Connect with us

Business

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

The internet’s mad scramble on Wednesday to patch a pair of critical vulnerabilities in PHP, a widely used web scripting language, was already too late to stop every attack, newly released details reveal.
Wednesday’s release of fixes for two critical vulnerabilities in PHP caused administrators and security staff to race to identify and patch vulnerable websites and apps, while attackers inevitably reverse engineered the fixes to learn how to exploit the flaws. Some governments and other groups even proactively took key websites down in anticipation of the release, so they wouldn’t be targeted before they could apply the patches.
But in addition to detecting such active exploitation on Wednesday, research published Wednesday evening by Amazon Web Services indicates that at least one actor had started attempting to exploit the bugs—known collectively as PHP2Shell—on October 17, four days before Wednesday’s public revelations.
AWS analysts spotted the October 17 exploitation on Wednesday while looking back at activity on one of their so-called honeypots, or intentionally vulnerable web servers or other digital lures that help researchers study attack methods and trends. The attempt came from an IP address that AWS says is linked to a “commercial anonymization network,” in other words a proxy network or VPN.
“While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address suggests the activity was conducted by a threat actor, though it remains unclear how the actor acquired exploit information prior to disclosure,” CJ Moses, AWS’s chief information security officer, wrote in the research post.
Proof-of-concept exploits for PHP2Shell began emerging publicly on Wednesday, with some seeming to appear hours before the public disclosure at 10 am ET. In the hours leading up to the disclosure, AWS researchers say their honeypots were hit with multiple exploitation attempts anonymized using various providers and seemingly with various attack goals, likely indicating multiple different actors. “Technical analysis is ongoing, and it’s unclear if any of these attempts would have succeeded in real-world systems,” Moses wrote. He added that “PHP2Shell is now being broadly exploited in the wild.”
The PHP Foundation did not immediately respond to WIRED’s request for comment.
Though it is unclear how the exploitation on October 17 happened or where it came from, AWS emphasizes that the findings underscore how coordinated vulnerability disclosure must evolve and speed up given global access to AI tools that can accelerate vulnerability analysis and allow less technically proficient actors to quickly develop new exploits.
“The time from patch to working exploit is shrinking for structural reasons,” Moses wrote. “In the past, most exploitation we observed came after a public proof of concept was released. A small number of capable actors built exploits, and everyone else waited for them. That dependency is weakening. AI-assisted analysis makes it cheaper to turn a patch diff or advisory into a working exploit. As a result, more actors can act within hours or even minutes once technical details of a vulnerability are disclosed.”

Continue Reading

Business

Musk says Tesla FSD demand is outpacing production at earnings call

Tesla CEO Elon Musk said demand for the company’s electric vehicles is significantly outpacing production, pointing to growing interest in Full Self-Driving technology as the automaker prepares to expand its Cybercab service to Dallas next month.
Musk touted what he described as a “very strong” third quarter during Tesla’s earnings call, saying the company is ramping up production to meet growing demand.
“Demand is growing rapidly for our vehicles. It’s exceeding our production by a significant margin,” Musk said. “The biggest driver for demand is full self-driving, and today there’s really no competitor for FSD in any car that you can buy.”
Tesla reported $28.05 billion in third-quarter revenue, while deliveries totaled 486,532 vehicles.
ELON MUSK SAYS TESLA-SPACEX MERGER WOULD BE ‘A GOOD IDEA’ AS COMPANIES FORM SPECIAL COMMITTEES
Musk said the results could signal a period of significant growth for the automaker following years of slower expansion.
“In a nutshell, after many years of sort of grind and things being fairly flat, I think we’re now headed for a lot of fun and significant growth,” Musk said.
Musk also outlined plans to expand Tesla’s manufacturing capacity, with a goal of producing approximately 5 million vehicles annually by 2030.
As part of its expansion, Tesla plans to launch its Cybercab service in Dallas next month as it looks to bring the technology to additional cities.
ELON MUSK SAYS HE WILL RETALIATE AGAINST DEMOCRATS WHO INVESTIGATE HIM
“I don’t think there’s any company in the world that can match our scale with autonomous vehicles,” Musk said. “It really is an extremely fast week-over-week growth in autonomous miles.”
A Tesla executive also said the company aims to begin delivering Cybercabs to customers by the end of 2026, although Musk emphasized that most would remain in Tesla’s fleet rather than being sold to individual buyers.
“Cybercab is primarily going to be something that is offered as, like, transport as a service,” Musk said.
Ticker Security Last Change Change % TSLA TESLA INC. 386.47 +12.76 +3.41%
Tesla Chief Financial Officer Vaibhav Taneja also said the company was raising its capital expenditure guidance to approximately $20 billion for 2026. Taneja said Tesla ended the quarter with more than $1.5 billion in positive free cash flow and over $45 billion in cash and investments.
TESLA’S NEW ROADSTER MAKES A FLYING DEBUT, HITTING 60 MPH IN UNDER A SECOND
Musk also said during the call that Tesla was working to expand Full Self-Driving into additional international markets, with the company seeking EU-wide approval.
“We’re hoping for an EU-wide approval,” he said. “It’s hard to predict, but maybe, you know, within a few months.”
Earlier this week, Musk said that merging his two companies, Tesla and SpaceX, would be “a good idea,” adding that both companies have formed special committees of independent directors to explore a potential deal.
GET FOX BUSINESS ON THE GO BY CLICKING HERE
Musk was asked again about the potential merger on Wednesday.
“I think I said everything that should be said yesterday,” Musk responded. “Tap dancing through a minefield there.”

Continue Reading

Business

Amazon Prime customers could get $200 refund following $2.5B FTC settlement: Here’s who qualifies

SAN FRANCISCO — If you’re an Amazon Prime customer, you could be getting up to $200.
Amazon started sending out its first round of automatic refunds to qualified customers in early October following a $2.5 billion settlement with the Federal Trade Commission in September.
The FTC accused the online retail giant of enrolling millions of consumers in prime without their knowledge or consent, and making it difficult to cancel.
So, who qualifies?
You signed up between June 23, 2019 to June 23, 2025.
But you tried to cancel Amazon prime online within those dates with no success.
And, you used no more than 20 prime benefits such as Prime Video and Amazon Music Prime during a 12-month period.
Now, how do you get the refund?
You don’t need to file a claim or any paperwork.
Payments will be sent via Venmo, PayPal or a mailed check.
But be aware you only have 60 days to redeem it after the issue date.
Also, if you already received $51 from an earlier settlement, you might still get that $149 difference.
Qualified customers are expected to get the refund by April of next year.

Continue Reading

Business

Meta strikes deal to keep Zuckerberg in California after wealth tax concerns

Under the deal, Zuckerberg will get non-voting shares he can sell to potentially foot a multi-billion-dollar tax bill in the event the proposal is approved, in exchange for a commitment to ​remain a resident of California, or wherever Meta maintains its headquarters, for eight ​years, Meta said on Wednesday.
Sign up here.
Zuckerberg, the world’s sixth richest person according ⁠to Forbes, told Meta he was considering moving his primary residence outside California because ​Proposition 40, a ballot measure dubbed the “California wealth tax”, could expose him to a massive ​tax liability, potentially forcing him to sell voting shares to pay it.
Proposition 40, which asks Californians whether to impose a one-time 5% tax on the state’s billionaires, is far from certain to pass, political ​analysts say. The state is home to as many as 250 billionaires collectively worth ​upwards of $2 trillion.
Zuckerberg, who has a net worth of about $240 billion, can immediately sell 20% of ‌the Class ⁠C shares he receives, representing 10% of his overall economic stake in the company, allowing him to pay a potential tax bill without losing voting control.
The company said on Wednesday it will issue a new class of non-voting Class C common stock in January ​2027, effectively resulting in ​a two-for-one split, ⁠to fund acquisitions and retain top talent while maintaining Zuckerberg’s control.
Meta’s long-term forecasts, as described in the filing, showed it would ​need to raise “hundreds of billions of dollars” over several years, beginning ​as early ⁠as fall 2026, as it expects to need capital to finance its AI-related growth plan.
The parent of Facebook and Instagram said a special committee of its board concluded it was “critically ⁠important” ​that Zuckerberg remain in a leadership role and continue ​to manage the company from its California headquarters, particularly during what it described as “unprecedented challenge and competition in ​our industry” driven by AI.
Reporting by Carlos Méndez in Mexico City; Editing by Subhranshu Sahu

Continue Reading

Business

Airbnb cracks down on checkout chores with new rules for hosts

Airbnb is taking aim at checkout chore lists, telling hosts that guests generally shouldn’t have to strip beds, wash dishes or haul garbage off site before heading home.
The vacation rental platform announced the changes Tuesday as part of an overhaul of its house rules, drawing a clearer line between reasonable requests and cleaning work guests shouldn’t be expected to handle.
The new policy applies to reservations booked on or after Nov. 20, 2026. It generally bars hosts from asking guests to perform time-consuming tasks or work typically handled by a cleaner.
FARMERS OFFERING ON-SITE VACATION RENTALS TO COMBAT RISING COSTS
Under Airbnb’s new guidelines, hosts generally shouldn’t ask guests to wash and put away dishes, strip beds or start a load of laundry before checkout. They can, however, ask guests to leave used dishes in the sink, gather towels and separate trash and recycling into designated indoor bins, the company said.
The same approach applies to amenities. Hosts shouldn’t discourage guests from using advertised features such as air conditioning, but they can ask guests to turn it off when they leave, according to Airbnb.
POPULAR BEACH TOWN REJECTS NOISE, TRASH AND TRAFFIC AS IT WEIGHS STRICTER VACATION RENTAL RULES
“When adding a request, remember that most guests want to avoid unexpected chores,” Airbnb wrote in its announcement, warning hosts that assigning cleaning work could hurt their reviews.
Airbnb is also moving to prevent surprises after booking. All house rules and requests must appear in the designated section of the listing when guests reserve a property. Hosts cannot add new requirements afterward through messages, signs inside the home or in-person instructions, the policy states.
CRUISE BUFFET GUESTS FACE SURPRISE CHARGES FOR TAKING FOOD BACK TO CABINS
Hosts generally cannot impose their own fines or penalties, according to Airbnb, although they can warn guests about potential fines from a homeowners association, building security or local government.
To enforce the changes, Airbnb said it will flag requests that violate the policy and email hosts with guidance on fixing them. Hosts will also have an opportunity to appeal.
FURIOUS CROWDS PROTEST SKY-HIGH HOUSING COSTS AND MASS TOURISM IN MAJOR CITY
Unresolved violations could result in a notice on the listing alerting guests to cleaning requests. Persistent violations could lead to reduced visibility in Airbnb searches or other action, the company said.
Airbnb will consider exceptions based on the property and local conditions. Hosts in bear country, for example, may be allowed to ask guests to put garbage in an animal-proof container. Limits on shower time may also be reasonable in areas under drought-related water restrictions.
THESE ARE THE DEFINITIVE UNWRITTEN RULES OF CAMPGROUND ETIQUETTE EVERYONE SHOULD KNOW
Alongside the policy, Airbnb has consolidated its standard house rules into seven categories covering overnight guest limits, quiet hours, events, pets, smoking, commercial photography and locking up at checkout.
Guests must still follow those house rules, Airbnb said, while compliance with reasonable host requests is encouraged.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Guests are required to follow house rules and encouraged to comply with host requests. Airbnb said hosts can contact the company for help and may cancel a reservation without fees or other consequences if a guest breaks a house rule during a stay or says before check-in that they intend to do so.

Continue Reading

Business

Why is your power bill so high? What to check and where to find help

Higher electric bills are reaching into Americans’ grocery budgets, according to a Consumer Reports survey released Wednesday, as North Carolina regulators consider Duke Energy’s proposed rate increases.
About 1 in 5 Americans said they cut back on groceries, switched to cheaper food or considered those changes to pay an electricity bill. Among people who had lived in the same home for at least three years, 81% said their electricity bills had increased during that time.
“You can’t control the rising costs yourself,” said Sara Enright, senior director of safety and energy at Consumer Reports.
The nationally representative survey of 2,003 U.S. adults highlights the pressure on households already trying to conserve. Understanding which charges are growing can help identify potential savings, while a recently launched Triangle partnership aims to make upgrades and rebates easier to navigate.
Breaking down your power bill
According to Consumer Reports, 38% of Americans who read their electric bills said they were difficult to understand. For North Carolina customers, here’s what to check:
Electricity use: Kilowatt-hours (kWh) measure consumption. Compare average daily usage with the same period last year, accounting for weather and changes in household routines. Daily averages also account for billing periods with different numbers of days.
Fuel costs: The fuel rider adjusts what customers pay for fuel and purchased electricity. It can rise or fall separately from a general rate increase. Lawmakers changed how some of those costs are divided among customers, shifting a larger share toward households.
Other adjustments: Duke’s “Summary of Rider Adjustments” combines charges and credits for costs such as energy efficiency programs and certain clean energy purchases. A separate storm recovery charge repays bonds used to finance repairs after major storms.
Errors or unfamiliar services: Check charges for equipment on your property, too. I found an erroneous $18.80 monthly charge on my own Duke bill for a streetlight that hadn’t worked in years. After I contacted Duke, the company removed the charge and issued a refund.
Fuel charges deserve attention because customers bear those cost changes, while Duke says it earns no profit on fuel. WRAL’s reporting on a court challenge to Duke’s fuel charges explains how a 2025 law also expanded the utility’s ability to recover past expenses.
Duke says customers can use several tools to understand changes before the next bill arrives:
Bill Insights: Available in Duke’s mobile app, the AI-powered feature provides a personalized explanation of monthly costs, including weather’s impact and how usage compares over time.
Usage Alerts: Midcycle emails show electricity use so far and project the bill total, giving customers time to adjust.
Daily and hourly tracking: Customers can look for spikes in consumption and compare billing periods through Duke’s website or app.
For explanations of individual bill sections, Duke also offers a Reading Your Bill guide.
A new Triangle resource
Electrify the Triangle, launched this month, brings together local governments, community organizations and energy experts, according to Megan Anderson, Raleigh’s sustainability officer. It builds on Solarize the Triangle, which used group purchasing to reduce solar installation costs.
The expanded effort includes weatherization and other clean energy improvements. Energy navigators will help residents discuss their bills, identify incentives and weigh options for their homes. The partnership also plans to help contractors handle rebate paperwork so those savings can reach customers.
“There’s a lot for them to understand. The rules change all the time,” Anderson said. “We’re trying to break down those barriers and actually become the person that will do all that work for them, so it’s easier for them to pass along those savings to residents.”
Anderson said the program aims to help residents planning improvements as well as those who need to replace broken equipment immediately.
Where to find help in North Carolina
Resources vary depending on whether you need to pay a bill now or make improvements that could lower future costs.
Find rebates and incentives: NC State University’s N.C. Clean Energy Technology Center maintains DSIRE, a searchable database of renewable energy and energy efficiency programs. Filter for North Carolina, then check individual listings for eligibility, participating utilities and current availability.
Get help with home upgrades: Energy Saver North Carolina helps qualifying homeowners and renters cover improvements such as insulation and heating equipment.
Ask about bill assistance: Contact your county Department of Social Services about the Low Income Energy Assistance Program, which provides a one-time annual payment toward eligible households’ heating expenses, or the Crisis Intervention Program for households facing a heating- or cooling-related crisis.
Contact your utility: Ask about payment arrangements and assistance funds, including Duke Energy’s Share the Light Fund. Eligibility and available funding vary.
Consumer Reports released Wednesday’s survey alongside Power Smarter, an initiative collecting utility bills to study prices and support its advocacy for lower costs. Its Bill Decoder project collects utility bills to build a national data set the organization says it plans to use to track prices, investigate what’s driving increases and advocate for fairer rates. Participants receive links to savings and assistance resources.
Consumer Reports is also campaigning against Duke’s proposed rate increase, saying even the revised request would allow excessive profits while raising household bills.
Duke spokesperson Caroline Fountain said the increase would pay for poles, wires and technology that helps prevent outages as North Carolina grows. That growth includes power-hungry data centers, which are helping drive up Duke’s forecast for electricity demand.
“We’re working to keep reliability at the lowest possible cost, and that’s why we reduced our proposed rate increase by over half,” Fountain said.
As WRAL reported in August, Duke Energy Progress reached an agreement with the state’s consumer advocates and other groups to scale back its request. The deal would also return tax credits to customers sooner and provide refunds if planned upgrades aren’t finished on time.
Attorney General Jeff Jackson refused to sign the agreement, saying customers would still be paying more than Duke needs. State regulators will decide whether to approve or change the deal. If approved as proposed, the first increase would take effect Jan. 1, 2027.

Continue Reading

Latest News

Business4 hours ago

Musk says Tesla FSD demand is outpacing production at earnings call

Tesla CEO Elon Musk said demand for the company’s electric vehicles is significantly outpacing production, pointing to growing interest in...

Tech4 hours ago

Musk’s public endorsement of SpaceX-Tesla deal may throw a wrench in talks

The disclosure created a “mess” for the process, as it ‌could lead to questions about how well Tesla shareholders’ interests...

Business5 hours ago

Amazon Prime customers could get $200 refund following $2.5B FTC settlement: Here’s who qualifies

SAN FRANCISCO — If you’re an Amazon Prime customer, you could be getting up to $200. Amazon started sending out...

Business6 hours ago

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

The internet’s mad scramble on Wednesday to patch a pair of critical vulnerabilities in PHP, a widely used web scripting...

Tech6 hours ago

Abdul El-Sayed and Mike Rogers’ second debate clash sets up final sprint in Michigan

The second Michigan Senate debate Wednesday featured several heated clashes between Democratic nominee Abdul El-Sayed and Republican former Rep. Mike...

Business7 hours ago

Meta strikes deal to keep Zuckerberg in California after wealth tax concerns

Under the deal, Zuckerberg will get non-voting shares he can sell to potentially foot a multi-billion-dollar tax bill in the...

Entertainment7 hours ago

‘Curious Case of Benjamin Button’ review: A sweet and folksy musical that wants to go to Broadway

Much as Benjamin Button ages backwards from elderly to infant, the new musical “The Curious Case of Benjamin Button” also...

Business7 hours ago

Airbnb cracks down on checkout chores with new rules for hosts

Airbnb is taking aim at checkout chore lists, telling hosts that guests generally shouldn’t have to strip beds, wash dishes...

Entertainment7 hours ago

John Anderson, Country Music Hall of Fame Vocalist, Dead at 71

John Anderson, a Country Music Hall of Fame member known for his distinct, idiosyncratic singing style, died Wednesday. He was...

Entertainment8 hours ago

CEOs In Town Hall Address Executive Shakeup & Layoffs

A day after Netflix co-CEOs Ted Sarandos and Greg Peters faced anxious investors on the company’s Q3 earnings call after...

Trending News

Join Our Newsletter

Stay updated with breaking news and exclusive content.