RE: https://infosec.exchange/@ifin/117479044318252155
I'm -in- K12 network security and I don't even know where to start with in my org.... Just so many haphazardly implemented systems, both org-hosted and vendor clouds...
I sent the info to my own leadership, but who knows if/when it gets passed on to others who need to know...
I guess for now I just have to sit and pray that our TI feeds are current and that there are signatures for whatever exploits are coming.
If you are able to contact folks at local schools, governments, nonprofits, and other services to warn them about the PHP vulnerabilities, please consider doing so. These locations often do not have dedicated security staff and almost certainly have PHP assets exposed.
Infosec ExchangeIFIN - The Independent Federated Intelligence Network (@[email protected])If you are able to contact folks at local schools, governments, nonprofits, and other services to warn them about the PHP vulnerabilities, please consider doing so. These locations often do not have dedicated security staff and almost certainly have PHP assets exposed.