Lead Full-stack engineer @WeWorkJP. Organizer @LaravelliveJP & @phptokyo 👉 Laravel Live Japan: https://xitter.cf/t.co/vWQ5zWfJMx 👉 Discord: https://xitter.cf/t.co/z9uEaYrDtr
Tokyo, Japan
Joined January 2022
- Tweets3.1K
- Following631
- Followers683
- Likes81.5K
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
#DailyResource
News by Stephen Rees-Carter
Laravel Security Notice: Critical PHP Security Release
Read now at
bestoflaravel.com/go/5491
#php #laravel #webdev #javascript #tech #resources #developers
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Patched PHP runtimes are live on Vapor.
Our guidance has changed, and we now recommend redeploying your apps.
◆ Native runtime on PHP 8.2+: redeploy
◆ Docker runtime: run a new deployment, not a redeploy
PHP 8.0 and 8.1 won't get a patch. Upgrade to 8.2+ now.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Native runtimes are updated on Laravel Vapor.
We are still working on an auto redeploy for Vapor and recommend redeploying yourself to get you on the patched secure PHP version quickly.
All images are available including 8.3, 8.4 and 8.5. If you are not on a native runtime, you will need a new deployment, not a redeploy.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Updates:
Laravel Forge is back to normal service. Server provisioning, PHP updates via the dashboard, and live UI updates are all working. One outstanding item: Ubuntu 24.04 on Laravel VPS is temporarily disabled while we finish that piece of today’s work. We’ll post an update as soon as it’s available.
Laravel Envoyer is back online. Deployments are running as normal following today’s PHP security work. Healthchecks are not yet restored - this requires a further PHP update and will be addressed separately. We’ll let you know as soon as that’s in place.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
／
🚃 Vue Fes Japan 2026 開催まであと2日！
＼
会場は大手町プレイス ホール＆カンファレンス🏙️
・地下鉄「大手町」駅 A5出口直結
・JR「東京」駅 丸の内北口から徒歩7分
当日は 9:00 開場です！
vuefes.jp/2026/ticket
#vuefes
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Forge is working normally, however the team has encountered issues bringing broadcasting back online so real-time updates are not operating correctly in the UI.
We are testing different solutions for the problem and in the meantime, please refresh the page in order to see page updates.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP 8.5.12 released - 90 fixes in 29 components, including security fixes (CVE-2026-109618, CVE-2026-109619).
Changelog + downloads: php-net.pro/news/php-8-5-12-…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
To anyone critical of PHP - today especially:
You are delusional if you think this same sort of vulnerability hasn't happened to every other language in existence.
We are targeted because we're popular.
Funny to see people with almost no or no experience at all talk shit about PHP, as if stuff like this could not happen to other languages and tech stacks 😂
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The Laravel Cloud edge network is powered by Cloudflare.
All deployed Laravel Cloud applications, including those in dedicated zones and with custom domains, have these rules applied automatically.
We are continuing to rollout patched PHP images to address the underlying vulnerability.
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Forge customers: upstream PHP PPAs on Ubuntu have not received the patch yet. At the time of this post, updating your PHP version in Forge will not receive a patched version.
We will post another update when patched versions have landed in the PPA and give green light to patch your servers.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Of course it'd be better to have vulnerability in PHP at all, but I'm deeply moved by today's events:
1) The absolute profesionalism of everyone involved from @ThePHPF. Thank you!
2) The number & size of sites went off-line at 2PM UTC to patch their servers. PHP totally runs the world!
3) PHP in news reports in press and TV across the world.
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Laravel Cloudでホスティングされているアプリケーションは自動でPHPのパッチが適用されるので、ユーザー側での対応は不要です。東京リージョンはすでに適用済みです。
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
An unprecedented day in my history with PHP.
Some bumps along the way, but really proud of the @laravel team for working through the night ensuring all of our products and customers had patches available to them and, when possible, applied automatically.
Given the advancement of agents, it's quite possible this won't be the last time this happens, and it's likely PHP won't be the only language that goes through this. We built some solid muscle today to do even better next time.
Onward. 🫡
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
/dev/null is back! thanks for your patience!
dev-null.sh/@xHeaven/commits…
#devnull
