Cloudflare deploys protections against php2shell vulnerability

mentalgear

As big a fan of open software as I am, the combinations of open-weight LLM models that are capable of e2e cyber-penetration (even by actors that might just put in the compute and prompt it: "make me money") and the current mitigations that let those entities, that already hold too much data and power (political, infrastructure, etc), expand to become the eventual gatekeepers of the "open internet", is highly worrisome. If you have ideas for how we can adjust to this safely and with an eventual more equal distribution of power, please do share.

lexoj

After so many security issues, it’s kinda obvious to me that the present/future will need more security experts, or time invested in cybersecurity.

sankalpmukim

very very impressive how fast these guys are

Melatonic

For anybody running Crowdtrike are there any downsides to enabling the Linux sensor settings for "Enhanced PHP visibility" ? Edit: may have gotten Cloudflare and Crowdstrike mixed up but might as well leave this up

CrimsonRain

Thank you cloudflare. This single action would save millions of websites from getting pwnd