PHP, TLS, etc… We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers’ tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week’s news. How are you all taking this?

https://pwn.watch/

  • fozid@lem.radiantfig.fyiEnglish
    73·
    2 hours ago

    I’m not worried. I have auto updates on and have a well hardened setup following all the good basic principles. I have had a fully public facing server for years with no issues. My php was patched and updated totally automatically a few hours after the update became available. My web server is extremely low volume traffic and there is hardly any reason for random people to be using it, so chances of somebody attempting something against it at just the right time a vulnerability has been discovered but not patched is very low chance. When a critical vulnerability appears, hackers are going to target the big fish for big wins initially, even so, it takes effort to turn a vulnerability into an actual exploit and deploy it. I could step out my front door and get run over by a bus, but I don’t worry about it and stay on doors all day to mitigate the risk.

    • Ferrous@lemmy.mlOPEnglish
      31·
      2 hours ago

      I have had a fully public facing server for years with no issues.

      To be fair, that was before AI was finding all these holes.

      • fozid@lem.radiantfig.fyiEnglish
        32·
        2 hours ago

        To be fair, my server has been public facing for the entire time these ai models have been finding vulnerabilities.

        • Ferrous@lemmy.mlOPEnglish
          22·
          2 hours ago

          October 2026 AI is drastically better at finding these holes compared to pre 2026 AI. Do you agree?

          It seems like your main point is that the threat has not elevated. But the news from this week proves that is wrong, I feel.

          • fozid@lem.radiantfig.fyiEnglish
            32·
            1 hour ago

            Ai tomorrow better than ai today? Yes, that is true any day of any year. I don’t get your point 🤷

            A vulnerability was found, that vulnerability was patched. I think it’s great news that vulnerabilities are being found and fixed faster than ever. Do you agree?

            • Ferrous@lemmy.mlOPEnglish
              12·
              1 hour ago

              Throughout 2026, IBM X-Force observed a dramatic increase in publicly disclosed vulnerabilities across major software vendors, including Microsoft, Oracle, Google Chrome and Apache. While the causes behind this increase are difficult to quantify, recent advances in AI-assisted vulnerability research demonstrate how vulnerability discovery can now occur at unprecedented scale. In August 2026, Unit 42 published a report highlighting that its autonomous vulnerability discovery platform, NOVA, identified more than 14,000 previously undiscovered vulnerabilities across nearly 4,000 open-source projects in just two months. The question is no longer whether AI can help researchers find vulnerabilities, but whether AI is changing vulnerability discovery faster than organizations are prepared to manage the risk.

              Vulnerability disclosures are up 578% in 2026 across major software vendors. Publicly disclosed CVEs across Microsoft, Oracle, Google Chrome and Apache increased from approximately 1,493 disclosures during January-September 2025 to more than 10,124 during the same period in 2026, representing roughly a 578% increase. The acceleration became most apparent in Q2 2026. Vulnerability disclosure volumes remained relatively stable through the first quarter before increasing sharply beginning in April and continuing through the summer months.

              https://www.ibm.com/think/x-force/ai-vulnerability-discovery

              Your head’s in the sand, friend.

              • fozid@lem.radiantfig.fyiEnglish
                41·
                1 hour ago

                I have no idea what you are on about. What do you want me to do? Turn the internet off? Lock my doors and not leave the house? Sit here crying and quivering because the world is gonna end? My head is deffo not in the sand, I’m looking out the window at the rain, enjoying my life, looking forward to tomorrow.

                I’m not worried about my web server any more today then I was last year. It’s a web server, it’s not me or my life, yes it how important stuff, but if the world ends it’ll be the last thing I think of.

                My web server is as safe as it needs to be. Thanks for your concern.