Post

I'm at a security conference and the speaker asked how many saw th PHP CVE exploited in practice. Not one hand raised. Not even me. The one that's been doing PHP for 27 years.

23/10/26, 8:04 pm0 reposts0 likes

socketwench

@deninet.com

This is what I mean when I worry that LLMs and particularly LLM discovered vulnerabilities, are collectively cooking our brains about prioritizing CVEs. Massive panic and massive effort, but unlike y2k, we should still see mass attacks. We've already surrendered too much "because the LLM said so".