Independent investigative journalist. Covers cybercrime, security, privacy. Author of 'Spam Nation,' a NYT bestseller. Former Washington Post reporter, '95-'09. Signal: briankrebs.07
krebsonsecurity @ gmail .com
Linkedin: https://www.linkedin.com/in/bkrebs
Expect quite a few sites to return 404 or page not found errors today and possibly through the week. Here's my piece on the new PHP zero-day that affects about 70 percent of the Internet. We'll be updating the story with important new developments.
https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/
These new PHP vulnerabilities are a big deal, y'all. My admin tells me in-the-wild exploitation was seen earlier today. There are apparently several proof of concept exploits floating around that let you send arbitrary commands to the server.
Ars TechnicaPHP warns it plans to release 2 emergency patches imminentlyUnconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Zomg! Chloe lowered the price yet again. Seriously, people don't let this opportunity slip away. The early bird gets the worm but the second mouse gets the cheese.
