Searchable News & Info From Reliable Online Sources.
- Melat Kiros becomes first woman from Gen Z elected to Congress
The 29-year-old democratic socialist from Colorado made history as the first woman from Generation Z to be elected to Congress. [TheTopNews] Read More.11 mins ago - Tales From Cousin IT
The author is corporate IT specialist for Crawford Broadcasting. You may have seen the recent headlines about the PHP2Shell vulnerability. As the name implies, a specially crafted attack could gain shell (the equivalent of command-line execution) access. Stephen M. Poole This one was so serious that a bunch of websites around the world were abruptly taken offline until the patch was available. An attacker could simply craft a bogus HTML request that would sail right into the server, ignoring firewalls and other protection. [Related: Is Your Manufacturer Affected by the PHP Vulnerability?] Our company’s websites use PHP to build pages on the fly; it’s a handy, powerful tool. WordPress, Joomla and other content managers use it. Other tool kits are available and are starting to eat into its share of servers, but PHP is still widely used worldwide (70% of current websites, according to one source). The standard Cybersecurity and Infrastructure Security Agency (CISA) approach is to (1) identify the vulnerability with a proof of concept for an attack, (2) then notify the vendor. Once a patch is created, you tell everyone to install it ASAP. In this case, someone leaked the details early (!!), so the dark web jumped on it (no doubt cackling all the while). PHP2Shell was being exploited before the patch was available. Thus, CISA rated PHP2Shell as a 9.8 out of 10 for severity. This affected every version of PHP from 5.4 to the current 8.5 release. The fix was originally scheduled for release on Oct. 20, but Rocky Linux (which we use) delayed its patch until the next day. I went into our web server and changed some configuration settings to make an attack more difficult. The patch was finally released; I installed it and reset the configuration for Elementor, a key plug-in that we use with WordPress. October was a wild month in the World of IT. AI keeps finding what the geeks call “critical vulnerabilities” that must be patched. A typical session on a single server is shown in the accompanying image. It’s a good thing I shave my head, or I’d be pulling out my hair. A typical update including both kernel and SSH fixes. Click to enlarge. I installed 14 full updates to all of our corporate servers in October alone, a total of 21 since Sept. 2. After each one, I need to check everything on each… [TheTopNews] Read More.11 mins ago - Democrats Take Congress in a Landslide, and Trump Says He’s ‘Willing to Acce...
Plus, how to vote from space. [TheTopNews] Read More.11 mins ago - Iran ridicules Trump over midterm wipeout as vicious MAGA blame game begins: Liv...
Donald Trump was dealt an election nightmare on Tuesday as Democrats took control of the Senate and House of Representatives in a crushing blow. [TheTopNews] Read More.17 mins ago - This Morning and Lorraine are pulled off air at the last minute as power outage ...ITV descended into chaos on Wednesday morning due to a power outage that pulled Lorraine, This Morning and Loose Women off air. [TheTopNews] Read More.17 mins ago
- The moment America’s first Muslim Senator Abdul El-Sayed explodes at Briti...Michigan Democratic Senate candidate Abdul El-Sayed clashed with a British journalist on election day, accusing him of chasing him around. [TheTopNews] Read More.18 mins ago
The Searchable USWebDaily.com and TheTopNews NewsBank Helps You Be Better Informed, Faster! Spread The Word.
