The Internet has been Hacked
カートのアイテムが多すぎます
カートに追加できませんでした。
ウィッシュリストに追加できませんでした。
ほしい物リストの削除に失敗しました。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
The Internet has been Hacked
-
ナレーター：
-
著者：
PHP security vulnerabilities, eMudhra certificate trust, LiteLLM and AI vulnerability research: Thomas Bekkers and Rudy Faile discuss PHP security vulnerabilities, eMudhra certificate trust, LiteLLM, and how AI is changing vulnerability research.
Hosts: Thomas Bekkers (@thomasbekkers) and Rudy Faile.
0:00 PHP security discussion
1:24 How researchers disclose vulnerabilities
3:44 Hosting providers and mitigations
5:24 What website owners can do
8:30 eMudhra and certificate trust
11:53 LiteLLM and software dependencies
14:12 AI and vulnerability research
17:35 Closing thoughts
WHAT TO DO
If you run PHP yourself (VPS, dedicated server, or your own containers), upgrade now.
Patched versions: 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35.
If you're on a managed host, check your host's status page or blog and confirm the update has been applied.
THE VULNERABILITIES
CVE-2026-109618: remote code execution via out-of-memory corruption.
CVE-2026-109619: remote code execution via stale global state.
Both are rated CVSS 9.2 (Critical).
SOURCES
PHP Foundation: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
Automattic: https://automattic.com/2026/10/21/php2shell/
Host: Thomas Bekkers on YouTube
Watch on YouTube: https://youtu.be/fPvT1nY0JqU