Originally published on LinkedIn. View the original post ↗
I'm for sure going to post some stuff from #AllThingsOpen this week, but that got sideswiped yesterday/today for news from... PHP? That wasn't on my bingo card.
I bet it wasn't on most people's, either. And in a day where exploits are appearing that are likely a decade old, it's never more important than ever to keep your software and systems up-to-date.
This particular exploit was - to no one's surprise - found with the assistance of AI agents. And it's a doozy, offering full access to the affected server. That can mean reading application data, modifying the site, stealing credentials, passwords, tokens, API keys. Yikes.
Software doesn't need to have a change for its risk profile to change. It requires maintenance and attention. I expect we'll see lots of these popping up in the future.
Our team was on top of this for all of our clients. Come talk to me if yours needed a reminder.
Keep thinking.
When AI-written RFPs inflate the scope
AI on both sides of procurement can turn suggestions into requirements. Quality discovery gives vendors a meaningful project and budget to price.
Learning at The AI Conference
Out here learning everything I can about AI so you don’t have to. Lots of great insights to share, stay tuned!
