Exploit

have.

The greatest repository of human knowledge ever created.

Yeah.

It's literally on the front page of any Google search ever.

It's like, well, it might've been.

And there are some instances where certain providers were seeing what looked like probing for this vulnerability.

So, but there, but there still hasn't been, to my knowledge, any definitive, uh, Exploitation in the wild pre the patch.

So I feel like that just goes to speak volumes to the PHP ecosystem security team and everybody who was involved with that patch and everything.

It's Tuesday, October 27th.

Exploitation windows keep shrinking, PHP 2 shell is already under attack, and exploitation averages three days after disclosure.

So patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning boundary failures as live risks.

cybersecurity threats sisa confirms php2 shelf laws are now exploited in attacks sisa has confirmed active exploitation of the two php2 shell vulnerabilities which unprivileged attackers can exploit because php sits underneath many web apps and embedded management interfaces inventory exposure now and apply mitigations or patches on anything internet facing reported by bleeping computer Two critical WASM time flaws could let malicious WebAssembly modules escape sandboxes.

Hey, good one, Zimbra.

Uh, so yeah, bunch of, bunch of different, um, CVEs in Zimbra being exploited.

We've got Check Point warning about in-the-wild exploitation of its, like, secure VPN gateway, um, you know, ironically named, I guess, uh, as it turns out.

Then we've got, like, bugs in SharePoint getting exploited, and there's been something like 16 of them in the last month or two, which is just wild.

We've got, uh, exploitation of Atlassian flaws, uh, after, you know, a, a POC going out and then it's in the wild.

We've got, uh, CISA warning of, uh, what is it? Uh, was it TeamCity by JetBrains? Bugs there getting, uh, exploited.

I mean, it's just been...

It, it's nonstop at the moment, and I think people really need to get serious finally about reducing their attack surface, because you are not gonna patch, patch your way around this.

Hey, good one, Zimbra.

Uh, so yeah, bunch of, bunch of different, um, CVEs in Zimbra being exploited.

We've got Check Point warning about in-the-wild exploitation of its, like, secure VPN gateway, um, you know, ironically named I guess, uh, as it turns out.

Then we've got, like, bugs in SharePoint getting exploited, and there's been something like 16 of them in the last month or two, which is just wild.

We've got, uh, exploitation of Atlassian flaws, uh, after, you know, and a, a POC going out and then it's in the wild.

We've got, uh, CISA warning of, uh, what is it? Uh, was it TeamCity by JetBrains? Bugs there getting, uh, exploited.

I mean, it's just been...

It, it's nonstop at the moment, and I think people really need to get serious finally about reducing their attack surface, because you are not gonna patch, patch your way around this.