RE: https://fosstodon.org/@SocketSecurity/117479759341970308
Quantifications like "X% of the Web/Internet" are meaningless. What is the baseline? Total number of hosts? Total number of IP addresses? Total number of Web servers? Well I'm here to remind you that that total number is unknown so your count/total * 100 DOES NOT MAKE SENSE.
thank you for your attention.
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline. Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions. The vulnerabilit
FosstodonSocket (@[email protected])Attached: 1 image
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
The vulnerabilities let attackers execute code on web servers without logging in. Cloudflare is already seeing expl