Cloudflare deploys protections against php2shell vulnerability

Thank you cloudflare. This single action would save millions of websites from getting pwnd

As big a fan of open software as I am, the combinations of open-weight LLM models that are capable of e2e cyber-penetration (even by actors that might just put in the compute and prompt it: "make me money") and the current mitigations that let those entities, that already hold too much data and power (political, infrastructure, etc), expand to become the eventual gatekeepers of the "open internet", is highly worrisome.

If you have ideas for how we can adjust to this safely and with an eventual more equal distribution of power, please do share.

For anybody running Crowdtrike are there any downsides to enabling the Linux sensor settings for "Enhanced PHP visibility" ?

Edit: may have gotten Cloudflare and Crowdstrike mixed up but might as well leave this up

After so many security issues, it’s kinda obvious to me that the present/future will need more security experts, or time invested in cybersecurity.

very very impressive how fast these guys are