Cobs (@PhildBean) header
Cobs (@PhildBean) profile picture

IT Technician

Northern Ireland
Joined September 2009
Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)Photo by Cobs (@PhildBean)
Thoughts are with the police officers!😢
Shoot all terrorists! No questions asked.
3
‼️WARNING - OpenSSH issues emergency fix for a critical SSH authentication bypass on Alpine Linux. A password longer than 256 bytes can unlock key-only accounts on affected servers, without knowing the actual credentials. Here's how it works ↓ thehackernews.com/2026/11/op…
88
661
229
3,156
864,709
🚨 Node.js warns of HIGH-severity security vulnerabilities. Security fixes are coming November 11 for Node.js 26.x, 24.x, and 22.x. All three release lines are affected. Production users should take note. Details: nodejs.org/en/blog/vulnerabi…
72
466
203
2,004
506,173
Hey everyone, we have heard your concerns about Proton’s AI strategy and culture and after internal discussions, we want to share a few things with you. First, Proton does not install tracking software on employees' laptops to measure how much AI-generated code they produce. This rumor stemmed from a misunderstanding about how MDM software works, and it's not true. Second, our use of AI will never be at the expense of security. In the past year, contrary to what has been alleged, additional layers of security review have been added to meet the threat posed by hostile AIs scanning Proton's open-source code for vulnerabilities. Our code is open source, and its security remains open for all to verify. We want to prove this to you, so in the interest of transparency, we will lift the hood on how we use AI internally at Proton. This includes publicly releasing and open sourcing several of the internal tools that we use, including more advanced versions of Lumo with greater capabilities, which have never been made available outside of the company. We will also publish how code reviews and security reviews at Proton are done, and detail our AI policies, including where AI is permitted, and where it is not, and our rationale. Instead of just being able to see the final open-source code that we produce to verify security, you will also be able to assess how that code was produced. Lastly, we are not re-interviewing our staff about AI usage, and there are no job losses due to AI re-interviews. You can hold us to these commitments. We're aware that we haven't lived up to the high standard you ought to hold us to, and for that we can only apologize, we are sorry.
681
378
149
5,947
602,077
📢We’re hiring! Our current live vacancy is: ➡️Group Commander - Protection For more information and to apply, visit nifrs.getgotjobs.co.uk
1
1
598
🚨 UPDATE: North Korea's TraderTraitor group is behind the $6.3 billion Binance hack, according to a high-confidence attribution by TRM Labs. The attackers reportedly prepared 50 signed authorizations before draining a Binance hot wallet. About $2.7 billion in assets has been frozen, but billions remain under attacker control. Full details ↓ thehackernews.com/2026/10/bi…
🚨 BREAKING: Binance suffers a security breach affecting $6.3 billion in assets, with nearly $3 billion frozen on-chain. Attackers submitted unauthorized withdrawals, with a compromised DevOps engineer's laptop suspected as the entry point. Details ↓ thehackernews.com/2026/10/bi…
50
155
20
537
58,909
🚨 Binance links $6.3 billion security incident to compromised laptop A DevOps engineer’s laptop was compromised, letting an attacker access a service container and submit unauthorized withdrawals. ~$3B frozen on-chain. No evidence private keys were leaked. TRM Labs attributes it to North Korea’s TraderTraitor group (also behind the $1.5B Bybit hack). Withdrawals paused (expected back in ~48 hours); Binance says it will cover all losses. Details ↓ cyberinsider.com/binance-sec…
1
3
469
AI demand triggers massive PCB shortage for PC makers as order books full until 2030 — lead times stretch to 30 months as material costs surge 12x tomshardware.com/pc-componen…
17
50
17
158
17,541
Cobs retweeted
Now that’s a nice touch. motorola signature 27: elegantly crafted for comfort. See for yourself on November 5. #MotorolaSignature #SignatureStatement
77
93
17
848
47,479
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real. Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet. Mitigate now: → Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart → Tighten SSH access rules to the users/devices that need them Read: thehackernews.com/2026/10/un…
56
194
50
1,058
146,898
Google is reading your Drive. Your photos, docs, and files are none of their business. Good news: you can migrate your entire Google Drive to @MEGAprivacy in one click. It’s end-to-end encrypted, so your files are visible to you and no one else — not even Mega.
29
156
13
789
18,171
Cobs retweeted
the tailscale vulnerabilities read like slop to me. nothing in there seems critical or reason to panic. also: no repsonsible disclosure, nor any code or proof. feels like a scam.
14
14
3
321
11,512
My sources in Nigeria tell me that Islamic terrorists are carrying out mass-murders of the Christian population — targeting them at their homes, schools and places of worship. This heartbreaking video came out over the weekend. Pray for Nigeria’s Christians 🙏
199
1,463
174
2,293
36,455
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details → thehackernews.com/2026/10/ur…
225
2,227
791
7,305
1,476,410
Cobs retweeted
BREAKING: 32 government services offline and four partially unavailable, according to a minister adressing the House of Lords. trib.al/HIcpQJ0 📺 Sky 501, Virgin 602, Freeview 233 and YouTube
99
362
78
983
248,490
As if PHP2Shell wasn't enough for one day... now GitLab. 😅 🚨 CRITICAL GITLAB ALERT (CVSS 10.0) CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers. ⚠️ Potentially affects 12 years of releases, dating back to 2014. Patches available. Update immediately! docs.gitlab.com/releases/pat… #gitlab #cybersecurity
58
533
122
4,058
297,537
‼️ BREAKING - PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge. The flaws can enable unauthenticated code execution and expose server memory. 👉 PATCH NOW (CVE-2026-109618, CVE-2026-109619) Details ➜ thehackernews.com/2026/10/ph…
58
494
50
1,756
161,980
‼️BREAKING: Security firm Calif appears to have a working exploit for the leaked PHP flaws, hours before the patch. A briefly posted video credited to Calif shows it running commands on a WordPress 7.1.3 site on PHP 8.5.4. Kevin Beaumont says a screenshot from it is real. A separate public PoC is also circulating, but its own author now says one of its attack chains is dead and code execution is unreliable. Admins have two stopgaps until the fix lands at 14:00 UTC today. Turning off session.upload_progress.enabled in php.ini disables the feature the leaked details point to. The only cost is upload progress bars. Blocking every request with a multipart Content-Type at the web server goes further, but breaks file uploads. Neither is official. Gina Peter Banyard, a PHP core developer at the PHP Foundation, says "the only mitigation is patching / upgrading PHP." If you can afford to switch a server off for a day, she says, that might be the most sensible thing to do. "I sadly know too much," she wrote.
17
158
9
1,209
118,321