Startup Claims To Use AI-Created Viruses To Treat a Patient
Read more of this story at Slashdot.
Read more of this story at Slashdot.
I (non-technical) recently stepped into a leadership role at my company who is on an old Drupal 7 site running php 7.4.9. My lead developer said the fix issued for php2shell is not compatible with our old version of php and Drupal 7. He recommended taking down our website until we can upgrade to a newer version of Drupal… which would take a long time, and essentially would kill our business…. We did edit our WAF rules to help prevent cyber attacks but would appreciate any perspectives here and if anyone is in a similar boat.




Today, two critical flaws were disclosed in PHP, the language behind roughly 70% of websites whose server-side language is known. Attackers can take over a server without ever logging in. Security researchers have estimated more than 22 million exposed instances, and exploitation attempts started before the patch was even released.
Large companies handle days like this with a dedicated security team. They inventory what they run, patch within hours, and watch for signs of compromise.
However with explosion of vibe coded apps and custom built CRMs. Someone ships a tool in a weekend, it works, and everyone was clapping to them. But who is patching the server underneath it tonight? Do they even knows which PHP version it runs?
And this isn’t only a problem if they built their own CRM. If a vendor, an agency, or a consultant runs on a vibe coded system, probably your customers’ names, emails, phone numbers and deal history sit on a server that may never get patched. Attackers anywhere in the world scan for exactly that.
Security and data protection are the least discussed topics in all the AI and vibe-coding hype, and they may be the most important.
Before you trust any platform with your customer data, ask who maintains it after launch. Speed to build nowadays is impressive. Responsibility after you build is what protects your customers.
If you need a CRM that lasts, talk to a CRM expert before you build or buy. A sustainable system comes with proper security, maintenance, and support behind it, not just a fast launch.




My phone just stopped ringing (pacific time), so I hope everyone is getting some dowm time after today.
| This game was made just to teach people about the Drupal AI ecosystem, but it is hopefully fun to play for anyone. The game can be played online or downloaded here: https://macpackwala.workflows-of-ai.com/ Some more information here: https://workflows-of-ai.com/blog/i-vibe-coded-a-point-and-click-game-to-learn-about-the-drupal-ai-ecosystem [link] [comments] |
I build WP websites using Elementor and currently have around 30 client websites. I don’t offer hosting or ongoing maintenance packages, but I’d like to recommend a reliable security solution that each of my clients can purchase and manage independently.
Ideally, I’m looking for something that offers strong protection, malware scanning, firewall protection, and minimal hands-on management.
With all things AI, I’ve already had to deal with too many breaches this year and I’d like to find a solution.
For those who build WordPress websites, what security solutions do you recommend?
I'm new to WordPress and creating websites in general. I'd like my links to provide preview on the first image in that particular page. But for the time being, all I get is link with no featured image at all. I'll welcome any advice.
First pic is how my links are now. Second pic is how I'd like them to look.
In light of the PHP CVEs, solutions like Simply Static seem like an attractive option.
Has anybody used them? Thoughts?
Edit: I'm referring to the managed service which has has no public PHP/WordPress runtime, rather than the plugin
Hi, I wanted to change the table width narrower (which I figured out) but I can't seem to align it to the left of the page. Can someone help with the css? It's for https://unrecables.org/photos-and-videos/ Thank you!
I have a lot of websites with them, alongside some decent-sized clients. Everyone in Slack is asking and we haven't heard anything yet.
My SiteGround websites were all updated within an hour this morning. I would've expected the same.
Think this is... illuminating to say the least.
I really like Galleryberg, but I was wondering if there's an alternative one that allows comments for free?
How do you handle this mentally and practically? Instead of using the support form, some users immediately leave a 1-star review to ask a question. I've spent an enormous amount of time developing, and I have over 380+ five-star reviews, but occasionally, these strange situations still happen. How do you deal with this?
Not selling anything and there's no sign up. I'm looking for ideas from people who run files every day. A little different than the typical "CRM" posted here but it is in a similar vein of tracking data.
I work DSCR, fix and flip, new construction and multifamily loans, and I got tired of tracking needs lists, title and insurance orders, rate locks and close dates across a dozen places. So I built my own system, and it now runs a pipeline of 100+ loans.
What it does so far:
- One page per file, from first call to closing
- Paste a lender's conditions email and it becomes a needs list, split into borrower, entity, property, title and insurance
- Follow ups tracked per list (borrower vs title vs insurance), so you know what went out and when
- Title and insurance orders written from what's already on the file
- A flag when a rate lock or close date is five business days out
There's a demo with made-up loans if you want to click around. It gives you your own private copy and resets every night: link in comments.
What I actually want to know:
What do you still track by hand, in a spreadsheet, or in your head?
What's the thing that slips on your busiest weeks?
If you tried the demo, what felt missing or clunky?
Appreciate any thoughts, even "I'd never use this because..."
Read more of this story at Slashdot.
Read more of this story at Slashdot.