Lavenie@programming.dev to World News@lemmy.worldEnglish · 4 days agoFlaw in PHP computer language leads to shutdown of websites around worldwww.theguardian.comexternal-linkmessage-square8linkfedilinkarrow-up10arrow-down10
arrow-up10arrow-down1external-linkFlaw in PHP computer language leads to shutdown of websites around worldwww.theguardian.comLavenie@programming.dev to World News@lemmy.worldEnglish · 4 days agomessage-square8linkfedilink
minus-squareOtter@lemmy.calinkfedilinkEnglisharrow-up0·4 days agoNormally updates like this are patched quietly, and sometimes without disclosing what exactly the exploit is This one was leaked early and tutorials supposedly popped up on Twitter, all before the patches were released to relevant software On top of that, it was a pretty bad exploit (RCE) So websites were taken offline because either they needed to wait for someone with experience to confirm it was patched and safe they needed to wait for an update to be sent their way
minus-squarei_am_not_a_robot@discuss.tchncs.delinkfedilinkEnglisharrow-up0·4 days agoIt’s hard to tell how many of the tutorials are real. As soon as people knew there was a problem, they were asking LLMs what the problem was and how to exploit it, and the LLMs of course make stuff up.
Normally updates like this are patched quietly, and sometimes without disclosing what exactly the exploit is
This one was leaked early and tutorials supposedly popped up on Twitter, all before the patches were released to relevant software
On top of that, it was a pretty bad exploit (RCE)
So websites were taken offline because either
It’s hard to tell how many of the tutorials are real. As soon as people knew there was a problem, they were asking LLMs what the problem was and how to exploit it, and the LLMs of course make stuff up.