The PHP Bugs That Could Have Let Anyone Run Code on Your Server - Uneasy Money

Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for. Our listener survey (https://unchainedcrypto.com/survey) takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who finishes it gets a free month of Premium, Unchained or Bits + Bips, your pick. Open through Sunday, November 8. — Laura ======================================================================== Researchers found two remote code execution bugs in PHP, the language Taylor Monahan says runs roughly 70% of the web, from WordPress blogs to government and banking admin panels. She walks Kain Warwick and Austin Griffith through why unpatched servers are open to anyone, why governments are urging admins to patch, and how Cloudflare is writing custom rules to block the exploit while the fix rolls out. The hosts also debate why white-hat bots don't just break in and patch servers themselves. ======================================================================== Hosts: 👉 Kain Warwick - Host of Uneasy Money and Founder of Infinex and Synthetix - https://x.com/kain 👉 Taylor Monahan - Co-host of Uneasy Money and Security Expert - https://x.com/tayvano_ 👉 Austin Griffith - Co-host of Uneasy Money and Builder Enablement at Ethereum Foundation - https://x.com/austingriffith ======================================================================== This clip is from a longer conversation on a weak certificate authority key, a PHP exploit, and the economics of frontier AI labs. Full episode here: https://youtu.be/H4IYAfXg4TE We go live every Wednesday - subscribe to catch it live. Sponsor Put your crypto to work with Nexo: earn daily interest or borrow funds against your assets on one platform trusted by more than 10 million clients. Find out more at Nexo. Geo-restrictions, eligibility and terms apply. ======================================================================== Chapters: 🐘 00:00 Why PHP still underpins admin panels, government sites, and banks 🔓 02:06 Two remote code execution bugs, and why these ones let anyone in 🧘 03:56 Best case: hijacked WordPress blogs running phishing and Monero mining 🏛️ 05:42 Worst case: why governments are urging admins to patch their PHP 📣 06:10 Why the disclosure circle had to widen slowly before the bugs leaked 🛡️ 08:25 How Cloudflare is writing custom rules to block the exploit 🤖 09:27 Why white-hat bots don't just break in and patch servers themselves ======================================================================== #bitcoin #ethereum #crypto #cryptocurrencies ======================================================================== Subscribe to our channel! Website → https://unchainedcrypto.com Unchained Daily Newsletter (FREE!)→ https://unchainedcrypto.beehiiv.com/subscribe/ Unchained X → https://x.com/unchained_pod Apple → https://podcasts.apple.com/us/podcast/id1123922160?ls=1 Spotify → https://open.spotify.com/show/1cJrrfGY1SKBIRn5noKSAf?si=6SI4qIcRTEO7EhOe0V9n4w RSS Feed → https://feeds.megaphone.fm/LSHML4761942757 Unchained: Your no-hype resource for all things crypto!