Share story
Security

PHP2Shell workaround falls short as PHP prepares October 21 fix

PHP2Shell workaround falls short as PHP prepares October 21 fix Image: Primary
GMO Flatt Security has warned that disabling PHP's Session Upload Progress feature is not a complete fix for the two flaws called PHP2Shell, The Hacker News reported. PHP plans to release fixes at 14:00 UTC on October 21 for flaws it rates 9.2 out of 10. Cloudflare says it has seen early exploitation attempts and deployed emergency firewall rules, which it describes as a stopgap. No compromise has been confirmed. PHP has not yet identified affected versions or confirmed a configuration workaround; fixed versions and full details are due with the release.
Sources
The Hacker News
In this story
Cloudflare
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

Nevis raises $70M with Schwab joining wealth software investors

Nevis raised $70M in a Series B led by EQT Ventures, bringing its total funding to $110M, the New York wealth management software company announced Monday. Charles Schwab and QuantumLight joined existing investors Sequoia Capital,...

The Next Web
Robotics Capital
Robotics Capital

Bedrock Robotics raises $600M at a $4.1B valuation

Bedrock Robotics raised a $600M Series C at a $4.1B valuation, Bloomberg reported. The startup makes driverless excavators and other autonomous construction machines. The financing adds capital to a company developing autonomous ...

Techmeme
Capital
Capital

Matiks raises $10 million to expand puzzle games and game creation

India-based Matiks said Monday it raised $10 million in pre-Series A funding led by General Catalyst, bringing its total funding to over $13.5 million. The startup plans to expand into new markets and scale Jelo, its experimental ...

TechCrunch
Security
Security

Apple patches 329 unique vulnerabilities across its software

Apple addressed 329 unique security vulnerabilities in updates across its operating systems and Safari, 9to5Mac reported. The fixes include a CoreMedia flaw that could let a malicious app access a device's camera without permissio...

9to5Mac
AI Products
AI Products

AWS makes GPT-6.1 Terra generally available on Bedrock

AWS announced general availability of OpenAI's GPT-6.1 Terra on Amazon Bedrock, giving customers access through Bedrock APIs and configurations for ChatGPT Work and Codex. The model accepts text and images and supports up to 1 mil...

Recent Announcements
AI
AI

OpenAI releases GPT-6.1 Terra at $1 per million input tokens

OpenAI has released GPT-6.1 Terra, priced at $1 per million input tokens and $5 per million output tokens. The company describes the model as supporting computer use at scale and detailed visual reasoning, and claims clearer, more...

Techmeme