Calif 以漫画发布两个 PHP 远程漏洞详情，WSJ 与 NYT 均报道
thomasahle · x · 2026-10-22
Calif Research released a comic-style write-up of two PHP remote vulnerabilities (CVE-2026-109618, CVE-2026-109619), discovered jointly by Calif, OpenAI and Wiz and patched in PHP's October 2026 security release. The story was covered by The Wall Street Journal and The New York Times.
The write-up traces a history from Stefan Esser's 2004 discovery of the first PHP memory-limit RCE (kept private, with only CORE and Immunity holding non-public exploits), through a seemingly harmless 2020 OOM bug report, to a 2024 audit uncovering a related OOM exploitation path that culminated in this RCE chain.
所属事件:AI 助挖 PHP 未认证 RCE 漏洞，全球约七成网站紧急打补丁(94 条相关)→
「安全」频道最新
- 银行圈警告:AI 进化速度成美国金融机构安全噩梦 — kimmonismus · 2026-10-22
- 你对 AI 说的未发表创意,可能一年后被竞争对手问出来 — _akpiper · 2026-10-22
- AI 网络攻防只是老军备竞赛的延续，别被吓人标题带偏 — ziv_ravid · 2026-10-22
- PHP 漏洞线程结尾：开源模型将是安全防御的核心支柱 — ziv_ravid · 2026-10-22
- Axios 独家：美国大行发现客户账户内潜伏未授权第三方 AI 代理 — daniel_mac8 · 2026-10-22
- Claude 已能发现新 CRISPR 酶,普通用户何时能用上生物科技能力? — Auriga33 · 2026-10-22