PHP and certificates: a couple of hectic days for cybersecurity

A couple of hectic days: first PHP, then certificates.

What I did

I got the emails from the services I use, updated my servers and moved on.

The PHP issue required an update. The certificate one is sneakier: it affects HTTPS, which is what guarantees we’re really on the site we think we’re on, and not on a fake one.

No panic

Two serious security issues, sure. But they don’t strike me as a sign that something weird is happening because of AI.

It reminded me of Log4j: in some applications, a single string typed into a chat could be enough to compromise the server. Serious vulnerabilities have always been around.

What I expect

My impression is that with AI these holes will surface faster, but they’ll also be faster to fix.

How did you handle these days? Tell me under the video (it’s in Italian).