PHP2Shell is a pair of exploits in code that much of the web, from WordPress to Drupal, runs on. Sam explains the memory trick behind it in plain terms and what to do: ask your agent whether you're affected, and patch.
#Shorts #PHP #PHP2Shell #WordPress #CyberSecurity
Transcript
If you're living under a rock, one of the most devastating attacks on the internet has ever seen has just taken place. PHP two shell two exploits were revealed in PHP the source code that's been in existence for nigh on 20 years. So much of the web is run by some form of PHP framework. Yeah. WordPress, Drupal. Effectively PHP you have to manage the memory of the application. You say I want to use this block of data or this block on the on the memory and when I'm done with it, I want to clean that. When you remove that function because of the way it was written, it still thinks that block of memory is being used and people have found a way to flip it and use that block of data to run their own code basically to that's why it's called PHP two shell. They now have shell access based on that little switcheroo that's happening with with the memory. Point Claude at your your environment, your code and ask it, is there any are we affected here? Fun fact in all this, I spoke to someone last night that everyone's finger was on the trigger waiting for a patch to be released. So what happened was when that patch got released, everything the whole internet just basically grinded and grunted because everyone was updating at the same time. Command AI.
Cmd+ AI