Jesus is God. Christ is King. The King wore thorns. That changes everything. The age has opinions. Eternity has the final word. ❦ Proverbs 3:5-6
Joined January 2022
- Tweets18.1K
- Following4.2K
- Followers948
- Likes43.1K
Jesus is God ✝︎ retweeted
No back up plan, no motive. Just conviction and the desire to follow Him with everything I have. I don't know what's next, but I know Who's next. If you've been watching me for years, thank you for loving and supporting me, and praying for me.
Jesus is God ✝︎ retweeted
OK so I dug it a little. ≈100% of eMudhra's shit certificates were issued by CertiNext, a partner of Internet2/InCommon, who serve "US universities and research institutions". On Oct 2025, Tripti Sinha became I2 CEO; by Apr 2026, they migrated to CertiNet from Sectigo as their CA provider for the next 15 years, without any clear reason, despite eMudhra's patchy track record.
🤔🤔🤔
Elite Human Capital: never bet against.
Jesus is God ✝︎ retweeted
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
Jesus is God ✝︎ retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Jesus is God ✝︎ retweeted
People don’t necessarily think of @OpenAI as a cyber security company but I think over the next 6 months or so that will change.
The php vuln found today is important and I’m proud of our contribution to discovering it.
There is much much more we can/have/will do to ensure we keep the Internet safe.
Watch this space!
Jesus is God ✝︎ retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Jesus is God ✝︎ retweeted
Introducing Cube Arena.
AI models solving a Rubik’s cube they can only see as a picture.
Most AI benchmarks are text questions with fixed answers. The answers leak online, models train on them, and the scores stop meaning much. And you never get to watch a model actually work.
So we built one you can watch 👀 Our server scrambles a cube, sends the model one picture, and checks every move it sends back. No cube data, no solver, no faking it. Runs play out live, and anyone can plug in a model.
> Ladders from 1 move to a full scramble
> 2×2 up to 5×5
> Interactive or one-shot (no peeking)
> 3 lives, no clock. Lose them all and you’re out 💀
> Same cubes for every model, made by our server
> Clear the ladders to unlock the 4×4 Gauntlet 💪
> Open source, plays over MCP
What one cube tests:
> Seeing a flat picture as a 3D cube
> Planning a short way back to solved
> Tracking 20 stickers moving per turn
> Recovering from a wrong turn
> Knowing when to stop thinking and answer
We made it because watching a model stare at a cube and figure it out is genuinely fun 😂 and nobody can memorize it.
There are more models than we can run alone. Run one, or apply to run them for the Verified board and get your name on our contributors page 🥹
Links in comments.
With ♥️ by KRNL Studio
THEY'RE CALLING IT “BLACK OCTOBER.”
And now I understand why.
October 2026 has exposed something much worse than ordinary software vulnerabilities.
Attackers are compromising the very systems we're supposed to TRUST.
━━━━━━━━━━━━━━━━━━
• eMudhra — 8 compromised certificate authority keys, potentially enabling forged HTTPS certificates for ANY website on vulnerable systems.
• LiteLLM — OFFICIAL PyPI and Docker releases shipped credential-stealing malware and remote-code execution capabilities.
• OVHcloud — legitimate software downloads replaced with malicious binaries designed to steal secrets.
• Rank Math PRO — malware distributed through official WordPress plugin downloads.
━━━━━━━━━━━━━━━━━━
Think about what this means.
You can visit the REAL website.
Download the OFFICIAL software.
Use the LEGITIMATE package registry.
Even inspect CLEAN source code.
And STILL end up running an attacker's malware.
And in the case of compromised certificate authorities, even HTTPS authentication itself can be undermined.
━━━━━━━━━━━━━━━━━━
These aren't all the same attack.
But they expose the same terrifying weakness:
The systems we rely on to establish TRUST can themselves become the point of compromise.
And October isn't even over.
Jesus is God ✝︎ retweeted
The PHP vulnerability that affects 70% of the internet was found by GPT5.6Sol
THE INTERNET MAY BE SITTING ON A MASSIVE SECURITY TIME BOMB.
Critical PHP vulnerabilities could let hackers remotely execute code on vulnerable servers WITHOUT logging in. This could affect up to 70% of ALL WEBSITES!
Now think about the MILLIONS of old PHP websites nobody maintains anymore. 🤯
Who is patching THOSE?
