x.comthreadTrail of Bits (@trailofbits) on X
Trail of Bits post on two unpatched critical PHP bugs that were exploited within 17 hours of details leaking. Cloudflare began blocking attacks and Patchstack reported active exploitation. The bug was reported 11 August and fixed 71 days later, with a patch touching 402 files and over 11,000 lines. Trail of Bits announces two open-source plugins, patching-bugs and regression-hunt, from its Patch the Planet work.
TL;DR Trail of Bits uses the PHP exploitation-within-17-hours incident to argue for faster AI-assisted patching and releases the patching-bugs and regression-hunt plugins.
Also seen from another angle🧠 AI →
Technologies named here
- patching-bugs
- Systems running PHP
- regression-hunt
- PHP
- Cloudflare
- Trail of Bits
- Patch the Planet
- Patchstack
Techniques named here
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup