Login
You're viewing the drk.network public feed.
  • Mike ShewardSecureOwl@infosec.exchange
    Oct 21, 2026, 7:02 PM

    a reminder that if you see a vendor having an unscheduled outage today to apply PHP patches - that is actually one of the most encouraging things you can see from an #infosec perspective, because it means

    A) someone/some people at the vendor is paying attention

    B) that person/people has enough sway to have them bring down prod in the middle of the day to apply patches

    C) enough people at the vendor actually know what software they are running to know its an issue that needs to be dealt with

    So, reach out to them and let them know you appreciate it - so they have something to show people who push back the next time a similar thing happens

    💬 1🔄 42⭐ 40

Replies

  • varx/socialvarx@cybersecurity.theater
    Oct 22, 2026, 1:28 AM

    @SecureOwl D) Their PHP version was already up to date enough that they could simply upgrade PHP without making other changes.

    (At my last employer, we treated "can't deploy/can't update packages" as the second highest level severity of production issue, exactly for this reason.)

    💬 0🔄 1⭐ 20
  • GunChleocgunchleoc@mastodon.scot
    Oct 23, 2026, 6:11 AM

    @varx @SecureOwl Everybody had to wait for a few hours until the patches were even available, so I shut down my servers while I waited for that as per the general security advisory. You can't simply upgrade when the upgrade isn't available yet.

    You can thank the assholes who leaked the information early.

    💬 0🔄 0⭐ 0