@ChelseaFC | World Champion 🏆
Nottingham, England
Joined August 2012
- Tweets14.8K
- Following842
- Followers245
- Likes141K
Very dark era to be a Software Engineer
The NSA just told the entire internet to patch or go dark.
Effective immediately.
Not "please consider updating."
Not "we recommend patching at your earliest convenience."
Patch or unplug.
Those are the options.
The NSA doesn't issue advisories for every vulnerability.
They issue them when something is bad enough that the spy agency whose entire job is breaking into systems is worried about other people breaking into systems.
PHP powers 43 percent of the web.
The NSA just told 43 percent of the web to stop existing until it gets fixed.
Or patch in the next 24 hours and hope the attackers haven't already gotten in.
Most organizations are picking option three.
Taking it offline.
Safer to be unavailable than compromised.
The Dutch Parliament already did it.
Finland's government already did it.
University of Vienna already did it.
Now the NSA makes it official.
"If an immediate update is not feasible it is recommend that organizations take the system offline until it can be fully mitigated."
Translation: you can't patch fast enough so just shut it down.
Patch takes 30 minutes.
Testing takes hours.
Deployment takes longer.
Meanwhile attackers are already inside.
So the NSA's advice is logical.
If you can't patch in 30 minutes go offline now.
Don't wait for the attacks.
Don't test first.
Don't coordinate with stakeholders.
Just unplug it.
The NSA will follow up with more specific guidance.
Which is intelligence agency speak for we're watching the attack traffic and we'll tell you what else they're doing with the access they already have.
CBO retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
The state of Man United💀
CBO retweeted
a critical vulnerability was just discovered in PHP. the language that runs 80% of the internet
severity score: 9.2 out of 10. that’s about as bad as it gets
what can an attacker do with this? take full admin control of a server. steal entire databases. passwords, credit cards, payment histories. plant malware and use the server to attack other systems
but here’s the terrifying part that most people missed
the moment the patch drops tonight attackers are expected to use AI to reverse engineer what was fixed within 15 minutes
15 minutes. that’s the window between the fix going live and automated attacks launching worldwide
every online store, booking site, and corporate system running PHP that doesn’t update in those 15 minutes becomes a target
this isn’t just a developer problem. if you’ve ever signed up to a website, entered your card details, or created an account online your data is sitting on servers that might be vulnerable right now
and someone just publicly dropped the working exploit on twitter before the patch was even ready. gave every attacker on earth a head start
engineers worldwide are pulling all-nighters tonight to patch their systems before the attacks begin
change your passwords on any service that matters to you. enable 2FA everywhere. and watch out for fake “maintenance” or “password reset” emails over the next few days
the internet is about to have a very long night
Pure box office. We will be there!!
🚨Amazon has been recording Manchester United’s season for an “All or Nothing” series
United have lost their opening match to newly promoted Hull
Conceded a last minute equalizer to Everton
Lost to 10 man Manchester City
Have had JJ Gabriel request to leave the club
Lost to Brighton after being ahead by 2 goals
Lost to Atletico Madrid in the Champions League
Lisandro Martinez publicly criticized the club’s ambitions
Concede after 2 minutes vs Como
0 wins in their last 6 matches
CBO retweeted
Weeks ago, I started building Worldfolk-a world where we can experience Accra through a game 🇬🇭🎮
Building this alone hasn’t been easy 😂 Every street, building and small detail takes time, and there’s still so much to do to bring the city to life.
I can’t wait for @georgeranch and @koboateng engines to be ready. I’d love to use them to take Worldfolk further.
For now, I’m opening up the project to anyone who wants to contribute. Whether you code, design or create art, I’d love for you to be part of building this world.
Contribute: github.com/samuelaidoo45/wor…
Explore: worldfolk.world/
