Approximately 70% of all identifiable websites run PHP, so this vulnerability that allows remote code execution is going to cause disruptions. The NSA recommends taking the servers offline if they cannot be updated.
https://x.com/NSACyber/status/2112903220209098897
There was less than 24 hours between the notice and the time it took for hackers to start using the exploit.
https://x.com/ThePHPF/status/2112633155631108544
Unfortunately, the exploit leaked before the patch was available. Cloudflare detected the hackers using the exploit and introduced WAF rules to help contain the spread.
https://x.com/dok2001/status/2112909127060259086
The patch is currently available and the PHP Foundation has shared more details about the incident:
https://x.com/ThePHPF/status/2112919684748320822
OpenAI models helped find the vulnerability:
https://x.com/OpenAI/status/2112907856018309586