Basically media literacy lesson: anytime a headline says "x .. after y" enquire as to why they didn't say "because y"
It strikes me that advertising "abliterated model inference services" is probably a good way to get a bunch of people to feed you unpatched vulnerability intel over an api
GLM refusals are funny because it will start having full on debates with you about the ethics of what you're doing, including whether the extent of weaponisation is necessary for that specific bug class
It's so much more entertaining than just :cyber:
Honestly I don't really care what Joe Tidy knew about web development when the people throwing the shade are responsible for environments that were running PHP 5/7 in 2026
mopman retweeted
OK, serious question. About 2/3 of our customers are on PHP 7.3, one is on 5.6 (all on Windows, Apache 2.4, PHP started as a Fastcgi process, not Apache module). They can't install the latest PHP. We've done the recommended PHP settings mitigations, but they are not enough.
I feel like 'attempts' is covering a wide variety of activity here
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
CVE-2026-109618 / CVE-2026-109619 Mass-Exploitation Mitigation #php2shell
In fix.php:
header("X-Powered-By: Express");
In .htaccess
php_value auto_prepend_file "fix.php"
Make sure expose_php = Off in php.ini
Then have a beer
Must admit I've had a lot of burnout lately, if AI is going to replace security practice etc. The Stargate SG1 line where the superintelligence forgets how to be creative, humans are still important never really rung true for me
But all this PHP slop really brought me back, thx
There sure is a lot of "irresponsible php, don't they know AI can just instantly write an exploit with nothing but dust and a vague hint these days"
I'm pro AI assisted VR ofc - everyone now is. But did you try it? How reliable was your shell?