The 48 Hours, Episode 1: seven security incidents in two days
48 hours, seven incidents, from PHP to a private key with the value 4. As a 45-second video, built with AI.
Translated from the German original with an AI language model, approved by me. Read the original
48 hours. Seven security incidents.
PHP: two bugs, severity 9.2 out of 10. Patch it, or take it offline.
GitLab: 10.0, the top score. Every version since 2014 is affected.
eMudhra: one private key had the value 4.
LiteLLM: a poisoned package on PyPI for almost two hours.
Onamae: 26,739 servers, every plan switched off.
Cairn: one attacker, more than 100 companies, around 50 dollars per breach.
SBI: 3,897 records affected.
US, EU, Japan. Patch, or go offline.
How the video was made
Script, design and code with Claude Code, rendered from HTML with HyperFrames. The voice is Kokoro-82M and runs locally on my machine. No stock footage, no cloud rendering.
By the way, the "9.2" on the board is not a PHP version. It is the CVSS score, the severity. I tripped over that myself, so now it says so.