‼️ PHP UPDATE: 4chan has gone read-only and Something Awful has shut its forums as American sites brace for the PHP patch.

4chan says it is "temporarily read-only while we await an urgent PHP security update."

Something Awful says the flaw "allows for the kind of hacking you see in movies (but in real life)."

Bookmarking service Pinboard, game publisher Choice of Games, history site Damn Interesting and the explain xkcd wiki are offline too, as is art site Fur Affinity.

DeviantArt is also down "for maintenance" but has not said why.

PHP's fix is due at 14:00 UTC, 10am in New York.

‼️BREAKING: PHP has released its fix for the two leaked flaws, which can let attackers run code on servers without logging in.

"There are no complete mitigations, updating is the only safe choice," PHP says.

Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.

PHP says Apache with mod_php is most at risk, with a demonstrated exploit that fires before any application code runs.

PHP 8.1 and older get no official update, though PHP has published source backports for 7.4, 8.0 and 8.1.


Source: https://www.php.net/archive/2026.php#2026-10-21-5

‼️ WhiteDate, the neo-Nazi dating site German Pink Power Ranger hacker "Martha Root" wiped on stage, now forwards to GoebbelSuite, a Google parody built on the AfD leak.

https://goebbelsuite.com

🚨 The AI gateway library LiteLLM was hijacked again in a supply chain attack.

It hid malware that runs whenever Python starts and steals SSH keys, cloud secrets and Claude Code configs.

It also raids LiteLLM's own database for every AI provider key stored.

https://www.aikido.dev/blog/litellm-compromised-infostealer-rat