The PHP Foundation says its RCE patches are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors (Wired)

X: @watchtowrcyber, @thephpf, @nsacyber, @paulosyibelo, @kiwifarmsdotnet, @k_firsov, @calif_io, @geerlingguy, @obsproject, @cyb3rops, @ncsc, @cyb3rops, @j4ck3lsyn, @dok2001, @mattinformed, @jonoberheide, @alvosec, @astuyve, @mattjay, @r0ckstardev, @braydenwilmoth, @kostastsale, @astuyve, @rina4_tot, @_johnhammond, @hawolt, @isaoshimizu, @ncsc, @codewithtamara, @mattjay, @watchtowrcyber, @heyandras, @44latte, @jeftovic, @anilistco, @sagitz_, @arvidkahl, @arvidkahl, @sherrod_im, @taylorotwell, @cstanley, @marcelpociot, @magicaltux, @dok2001, @wescopeland_, @magicaltux, @lowleveltweets, @mattiasgeniar, @wordpress, @iinovacore, @udiwertheimer, @h4x0r_dz, @austen, @sagitz_, @geerlingguy, @intcyberdigest, @icesolst, @esotericpigeon, @soeckly, @blackroomsec, @jurbed, @intcyberdigest, @laravel, @acd421, @arvidkahl, @marckohlbrugge, @zekramu, @unit42_intel, @laravel, @bishara, @uwu_underground, @cyb3rops, @moyix, @tridevgurung, @burcs, @mattiasgeniar, @uk_daniel_card, @mattjay, @attrc, @tayvano_, @sagitz_, @mrpxssy, @heyandras, @ryanzohoury, @pinboard, @openhack, @lowleveltweets, and @sagitz_