It Just Keep Getting More Insane...
Source: YouTube · SomeOrdinaryGamers · published Oct 23, 2026 · 18:02
A new PHP advisory has escalated a chaotic week of cyberattacks, with hackers—some using LLMs—actively exploiting unpatched PHP servers and feeding devices into botnets like Mirai 5:49-6:17.
Key Takeaways:
• PHP (70%+ of the web) had a serious RCE flaw, forcing emergency shutdowns at 4chan, e-commerce sites, and Play Asia 0:27-1:30
• PHP issued a third advisory recommending disabling session.upload_progress as a mitigation, with a fix coming in a future patch 3:42-4:08
• Three CVEs are involved (memory corruption, use-after-free, and a new 2026 CVE), prompting warnings from the NSA, FBI, and Canadian government 5:20-8:15
• Hackers are scanning all of IPv4, using LLM-written exploits, and targeting millions of unpatchable devices like old Windows XP machines 8:36-11:28
• Compromised servers are absorbed into Mirai, a multi-billion-device botnet infecting IoT and embedded Linux systems 11:32-12:40
• The speaker runs a local AI that SSHes into home devices to apply updates—suggesting supervised AI automation as defense 15:10-16:28
Full protection is increasingly impossible—breaches from human error somewhere in the chain are inevitable. Self-hosters should update diligently, and credit goes to security maintainers keeping the internet functional.
Sources:
- 0:27-1:30 PHP RCE flaw and site shutdowns
- 3:42-4:08 Third advisory and mitigation
- 5:20-8:15 Three CVEs, government warnings
- 8:36-11:28 IPv4 scanning, LLM exploits
- 11:32-12:40 Mirai botnet growth
- 15:10-16:28 Local AI defense setup
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello guys and gals, me Mudahar and uh you know Mr. President, there's been another vulnerability that's hitting the internet. Now ladies and gentlemen, you might think that I'm having a lot of fun with this and and you'd be [ __ ] right that I am. But also I I don't think there's a lot of people that work in the security world that aren't exact. Some people are just getting tired and the reality of it is is that that that won't go away for a while. Things are pretty wild. So obviously as we all know in the last couple days the PHP situation which effectively is a stack that is very important on the internet over 70% of the internet has PHP in it in some capacity that had a massive serious exploitation in it too in particular these were remote code exploitations rce so it actually allowed …