Scripts ‘n Fridges: The Software Support Gap Fueling Cyber Chaos
<p>Security Ledger host Paul Roberts speaks with Censys’s Silas Cutler about two major incidents: critical remotely exploitable PHP vulnerabilities discovered by a frontier model AI and follow-on AI-assisted research, and cyberattacks on internet-exposed Danfoss refrigeration controllers that forced French supermarkets’ systems into defrost or extreme temperatures, spoiling food and causing some fires. Cutler explains PHP’s ubiquity, what exploitation traffic may look like, and Censys findings estimating roughly 41 million vulnerable websites (about 1–3 million direct hosts) while noting rapid patch adoption (8.1 million patched since Oct. 21) and ongoing probing using early proof-of-concepts. On Danfoss, he describes chaining two disclosed bugs (March and August) to achieve unauthenticated compromise, Censys counts of 2,991 exposed StoreView panels (61% in France), post-incident reductions, and broader risks from publicly exposed, third-party-managed, end-of-life systems and the need for stronger notification and long-term support approaches.</p>
