UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Lucho retweeted
⚠️ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the built-in fetch(), body-parser)
Aikido detects this. Patches are available.
All Grok @Bots get their own email address and can help analyze and summarize your email box too
grok @bot 0.70.2 is rolling out!
- each bot can claim its own email address at @mail.grokbot.com and draft emails for you to send
- apps like Figma, Notion and Canva show up as live cards right in the chat
- bots can search X and read public posts and profiles without connecting an X account
- describe what you want and your bot suggests a matching template
- shared pages can be downloaded as a pdf
- an approval check before anything irreversible
and much more!
x.ai/changelog/bot

ALT Grok Bot, An inbox of its own. A Bot's inbox at [email protected] with an email draft ready to send.
Lucho retweeted
🇬🇹 🚨 GUATEMALA POLICÍA NACIONAL CIVIL (PNC) ANTECEDENTS DATA ALLEGEDLY LEAKED
A threat actor on an underground forum claims to have leaked Policía Nacional Civil (PNC) antecedent material from Guatemala — criminal/police background data and citizen records, including a claim of +1,000 photos of users with antecedentes policiales.
The capture shows a DarkForums-style post advertising the leak and proof screenshots; sample citizen PII, system URLs, and contacts in the frame have been redacted.
Research date: Sep 29, 2026. The claim has not been independently verified.
⚠️ Analyst Note:
Non-US government / law-enforcement data-leak claims are treated as publishable (after full redaction) under standing DDW rules, but authenticity still requires scrutiny. Screenshots of police portals and citizen records can be staged, recycled, or drawn from limited exposure rather than a full PNC compromise. Volume, coverage of the antecedents system, freshness, and whether policiales.pnc.gob[.]gt production systems were actually breached remain unconfirmed.
We assess this as an unverified threat-actor claim, NOT confirmation of a compromise of Guatemala’s Policía Nacional Civil systems.
If authentic and non-public, criminal-background and citizen identity data could support doxxing, intimidation, fraud, or broader intelligence abuse — but those outcomes should not be treated as confirmed on the basis of a listing alone.
#DDW #DarkWeb #Guatemala #PNC #PoliciaNacionalCivil #LawEnforcement #Government #DataLeak #ThreatIntelligence #CyberSecurity
"Having them here is great."
Them being the engineers behind our AI products.
Next week in NYC, we're running this year's edition, "Build your own agent"
A day with the people who build the product, early access to betas, and learning from each other.
That's what the Pioneers program is for.
Join builders from @expo, @airtable, @Gong_io, and more.
Get involved now: snty.link/pioneers
increibe que hace mas de 10 años .@Malesomusica haya escrito esta cancion.
Hoy se retira esa zurda de la seleccion Argentina... que dia mas triste!
youtu.be/apxXCsxHN-4?si=ruAF…






























