alt Hacker NewsFWIW this is the most mainstream vulnerability in the new era where everyone has access to AI agents that have the potential capability to find and widely exploit the vulnerability far faster than the past timeframes for disclosure and patching.
Replies
nicce • today at 3:13 PM
I think some of the issues could have been avoided here, if they would not chase the PR and blog posts.
➕ show 1 reply
I'm legitimately surprised half the hostnames on the internet isn't serving ClickFix or whatnot payloads already.
The average phpBB or Wordpress, even if it's behind cloudflare, probably has a direct IPv4 that's not disabled.