r/technology • u/Radio_TVGuy • 12h ago
Security New PHP vulnerability means the Internet will have a very rough couple of days
https://appleinsider.com/articles/26/10/21/new-php-vulnerability-means-the-internet-will-have-a-very-rough-couple-of-days
2.8k
Upvotes
11
u/bron_101 9h ago edited 8h ago
Finally managed to get the patch deployed everywhere and services reenabled... what a shitshow. Various repos and mirrors getting flooded with requests and timing out made things worse.
I do think that the whole responsible disclosure process needs rethinking in the AI era. How long do we have now until AI agents start using new attacks? 15 minutes? It takes longer than that for patches to get seeded through mirrors, let alone actually deployed. We were ready and waiting for the patch and it still took us an hour or two to get it fully deployed.
When you get these kind of remote RCE in major very widely used services, I'm starting to think the only safe thing to do is shutdown services until patching is done. Before you could rely on attackers needing to get human eyes on the patch, figuring out the problem and spend a while writing exploit code. Now you can point your local unrestricted llm AI agent at PoC code and disclosures, and within minutes you have automated attacks going - worse, automated attacks with intelligence that allows figuring out maximum damage/value and chaining to other targets.
Lets not even talk about what happens if you get leaks that even vaguely hint at the issue, people send their AI tools to find the issue, and either partially (like today) or completely find the issue before a patch is even available.
Damn this has been a long day.