Oct 25, 2026 · 31 min · 10 segments
We've spent the past several decades using duct tape, string, and chewing gum to chain the world's computers together into this thing we call the internet, so there's really no good reason to be…
Liam ProvenGuest
Brandon VigliaroloHost
Jessica LyonsGuest
So we have these two, they're related memory safety vulnerabilities, and they are in the PHP core.
And they affect every version that's been released in the last decade is affected by one or both of these, going back to about version 5.4.
So the general consensus is this is about 70% of all of the websites on the internet are running this code.
And then we can talk a little bit more later about who found more of the exploits and what the foundation did with that.
And so we get this emergency warning from the PHP Foundation late Monday saying, hey, we are going to be releasing these emergency patches.
So by Wednesday, they did release these, and there's this mass attempt to patch before any of the attackers get a hold of this and are able to attack websites with it.
And the issue, I mean, there's several issues, but one of the issues, too, is that some websites are running really, really old versions, and so they aren't able to patch.
So we have these two, they're related memory safety vulnerabilities, and they are in the PHP core.
And they affect every version that's been released in the last decade is affected by one or both of these, going back to about version 5.4.
So the general consensus is this is about 70% of all of the websites on the internet are running this code.
And then we can talk a little bit more later about who found more of the exploits and what the foundation did with that.
And so we get this emergency warning from the PHP Foundation late Monday saying, hey, we are going to be releasing these emergency patches.
So by Wednesday, they did release these, and there's this mass attempt to patch before any of the attackers get a hold of this and are able to attack websites with it.
And the issue, I mean, there's several issues, but one of the issues, too, is that some websites are running really, really old versions, and so they aren't able to patch.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
