logoalt Hacker News

vldszn • yesterday at 11:11 PM • 7 replies • view on HN

Crazy day for cybersecurity: PHP RCE, eMudhra certificates, and now Railway.

And it’s all just getting started imo.

https://blog.cloudflare.com/emudhra-certificate-compromise

https://www.wiz.io/blog/php2shell-php-rce

Replies

netvarun • yesterday at 11:28 PM

I think the pingcap hack might be the biggest of them all, somehow it has gone under the radar.

[0] https://news.ycombinator.com/item?id=50173716

➕ show 6 replies
SlightlyLeftPad • yesterday at 11:39 PM

And about 50+ sev 9+ CVEs for the linux kernel

bokchoi • yesterday at 11:23 PM

And litellm too

➕ show 1 reply
reducesuffering • today at 1:43 AM

"It's just marketing" HN mostly told us

wunderwuzzi23 • yesterday at 11:19 PM

[dead]