Cyber War 2026 (General)

by dan, (6 days ago)

PHP vulnerability found

This is a small taste of things to come. Much of the internet is held together by chicken wire and rotting twine and will be easy for AI to hack.

With the upcoming US election, this recent PHP development is particularly worrying. If one wanted to thwart an election, taking control of the infrastructure on which the election is conducted would seem to be a good place to start.

To say that PHP is ubiquitous on the Internet would be an understatement. It's not essential for the Internet and WWW to operate (like DNS and IP addresses), but it does form a foundation for much of what we see. It's right up there with HTML and Javascript with regards to processing what ends up on our screens.

An excerpt from https://www.theverge.com/tech/1015906/php2shell-vulnerability-october-2026:

How serious is it?

Very. The PHP Group says that basically any site running PHP is at risk. OpenAI, which was involved in the vulnerability research, said: “We consider this one of the most impactful security issues in recent memory.” And Wiz said it’s “among the most severe vulnerabilities discovered … in software history.”

Last night, the CTO of Cloudflare said that it was “seeing early attacks emerging.”

It’s hard to understate just how bad this could get. The vulnerabilities could allow an attacker to take full control of a server. That includes gaining access to passwords, API keys, cryptographic certificates, and databases of sensitive information. They could also execute code on those servers, turning them into vectors to attack other vulnerable servers. And, thanks to AI, it’s relatively trivial for a determined hacker to exploit these flaws now that they have been revealed.

Cyber War 2026

by dan, (2 days ago) @ dan

The host for this website, Dreamhost, has been having a lot of service disruptions, mostly to email and file management (ftp, ssh). It doesn't seem to have impacted databases yet, but if you see anything weird on https://dulandrift.formosahut.com/, let me know.

Modern society, the life we've known, is very quickly going to change, and mostly for the worse. At the very least, have cash on hand and assume you can lose all means of digital communication at any moment.

Cyber War 2026

by dulan drift ⌂, (2 days ago) @ dan

Modern society, the life we've known, is very quickly going to change, and mostly for the worse. At the very least, have cash on hand and assume you can lose all means of digital communication at any moment.

That's the big one - or one of the big ones - the recorded message that says: Due to an unprecedented cyber crisis, your money is no longer available. We are truly sorry for the inconvenience. Bye-bye.

Unsurprisingly, the Aussie Cyber-Security Department was impacted by the PHP flaw & had to go offline.
That's up there with ASIO (Aussie spy agency) having it's entire blueprint for it's new HQ stolen by CCP operatives, & Aussie defense departments installing Chinese made surveillance cameras in their buildings.

There was also a recent report that all Aussie health records were hacked by AI. Nobody knew until AI sent an email several months later to say that it had done it.

For sure that means CCP AI models have already hacked anything that can be hacked, but haven't made it public.

RSS Feed of thread