DarkOperator (@DarkOperator) header
DarkOperator (@DarkOperator) profile picture

DarkOperator

@DarkOperator

Andrez LAMOUROUX

 Worldwide
Joined July 2010
  • Tweets94.5K
  • Following832
  • Followers2.5K
5.6KMedia
Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)Photo by DarkOperator (@DarkOperator)
DarkOperator retweeted
Reuters (@Reuters) profile picture
Reuters
@ReutersOct 22
Some government websites in Europe and elsewhere went offline after vulnerabilities in PHP, a widely used programming language, were uncovered using AI. Cybersecurity Reporter Raphael Satter explains why reut.rs/4jyVubl

How a flaw in PHP sparked a global security scramble - Technology

21
113
12
240
58,902
DarkOperator retweeted
HD Moore (@hdmoore) profile picture
HD Moore@hdmooreOct 21
If you're looking for the most detailed AND *entertaining* way to read about the php2shell bugs, the Calif post is epic: calif.io/php2shell/
PHP2Shell by Calif Research

PHP2Shell by Calif Research

A tale of two PHP remote vulnerabilities

calif.io
3
53
177
19,076
⚠️ OpenAI's GPT-6 agents disabled security alerts and removed safety monitoring while carrying out routine coding tasks. In one case, an agent falsely denied removing monitoring functionality. OpenAI is now investigating why its agents weakened safeguards meant to oversee their behavior. Read - thehackernews.com/2026/10/op…
Image from The Hacker News (@TheHackersNews)
30
50
9
199
48,775
DarkOperator retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_Oct 21
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
Image from sagitz (@sagitz_)
65
568
94
3,095
473,235
DarkOperator retweeted
SOCRadar® (@socradar) profile picture
SOCRadar®
@socradarOct 21
PHP2shell: 2 RCEs in PHP itself (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 each). PHP 8.1 and older get no official fix. → Free checker reads the PHP version your site exposes → Passive: no exploit attempts, no signup Check Exposure: hubs.la/Q04BVKFC0 #PHP #VulnerabilityManagement #ThreatIntelligence
Image from SOCRadar® (@socradar)
5
22
1,947
‼️ BREAKING - PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge. The flaws can enable unauthenticated code execution and expose server memory. 👉 PATCH NOW (CVE-2026-109618, CVE-2026-109619) Details ➜ thehackernews.com/2026/10/ph…
58
494
50
1,757
161,962
DarkOperator retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_IntelOct 21
CVE-2026-109618 and CVE-2026-109619 are two Critical RCE vulnerabilities in PHP with CVSS scores of 9.2. We advise organizations to assess web servers and patch immediately. Read our latest Threat Brief for mitigations: bit.ly/4dSar4F
Image from Unit 42 (@Unit42_Intel)
2
16
2
46
8,079
PHP ships emergency patches for critical PHP2Shell flaws bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
PHP ships emergency patches for critical PHP2Shell flaws

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.

bleepingcomputer.com
12
62
2
139
12,722
DarkOperator retweeted
Reuters (@Reuters) profile picture
Reuters
@ReutersOct 21
Cyber agency warns websites may go dark as PHP prepares critical fix reut.rs/4ixd7Hl reut.rs/4ixd7Hl
Government websites go dark after AI-discovered flaw sparks security scramble

Government websites go dark after AI-discovered flaw sparks security scramble

Government websites in Europe and elsewhere went offline after the disclosure of ​critical vulnerabilities in a widely used programming language that sent website operators around the world scrambl...

reuters.com
27
295
80
698
1,195,716
🔥 Google Chrome is rolling out new protections against #ClickFix attacks that trick users into running malicious commands. These attacks bypass browser download protections. Chrome now detects suspicious copied commands and warns Enhanced Protection users before execution. Read more: thehackernews.com/2026/10/go…
Image from The Hacker News (@TheHackersNews)
5
24
2
118
29,009
DarkOperator retweeted
WordPress (@WordPress) profile picture
WordPress
@WordPressOct 21
The PHP project has released fixes for 2 critical vulnerabilities affecting servers that host PHP applications. Site owners and technical teams should confirm their hosting provider’s update plan and update PHP immediately. Versions before PHP 8.2 no longer receive security updates. These issues are not specific to WordPress, and no WordPress update is required. wp.me/pZhYe-5Gb
Critical PHP Security Release

Critical PHP Security Release

The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immedi…

wordpress.org
95
1,311
155
3,609
314,558
DarkOperator retweeted
Okan (@Okan1849331) profile picture
Okan@Okan1849331Oct 9
teapawt.org/1sex_teacher__/status/…
2
26
624
56,421
Revolut discloses data breach exposing financial info, passports bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Revolut discloses data breach exposing financial info, passports

Revolut discloses data breach exposing financial info, passports

Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency.

bleepingcomputer.com
2
31
1
69
11,520
DarkOperator retweeted
Cybernews (@Cybernews) profile picture
Cybernews
@CybernewsSep 9
See what he found ➡️ cnews.link/temu-wifi-extende…
Image from Cybernews (@Cybernews)
2
5
11
2,177
7-Eleven data breach exposes personal information of 185,000 people bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
7-Eleven data breach exposes personal information of 185,000 people

7-Eleven data breach exposes personal information of 185,000 people

The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notifica...

bleepingcomputer.com
18
1
37
6,441
DarkOperator retweeted
TNW (@thenextweb) profile picture
TNW
@thenextwebMay 23
Anthropic's AI found 10,000 flaw candidates. Only 97 are patched. A single model can now spot critical software flaws faster than every developer on earth can fix them. thenextweb.com/news/anthropi…
Image from TNW (@thenextweb)
2
3
2,236
DarkOperator retweeted
CySecurity News (@EHackerNews) profile picture
CySecurity News@EHackerNewsMay 24
Anthropic’s Project Glasswing Detects Over 10,000 Critical Software Vulnerabilities Worldwide cysecurity.news/2026/05/anth… #AIcybersecurity #Anthropic #ClaudeMythosPreview
Image from CySecurity News (@EHackerNews)
2
2
5
639
DarkOperator retweeted
CySecurity News (@EHackerNews) profile picture
CySecurity News@EHackerNewsMay 24
JDownloader Website Breach Spreads Malware Through Fake Windows and Linux Installers cysecurity.news/2026/05/jdow… #CyberAttacks #CyberBreaches #Cyberwebsites
Image from CySecurity News (@EHackerNews)
1
3
4
905
DarkOperator retweeted
nini (@nini_incrypto_) profile picture
nini
@nini_incrypto_May 23
Google 把内部工程师的代码审查（Code Review）规范公开啦 这几乎是目前业界最顶级的标准 很多程序员只会写代码，但不知道怎么审代码，可以看看 Google 是怎么做的 1.双向指南：不仅教审查者怎么挑毛病，还教作者怎么写出容易通过的代码 2.术语科普：解释了 Google 内部常用的 LGTM（看起来不错）和 CL（变更列表）到底意味着什么 3.实战价值：这套规范不是理论，而是 Google 每一位工程师都在用的实际操作准则 如果你想提升团队的代码质量，或者想知道顶级大厂的开发门槛，这份文档必读！ github.com/google/eng-practi…
GitHub - google/eng-practices: Google's Engineering Practices documentation

GitHub - google/eng-practices: Google's Engineering Practices documentation

Google's Engineering Practices documentation. Contribute to google/eng-practices development by creating an account on GitHub.

github.com
33
601
17
3,703
283,773
How easy is CVE-2026-23918 to trigger? 🔸 One TCP connection. 🔸 Two frames. 🔸 HEADERS + immediate RST_STREAM (non-zero error code). That’s it → double-free in mod_http2, worker crashes. Researchers built a working RCE PoC using Apache’s fixed scoreboard + mmap allocator (default on Debian & official Docker). If you’re on 2.4.66 with mod_http2 + threaded MPM: patch to 2.4.67 now. (prefork MPM is safe)
The Hacker News (@TheHackersNews) profile pictureThe Hacker News
@TheHackersNewsMay 5
🚨 Apache patches CVE-2026-23918 (CVSS 8.8) in HTTP Server 2.4.66. The HTTP/2 double-free flaw can trigger DoS and potentially enable remote code execution via crafted requests. Fixed in 2.4.67. Details here: thehackernews.com/2026/05/cr…
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Apache fixes CVE-2026-23918 in HTTP/2; double-free flaw enables DoS and RCE, impacting version 2.4.66 users.

thehackernews.com
2
22
1
124
22,569
Load more