THE INTERNET IS HAVING A VERY BAD CYBERSECURITY DAY

Summary from the TLDR newsletter

AI has discovered critical security vulnerabilities in PHP, prompting the US National Security Agency to advise organizations using PHP to either update immediately or take their systems offline until they can. Node.js has released an update that fixes four high-severity vulnerabilities. LiteLLM was compromised by an attacker who injected malicious code. eMudhra, an Indian certificate authority, had its private keys compromised, potentially allowing attackers to issue fraudulent certificates and impersonate legitimate websites. These unrelated issues highlight the challenges cybersecurity teams now face.