Global PHP flaw forces French railway SNCF to suspend ticket validation
IgorCarron · x · 2026-10-22
A worldwide PHP vulnerability (#php2shell) has rippled beyond websites: the TER regional rail in Hauts-de-France told passengers NOT to validate their tickets until the end of the month.
The poster observed travelers at multiple SNCF stations passing through without showing tickets, including in grand salons — effectively a temporary suspension of fare validation to mitigate the flaw, underscoring that the PHP bug reaches far past typical web infrastructure.
More from Safety
- Anthropic's deputy security chief warns AI-driven security crisis will worsen for ~18 months — ns123abc · 2026-10-23
- Downing Street hires AI adviser to prepare for AI's hit to entry-level graduate jobs — nordicinst · 2026-10-23
- MCP server turned rogue 30 days after approval, prompting open-source mcp-guard lockfile tool — ErgoniaWorks · 2026-10-23
- Argus launches to find card numbers and API keys leaked into tickets and comments — Scobleizer · 2026-10-23
- The 'antifragile internet' case: AI agents slash attack costs toward zero — rebeccakaden · 2026-10-23
- Microsoft: China-aligned hackers used ARTEX AI agents to hit 2,250+ M365 tenants — rickasaurus · 2026-10-23