PHP Flaws Were Exploited Days Before Patch Released, Amazon Reports

·1 views

Amazon Threat Intelligence reports that hackers tried to exploit critical PHP vulnerabilities days before a patch became available. Amazon's security team detected a PHP2Shell exploit attempt on October 17 through a monitoring system designed to lure attackers. The flaws affect PHP, a programming language widely used across the internet, including on WordPress sites. Websites rushed to apply a fix for two critical vulnerabilities this past Wednesday. The report underscores the risk posed to sites that delay applying security updates.

Read the full story at The Verge

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Switch 2 jailbroken with help from AI coding tool, modder shows custom Mario Kart World

A modder has reportedly jailbroken the Nintendo Switch 2, allowing the console to run unofficial modifications. The modder demonstrated a custom version of Mario Kart World that adds characters such as Cinnamoroll, the red Angry Bird, Peter Griffin, and Steve from Minecraft. According to a developer identified as Sammy Hajhamid, OpenAI's Codex assisted in creating the exploit, dubbed "ns2jb." The modder has shared a link to the exploit publicly. The original report from The Verge contains further details on the jailbreak.

0 comments Read more at The Verge

TechnologyArs Technica ·

Meta to Appeal $25B New Mexico Fine After State Rejected Multistate Settlement

Meta has announced it will appeal a court ruling that imposed a $25 billion fine, the largest penalty ever faced by the company led by Mark Zuckerberg. The fine followed New Mexico's refusal to join a multistate settlement. The company's reaction suggests it was surprised by the size of the penalty. The article provides limited detail beyond the appeal and the ruling itself, so the broader legal basis for the fine is not fully described.

0 comments Read more at Ars Technica

TechnologyThe Verge ·

The Browser Company to shut down its Arc browser on December 22

The Browser Company plans to discontinue its Arc browser, with the final shutdown set for December 22nd. The company had shifted its focus last year to developing Dia, an AI-focused browser, while continuing to maintain Arc. The wind-down will happen in stages, beginning with a halt on creating new Arc accounts. On November 23rd, AI features such as Browse for Me will be disabled on iOS and Android, and syncing and sign-ins will end. On December 22nd, Arc will no longer be accessible on macOS or Windows, and accounts will be deactivated.

0 comments Read more at The Verge

TechnologyTechCrunch ·

China-aligned hackers breached ConnectWise and spied on thousands of its customer companies

Microsoft has attributed the breach of IT services firm ConnectWise to a hacker group aligned with China. The attackers reportedly used AI agents to move quickly and compromise thousands of ConnectWise's customers. Through this access, the hackers were able to spy on a large number of companies. The article's source text is brief, so details such as exact timing and the full scope of the intrusion are not specified here.

0 comments Read more at TechCrunch