EN ▾

ConfirmedAI safety30 Oct, 22:57 UTC

CISA official calls Chainguard's early release of PHP2Shell fixes 'dangerous'

Jay Gazlay, CISA's acting associate director for vulnerability management, said on 28 October that breaking the embargo was dangerous; Chainguard shipped patches more than six hours before the coordinated release, and its CEO cites how easily it found the bug and built an exploit.

Read at Federal News Network

+ The New Stack

More from Snape Report

OpenAI cuts its funding round target by $10 billion to about $20 billion at a $1.25 trillion valuation, FT reports
Nasdaq slides 2.9% as Intel has its worst day since the 1970s and chip stocks fall
Intel shares fall 29%, their worst day since the 1970s, cutting about $12 billion from the US government's stake
S&P revises Meta's outlook to negative over AI capital spending and negative free cash flow
Google's Suncatcher satellite returns the first AI response from a data-centre TPU in orbit
Mistral releases open weights for Mistral Large 4, its 1-trillion-parameter model
Apple says Apple Intelligence features will reach China with iOS 27.3, using Alibaba's Qwen in Siri and Writing Tools
Google, Microsoft, OpenAI and Anthropic back a shared robots.txt signal for opting out of AI training