r/technology • • 13h ago

Security New PHP vulnerability means the Internet will have a very rough couple of days

https://appleinsider.com/articles/26/10/21/new-php-vulnerability-means-the-internet-will-have-a-very-rough-couple-of-days
2.8k Upvotes

289 comments sorted by

View all comments

468

u/snklznet 12h ago

Wordpress users in shambles

107

u/HeurekaDabra 11h ago

This is really interesting to follow.
Feels like half the internet slowly goes down while the news still spreads and developers franatically scan their projects just to find some php in old corners of their solutions nobody touched for years.
I'm so glad right now. My company had to take down one single server that is also just a backup.
Other companies in our group had to take down their products completely.

22

u/Single-Virus4935 10h ago

Dont forget appliances e.g. IoT, Routers, Firewalls.

Fortinet,  junioet and many others usw PHP for webinterfacea, captive portals and apis.

6

u/aurumae 5h ago

The really scary one imo is for small businesses who have a web presence but aren’t big enough to have any full time devs maintaining it. Like say you are a small press RPG publisher and you have a website and a forum that you paid some guy to set up for you fifteen years ago. They may not even hear about this issue or realize that it affects them, let alone have the know-how to update PHP.