{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Lenny’s AI Builders","title":"PHP got hacked wide open this week - one Claude prompt tells you if you're hit | LAB 0027","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/2ac4b8e8\"></iframe>","width":"100%","height":180,"duration":828,"description":"PHP got hacked wide open this week - two critical bugs that let anyone take over a PHP server without logging in. the same day LiteLLM 1.107.0 shipped a password stealer, and Railway, where my app runs, got broken into. so i gave Claude one prompt to check my Mac and my websites for all three. PHP: clear. LiteLLM: clear. Railway: hit. Threadify runs on it, and Claude found Railway's warning email sitting unopened in my inbox. we'd already handled it, but that's the one that mattered.\n\nalso this week: Claude Duet, an agent that comes to you (waitlist, US Pro and Max), Andrew Curran says OpenAI calls the PHP bug the tip of the iceberg, Claude Security now re-scans as your code changes (Enterprise beta), Tibo's reset day, editing with no editor, and the one line that makes your Claude Projects coordinator report in.\n\nthe practical - check if this week's hacks hit you, in one prompt. paste it into Claude Code and swap in your own websites at the end:\n\nThis week PHP had two critical bugs (fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35), LiteLLM 1.107.0 shipped a password stealer, and Railway asked everyone to rotate their keys. Check my computer and my websites for all three. Only look, change nothing, and never show me a password or key. Then tell me in plain English: am I affected, how bad is it, and the one thing to do first. My websites: yoursite.com\n\nit only looks and changes nothing. the catch: it can only check what it can see, so you still read it with your own eyes.\nif you run a website, update PHP or ask whoever hosts it if they have. if you use Railway, swap your keys - new one in first, then turn the old one off.\n\nwant to join the beta of the agentic video editor i'm building? comment Eddy below.\n\nlinks\nfiveoutofnine on PHP's week: https://x.com/fiveoutofnine/status/2113045722744717360\nClaude Duet: https://x.com/claudeai/status/2112984664256241837\nAndrew Curran on OpenAI's tip of the iceberg: https://x.com/AndrewCurran_/status/2112913197774807491\nClaude...","thumbnail_url":"https://img.transistorcdn.com/P0B9fKUWl01KOkVXqQcDv5YBEKR1sflq-Hk71z-fa_U/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS84MzAx/ZGNmYzY1MmEwNjBk/NzUzN2NmODM3ZWUx/YzMzZi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}