Critical PHP security flaw prompts global rush to patch vulnerable websites

·1 views

A serious security vulnerability in PHP, the programming language that underpins a large share of the web, has triggered a worldwide effort to patch affected systems. The flaw has led some government and business websites to be taken offline while administrators work to secure them. Because PHP is so widely used, the scope of potentially exposed sites is considerable. The article's source is NYT Technology, and the report focuses on the urgency of the patching response rather than on any specific attack details.

Read the full story at NYT Technology

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Switch 2 jailbroken with help from AI coding tool, modder shows custom Mario Kart World

A modder has reportedly jailbroken the Nintendo Switch 2, allowing the console to run unofficial modifications. The modder demonstrated a custom version of Mario Kart World that adds characters such as Cinnamoroll, the red Angry Bird, Peter Griffin, and Steve from Minecraft. According to a developer identified as Sammy Hajhamid, OpenAI's Codex assisted in creating the exploit, dubbed "ns2jb." The modder has shared a link to the exploit publicly. The original report from The Verge contains further details on the jailbreak.

0 comments Read more at The Verge

TechnologyArs Technica ·

Meta to Appeal $25B New Mexico Fine After State Rejected Multistate Settlement

Meta has announced it will appeal a court ruling that imposed a $25 billion fine, the largest penalty ever faced by the company led by Mark Zuckerberg. The fine followed New Mexico's refusal to join a multistate settlement. The company's reaction suggests it was surprised by the size of the penalty. The article provides limited detail beyond the appeal and the ruling itself, so the broader legal basis for the fine is not fully described.

0 comments Read more at Ars Technica

TechnologyThe Verge ·

The Browser Company to shut down its Arc browser on December 22

The Browser Company plans to discontinue its Arc browser, with the final shutdown set for December 22nd. The company had shifted its focus last year to developing Dia, an AI-focused browser, while continuing to maintain Arc. The wind-down will happen in stages, beginning with a halt on creating new Arc accounts. On November 23rd, AI features such as Browse for Me will be disabled on iOS and Android, and syncing and sign-ins will end. On December 22nd, Arc will no longer be accessible on macOS or Windows, and accounts will be deactivated.

0 comments Read more at The Verge

TechnologyThe Verge ·

PHP Flaws Were Exploited Days Before Patch Released, Amazon Reports

Amazon Threat Intelligence reports that hackers tried to exploit critical PHP vulnerabilities days before a patch became available. Amazon's security team detected a PHP2Shell exploit attempt on October 17 through a monitoring system designed to lure attackers. The flaws affect PHP, a programming language widely used across the internet, including on WordPress sites. Websites rushed to apply a fix for two critical vulnerabilities this past Wednesday. The report underscores the risk posed to sites that delay applying security updates.

0 comments Read more at The Verge