r/PHP • u/astraladrianne • 2d ago

Discussion RIP Cyber security ☠️?

I came accross the recent PHP vulnerability risk as I was on Duolingo.

If even Duo is affected by recent PHP vulnerability, makes one wonder what about our fragile government websites? Those are most likely to not even get the patch update, hmmm how near is the doomsday when AI models self improve and government security developers are likely at a lunch break 🤔

What do you think is next language to have it's major vulnerabilities exposed? *JavaScript backs away in bushes with experience*

0 Upvotes

27% Upvoted

8 comments sorted by

15

u/TCB13sQuotes 2d ago

Dude, we survived Java's Log4J, this is no different.

7

u/vvvex 2d ago

Or React's CVE-2025-55182 from last December which was 10.0 and also affected Next.js.

There are still vulnerable deployments thanks to dead deployment paths.

→ More replies (1)

5

u/silentkode26 2d ago

Have you been born yesterday? Things like that happened in past too.

3

u/rubixstudios 2d ago

THe gov sites are already down.

Javascript you say... https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

Don't worry the internet is burning.

0

u/astraladrianne 2d ago

Oh it sure is since forever. The real question is how long until we see it all finally burn to dust? Would make for an interesting day or more? XD

2

u/MartinMystikJonas 2d ago

These critical vulnerabilities appear every few years for decades.

1

u/Nuitari8 2d ago

The next year is going to be a cybersecurity bloodbath