AWS Hero đź’«, Staff eng @Datadoghq AKA Aaron Stuyvenberg Ask me about your p99 (opinions mine)
looking at a flamegraph
Joined March 2009
- Tweets24.9K
- Following1.9K
- Followers12.4K
- Likes59.2K
we are now asking that everyone on-call tonight proactively join the incident call and leave it up overnight
we will sound the CVE claxon as 0-days drop
AJ Stuyvenberg retweeted
We built a working exploit for one of the PHP vulns. All you need to know is that you need to patch. Want more details? Read here:
securitylabs.datadoghq.com/a…
good evening there is a new 0-day DOS in QUIC
Patched in quic-go and cloudflare.
Bun and hyperium still pending. Disable http/3 on public systems
đź«
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
Awww man the hits keep coming today
Sorry railway friends, not fun
An urgent notice from the Railway team
blog.railway.com/p/security-…
gitlab RCE just dropped as teams are trying to catch a break from both PHP CVEs and the leaked intermediate CA keys
what a week
AJ Stuyvenberg retweeted
Credit to @OpenAI @wiz_io @ThePHPF for finding php2shell and running a responsible, coordinated disclosure.
This won't be the last one. Models will keep finding bugs like this in software everyone runs. Maintainers, researchers, providers and governments need a new shared playbook so the response scales with the findings and critical Internet infrastructure gets patched.
That's how we all help build a better Internet.
The Cloudflare's writeup on our php2shell response is up.
Rules went live at 03:02 UTC, about 9 hours before disclosure. Unfortunately the vulnerability leaked early, so we were already watching attackers mutate payloads against the rules and updating as variants appeared.
New rules keep landing in the WAF changelog.
Expect updates through out the day. We will have a more thorough post of what we had to build to better protect people coming shortly.
PHP runs almost 70% of websites. The flaw is in the runtime, so updating plugins won't fix it. Patch PHP.
blog.cloudflare.com/php-vuln…
Patches are live everyone. good luck and godspeed
php.net/archive/2026.php#202…
refreshing php.net for the patch to drop because the RCE POCs just dropped and apparently GLM can reproduce it
refreshing php.net for the patch to drop because the RCE POCs just dropped and apparently GLM can reproduce it
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
Node merged the fix 5 minute ago: github.com/nodejs/node/commi…
My dear friend @darkosubotica was profiled by GeekWire and the entire piece is fantastic, go read it while AI writes your code.
“Should this be done? Probably not,” he said. “But is it fun? Absolutely.”
geekwire.com/2026/retro-tech…
Power has been the bottleneck for some time, finally this is getting some attention
Business Insider confirms it: Amazon has warehouses of GPUs that can’t be installed, and is buying them so far in advance that a supply chain team said they “didn’t have a clear forecasted path” to installing them.
businessinsider.com/amazon-2…
