Calif✓
@calif_io
We're https://t.co/KTEDnC3tKt. Join us to make the Internet safer for your mum and everyone else: https://t.co/eUFMLkWHiA.
34 Following17.3K Followers273 Posts
- CalifRT @lcfr_hax: Team work makes the dream work <3 We wanted to do something a bit different than using LLM's to generate all the pieces from exploit, writeup and art. We decided on a human created comic to offset the LLM usage in our release, that tells the tale with some exaggerated scenarios inspired from a few movies. If you liked the art (or want your own exploit story/comic..) check out her work atCalif @calif_ioDo you know who illustrated the comic on Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax. This artist-hacker couple has the best story, stay tuned!0190191
- CalifRT @infosec_au: Just published our high fidelity scanner for php2shell: See our detection logic here: We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.0510208
- CalifRT @NSACyber: UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here:NSA Cyber @NSACyberEffective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.06860206
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.1.3K10.8K70.3K12.5M- CalifRT @eastdakota: Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.02.5K0215
- CalifRT @wiz_io: AI tools helped find one of the most severe online bugs ever #php2shell In our latest episode of Crying Out Cloud, Amitai Cohen sits down with @sagitz_ (Wiz Research) and Thai Duong (@calif_io) to unpack the massive PHP2Shell vulnerability0110278
- PM of the Netherlands is closely monitoring situation surrounding the vulnerabilities in PHP. Hmm does it mean that he’s watching the heap?!Rob Jetten @MinPresHet kabinet volgt de situatie rond de kwetsbaarheden in PHP nauwgezet. Het advies van het Nationaal Cyber Security Centrum @ncsc_nl is helder: installeer de patch direct en houd kwetsbare systemen offline tot dat is gebeurd. Websites als DigiD en MijnOverheid komen weer online zodra dat veilig kan.9513413.4K
Het kabinet volgt de situatie rond de kwetsbaarheden in PHP nauwgezet. Het advies van het Nationaal Cyber Security Centrum @ncsc_nl is helder: installeer de patch direct en houd kwetsbare systemen offline tot dat is gebeurd. Websites als DigiD en MijnOverheid komen weer online zodra dat veilig kan.David van Weel @ministerjenvDe impact van de PHP-kwetsbaarheden kan fors zijn en daarom adviseert @ncsc_nl partijen hun website tijdelijk offline te halen om misbruik te kunnen voorkomen. Er is nu een patch die deze kwetsbaarheden verhelpt.21092578146K- We guess you could say things are gettin' pretty serious when the Prime Minister of Japan is urging everyone to update PHP.高市早苗 @takaichi_sanae皆様に、今夜に対応して頂きたい大至急のお願いです。 多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。 公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。 修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。 国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X61520317.2K
皆様に、今夜に対応して頂きたい大至急のお願いです。 多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。 公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。 修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。 国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X5K89.1K396K101M- “forget helping CSPs, this is probably the most significant moment in securing the internet -- taking 4chan down” —@justdionysus
6415711.9K - CalifRT @itszn13: php2shell is the most consequential vulnerability I have ever helped discover. I am proud of how our team worked closely in coordination with the PHP Foundation to provide support and to harden the patch in preparation for this release. Please read more about our approach:OpenAI @OpenAIOpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.01510275
- CalifRT @justdionysus: Fancy human generated comics, a good story, and an annoyingly pervasive root cause. Yes, it’s exploitable. Yes, it’s exploitable under ASLR. Yes, disclosure was eventful. @lcfr_hax hacked the planet and then tried to patch itCalif @calif_iophp2shell - A tale of two PHP remote vulnerabilities:070288
- CalifRT @OpenAI: OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.02.8K0252
- Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.LCFR @lcfr_haxd935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac533722.7K324K
