Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
607 by petecooper | 225 comments on Hacker News.
I posted here about the then-upcoming PHP RCEs related to CVE-2026-109618 & CVE-2026-109619. I appreciate this has had considerable knock-on effects with the schedule for co-ordinated disclosure, and created additional workload. I am truly sorry. I take full responsibility for my actions. It was not remotely my intention to cause any of the subsequent side effects. At the time of posting, I didn't know about any embargo. My contact had told me there was no embargo, and her contact had told her the same thing. As someone who follows the 4-weekly PHP release cycle and compiles it from source, my intention was to alert others in a similar position to be aware of the importance/urgency of the updates. That clearly backfired in a pretty wild fashion. I have learned my lesson.

mitmproxy adds --emudhra option

mitmproxy adds --emudhra option
604 by ahlCVA | 142 comments on Hacker News.

Woman charged with computer fraud due to scam CashApp account being in her name

Woman charged with computer fraud due to scam CashApp account being in her name
617 by oidar | 619 comments on Hacker News.

eMudhra to exit global SSL/TLS certificate business

eMudhra to exit global SSL/TLS certificate business
669 by bo0tzz | 485 comments on Hacker News.

There isn't an easy exploit for this PHP vulnerability

There isn't an easy exploit for this PHP vulnerability
596 by zkldi | 389 comments on Hacker News.