DexterKZE TEAM
Hey guys! Security news worth knowing.
PHP FLAWS
Two serious PHP flaws that let attackers run code without logging in are being actively exploited, with millions of servers exposed. They're fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, so update if you run a site.
RANSOMWARE "APOLOGY"
A ransomware attack on UNM Health in New Mexico diverted ambulances. The gang then apologised and offered free decryption keys. UNM says it paid nothing and was back up by 28 October.
WHAT DO YOU THINK?
• Does a ransomware gang apologising change anything?
• How quickly do you patch your servers and devices?
• Anyone into CTFs? What are you working on?
Sources: Palo Alto Unit 42, The Record
Got news I missed, or something else on your mind? Start your own thread in this section, I read every one :)
— Dexter
0 views