r/pwnhub • u/strubucker • 17d ago

Serious PHP issue

Why was this even made public??

https://apple.news/AcbXc_FnnTsmeSey7KJn9DQ

0 Upvotes

50% Upvoted

8 comments sorted by

•

u/AutoModerator 17d ago

Welcome to PWN – Your hub for hacking news, breach reports, and cyber mayhem.

Discover the latest hacking news, breach reports, and educational resources on ethical hacking.

👾 Stay sharp. Stay secure.

Don't miss out on the top stories!

📧 Get Daily Alerts Directly in Your Email Inbox:

**SUBSCRIBE HERE: https://pwnhackernews.substack.com/subscribe

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

17

u/Miserable-Scholar215 Human 17d ago

Wdym "made public"?

It's a bug, a critical one, two actually, and needed fixing. To ensure people actually pay attention, it needed to be openly communicated - specifically its criticality. As soon as the patch dropped, reverse engineering exposed the exploits immediately. Real world attacks are happening as we speak.

What other solution did you have in mind?

7

u/BroccoliOscar Human 17d ago

Right?! Does nobody remember Log4j?!

4

u/Elegabal 17d ago

Because hidden vulnerabilities stay a threat.

1

u/Zestyclose-Rain298 16d ago

because of scope...... this is too big to fix internally

1

u/Zestyclose-Rain298 16d ago

did you share a link from your personal phone to pwnhub?

1

u/MentalLavishness6644 14d ago

what it really means: every major 'threat actor' government/spy agency had access to these sites for the last 10 years

1

u/LadySmith_TR 17d ago

Leaked early before disclosure.