Reuters · Toby Sterling ·

The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors

The discovery of two serious flaws in PHP this week set off a global scramble to keep websites safe from hackers …

In this story PHP PHP Foundation

The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors

Lead Source

Reuters — The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors ↗

How this story grew

Coverage · 0 Discussion · 0

Oct 24Oct 26

More

PHP: PHP

The Hacker News: The Hacker News

Discussion

@juancommander.scholcommlab.ca

147 points, 103 comments r/Destiny r/CharruaDevs

Related stories

The Atlantic: An interview with Ondřej Surý, a volunteer who maintains and helps automate PHP patches, about his role in fixing two critical PHP security vulnerabilities

Forbes: A look at OpenAI's Project Daybreak, which lets vetted partners use its top hacking models to find and fix vulnerabilities and helped uncover PHP2Shell RCE bugs

Anthropic: Claude flagged 493 security issues across 25 open-source projects, covering 5M+ lines of C, C++, Java, PHP, and Python code; one went unnoticed for 21 years

Reuters: Anthropic says it found 5,500 verified vulnerabilities in April-October and Glasswing partners found 129K+ in April-July; 33K+ were critical or high severity

Ars Technica: An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004

Discuss with AI

ChatGPT ↗ Claude ↗

← Back to TechSnif