Full-Stack Software Engineer | Dev at @FCPEuro | Founder of @nditcommunity | Volunteer at @codethedream | Alum of @turingschool | 👩💻
Denver, CO
Joined March 2010
- Tweets715
- Following707
- Followers173
- Likes1.6K
Hayley in the Stack retweeted
Every server should have a little guestbook.txt at the root that the bots can sign
Hayley in the Stack retweeted
If you post your full private CA cert key, Twitter will censor it.
*
See?
Hayley in the Stack retweeted
2027 will be the year in history when the most security vulnerabilities are fixed.
Hayley in the Stack retweeted
On the bright side - the market is INSANE right now for security engineers
Hayley in the Stack retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Hayley in the Stack retweeted
This is all just a very aggressive Cybersecurity Awareness Month campaign
Hayley in the Stack retweeted
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
Hayley in the Stack retweeted
I think we've discovered another critical vulnerability:
CVE-2026-BURNOUT: AppSec Professional Exhaustion
Severity: Critical (CVSS 10.0)
Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures.
Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends.
Attack vector: Reading security advisories.
Affected versions: All AppSec professionals, regardless of experience.
Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
Hayley in the Stack retweeted
SITUATION DETECTED: CloudFlare CEO Matthew Prince says he is aware of additional severe vulnerabilities in other pieces of critical software, and said “I think we’re going to have a couple years where every single week it’s going to feel like the sky is falling,” per Reuters.
Hayley in the Stack retweeted
Sama says "I no longer think we're gonna be able to just patch all the bugs."
If accurate, this means 2 things:
1) The internet as we know it is over.
2) We very, very obviously need to stop AI advancement **before** the same becomes true of bio.
Hayley in the Stack retweeted
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
