@GossiTheDog@cyberplace.social
2026-10-21 07:56 UTC
The PHP situation will lead to a mass of incidents - it’s one of the biggest vulns in years.
Shodan dork "X-Powered-By: PHP/" - a lot are on EOL versions with no patch. It’s also more hosts as not everybody lists their PHP version in headers.
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-21 08:07
I think PHP probably has to bring forward the release as cyber vendors who have advanced notice told customers details so now everybody is running around with details. There’s probably a conversation to be had about cyber vendors effectively reselling open-source project intelligence for profit. I don’t think it is great. Protecting the ivory tower sucks.