noxx retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
noxx retweeted
PHPなんて使ってないから高みの見物
と思っていたNode.js開発者の諸君、今夜は徹夜です
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulnerabi…
noxx retweeted
PHP just keeps giving vulnerabilities it’s a beautiful language to keep everyone employed
noxx retweeted
It took Railway almost 15 hours to notify its thousands of customers that their environmental variables have been compromised. Several people on this app raised alarm about their keys being drained and/or receiving "your key has been compromised" emails
Super irresponsible
An urgent notice from the Railway team
blog.railway.com/p/security-…
