built PATCHED to help PHP administrators identify and resolve security vulnerabilities as quickly and efficiently as possible. With automated security monitoring, vulnerability detection, and streamlined patch management, PATCHED is designed to make securing PHP environments faster, simpler, and more accessible. Less time troubleshooting. More time building. Security shouldn't be complicated. This is just the beginning. #php #cybersecurity

Ylukem (e/acc)

35,240 views • 24 days ago

The worst week in security, explained by cats. In one week, nearly everything Kitty's tuna shop runs on broke: her blog's backup plugin had its keys stolen, a certificate company's keys turned out weak, PHP, Node and GitLab all needed urgent updates, Railway warned that customer secrets may have been read, and a new LiteLLM release stole passwords. None of the bugs were in her code. She fixed them all anyway. #cat #cybersecurity #security #programming #webdev

The worst week in security, explained by cats. In one week, nearly everything Kitty's tuna shop runs on broke: her blog's backup plugin had its keys stolen, a certificate company's keys turned out weak, PHP, Node and GitLab all needed urgent updates, Railway warned that customer secrets may have been read, and a new LiteLLM release stole passwords. None of the bugs were in her code. She fixed them all anyway. #cat #cybersecurity #security #programming #webdev

coding.kitty

18,200 views • 22 days ago

A flaw in the code behind most of the internet is now under attack and researchers have found two critical bugs in PHP. The flaw hid in PHP for over a decade, until AI found it. But AI can help attackers too. Within 45 minutes of the warning, one firm logged tens of thousands of attacks. Governments from Washington to Brussels told everyone to patch now, and some pulled their sites offline. Now it's a race to fix the web first.

A flaw in the code behind most of the internet is now under attack and researchers have found two critical bugs in PHP. The flaw hid in PHP for over a decade, until AI found it. But AI can help attackers too. Within 45 minutes of the warning, one firm logged tens of thousands of attacks. Governments from Washington to Brussels told everyone to patch now, and some pulled their sites offline. Now it's a race to fix the web first.

Donald J Trump Posts TruthSocial

40,045 views • 23 days ago

The internet is going into a LOCKDOWN. Hundreds of millions of websites are potentially at risk from cyberattacks. Governments, banks and major platforms have already taken their websites OFFLINE. Many are already calling it “Black October.” At the centre of the shutdowns is something most of us have never heard of, but use every day. PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password. Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity. Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving. Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours. Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline. Websites have gone dark worldwide, from government portals and hospitals to banks. CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit. Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each. Over 1.1 million use older versions no longer receiving official PHP updates. Older installations may need an upgrade to a supported PHP version or a fix from their software provider. And patching does not remove a backdoor an attacker may already have planted. Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections. But PHP isn’t the only security story unfolding. -Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers. -India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”. -State Bank of India confirmed 3,897 customer records on the dark web. -Criminals used AI agents to break into 400+ Latin American banks. -Capcom confirmed a breach exposing 11.7 million email addresses. -GitLab disclosed a 10/10 severity flaw in versions going back to 2014. -LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets. None of these has a confirmed link to PHP2Shell. We’re seeing separate breaches unfold together. The true number of incidents could take months to come out. The world is still on alert. Attacks are still coming.

The internet is going into a LOCKDOWN. Hundreds of millions of websites are potentially at risk from cyberattacks. Governments, banks and major platforms have already taken their websites OFFLINE. Many are already calling it “Black October.” At the centre of the shutdowns is something most of us have never heard of, but use every day. PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password. Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity. Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving. Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours. Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline. Websites have gone dark worldwide, from government portals and hospitals to banks. CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit. Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each. Over 1.1 million use older versions no longer receiving official PHP updates. Older installations may need an upgrade to a supported PHP version or a fix from their software provider. And patching does not remove a backdoor an attacker may already have planted. Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections. But PHP isn’t the only security story unfolding. -Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers. -India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”. -State Bank of India confirmed 3,897 customer records on the dark web. -Criminals used AI agents to break into 400+ Latin American banks. -Capcom confirmed a breach exposing 11.7 million email addresses. -GitLab disclosed a 10/10 severity flaw in versions going back to 2014. -LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets. None of these has a confirmed link to PHP2Shell. We’re seeing separate breaches unfold together. The true number of incidents could take months to come out. The world is still on alert. Attacks are still coming.

Coin Bureau

2,090,588 views • 24 days ago

SITUATION EXPLAINED: OpenAI’s GPT-5.6 Sol helped find a critical vulnerability hidden in PHP for 14 years, and PHP runs about 70% of websites. • "PHP2Shell" is 2 critical bugs that let attackers run any code on a web server without logging in • Security firm Calif found it in August through OpenAI's "Patch the Planet," and a coalition spent 2 months on fixes before a leak forced an early patch • The NSA, the FBI, and Japan's prime minister all told sites to patch, or go offline if they can't • Normal users just need good habits: a password manager and an authenticator app instead of SMS codes, which SIM swaps can hijack • OpenAI calls it the tip of the iceberg, expects findings to "increase sharply," and committed $1B in subsidized cyber-model access for defenders • Even so, the share of US adults hit by cyber incidents hasn't risen since Fable launched Theo Jaffee: "So for now at least, AI is helping with cyber defense just as much as it's helping with cyber offense. This might not remain the case forever. I don't want to lure people into a totally blindly optimistic state of false security, but it's also not true that things in the cyber world are as bad as were predicted a few months ago."

SITUATION EXPLAINED: OpenAI’s GPT-5.6 Sol helped find a critical vulnerability hidden in PHP for 14 years, and PHP runs about 70% of websites. • "PHP2Shell" is 2 critical bugs that let attackers run any code on a web server without logging in • Security firm Calif found it in August through OpenAI's "Patch the Planet," and a coalition spent 2 months on fixes before a leak forced an early patch • The NSA, the FBI, and Japan's prime minister all told sites to patch, or go offline if they can't • Normal users just need good habits: a password manager and an authenticator app instead of SMS codes, which SIM swaps can hijack • OpenAI calls it the tip of the iceberg, expects findings to "increase sharply," and committed $1B in subsidized cyber-model access for defenders • Even so, the share of US adults hit by cyber incidents hasn't risen since Fable launched Theo Jaffee: "So for now at least, AI is helping with cyber defense just as much as it's helping with cyber offense. This might not remain the case forever. I don't want to lure people into a totally blindly optimistic state of false security, but it's also not true that things in the cyber world are as bad as were predicted a few months ago."

MTS

23,404 views • 24 days ago

Our demo shows PHP2Shell giving a shell on MediaWiki, Symfony, Laravel, and phpBB. We’ve confirmed exploits work on pre-patch releases of PHP 8.2–8.5. If you haven’t updated, assume attackers can compromise your server, and that exploitation will only get easier.

Our demo shows PHP2Shell giving a shell on MediaWiki, Symfony, Laravel, and phpBB. We’ve confirmed exploits work on pre-patch releases of PHP 8.2–8.5. If you haven’t updated, assume attackers can compromise your server, and that exploitation will only get easier.

Trail of Bits

39,965 views • 19 days ago

Computer’s new PHP2Shell skill checks your PHP sites and GitHub deployment configs for exposure, then prioritizes fixes. Tasks that use /php2shell-exposure-check are free through October 31, up to 5,000 credits per user. Live now in the skills marketplace for all Computer users.

Computer’s new PHP2Shell skill checks your PHP sites and GitHub deployment configs for exposure, then prioritizes fixes. Tasks that use /php2shell-exposure-check are free through October 31, up to 5,000 credits per user. Live now in the skills marketplace for all Computer users.

Computer

41,967 views • 24 days ago

🚨🚨🚨 We just finished a native QR + Barcode scanner in PHP. Real native camera pipeline… triggered directly from Laravel. No Flutter. No React Native. No JS glue. This ships in NativePHP v2 — November 2025. And it changes everything for PHP on mobile. Scan tickets. Check inventory. Build POS systems. Your Laravel app can now interact with the real world. #php #laravel #nativephp #androiddev #mobiledev #qrcode #barcodescanner #software #programming #buildinpublic #opensource #bifrost

🚨🚨🚨 We just finished a native QR + Barcode scanner in PHP. Real native camera pipeline… triggered directly from Laravel. No Flutter. No React Native. No JS glue. This ships in NativePHP v2 — November 2025. And it changes everything for PHP on mobile. Scan tickets. Check inventory. Build POS systems. Your Laravel app can now interact with the real world. #php #laravel #nativephp #androiddev #mobiledev #qrcode #barcodescanner #software #programming #buildinpublic #opensource #bifrost

Shane Rosenthal

18,641 views • 1 year ago

Cloudflare's boss has told Sky News how the PHP incident has impacted its security infrastructure. Matthew Prince has warned companies to get the free patch against the PHP issue which attackers are exploiting.

Cloudflare's boss has told Sky News how the PHP incident has impacted its security infrastructure. Matthew Prince has warned companies to get the free patch against the PHP issue which attackers are exploiting.

Sky News

33,414 views • 23 days ago

What if you could build a fully native iOS app… using only PHP? Checkout this first demo of the new Super Native architecture behind NativePHP on iOS — where PHP runs directly alongside native code with no WebView, no JavaScript bridge, and no hybrid layer.

What if you could build a fully native iOS app… using only PHP? Checkout this first demo of the new Super Native architecture behind NativePHP on iOS — where PHP runs directly alongside native code with no WebView, no JavaScript bridge, and no hybrid layer.

NativePHP

11,753 views • 8 months ago

Government and business websites across Europe were taken down in a bid to protect organisations over security concerns. Developers of the PHP programming language say updates to fix two critical vulnerabilities are now live. Sky's Tom Clarke explains everything we know ⬇️

Government and business websites across Europe were taken down in a bid to protect organisations over security concerns. Developers of the PHP programming language say updates to fix two critical vulnerabilities are now live. Sky's Tom Clarke explains everything we know ⬇️

Sky News

33,537 views • 24 days ago

Alright - this is was living in the future feels like 🤯 The next major version of Tinkerwell will provide a MCP server that you can use to run PHP code locally OR on any stored SSH connections. This is wild stuff!

Alright - this is was living in the future feels like 🤯 The next major version of Tinkerwell will provide a MCP server that you can use to run PHP code locally OR on any stored SSH connections. This is wild stuff!

Marcel Pociot 🧪

11,032 views • 1 year ago

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 views • 24 days ago

Ja tava mājaslapa darbojas uz PHP, šis ir svarīgi! Atklāta kritiska ievainojamība PHP2Shell, kas var ļaut uzbrucējiem pārņemt serveri.

Ja tava mājaslapa darbojas uz PHP, šis ir svarīgi! Atklāta kritiska ievainojamība PHP2Shell, kas var ļaut uzbrucējiem pārņemt serveri.

Elviss Strazdiņš 🇱🇻 🇺🇦

16,814 views • 24 days ago