
Cyber security engineer. #blueteam This account is for kittens, memes, paintins and rants about my country politics. follow me on hmier bsky & cara.
Joined July 2009
- Tweets127K
- Following1.6K
- Followers1.8K
- Likes163K
Helios Mier retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
no tengo cuenta premium de oracle para ver los detalles pero me dicen por aquí que el parche de Java de hoy contiene la actualización del trust store para remover los certificados malos de eMudhra.
entonces hay que instalarla pronto.
oracle.com/security-alerts/a…
cc @patux
Helios Mier retweeted
I WAS JOKING
FUCK
shut... the ... front... door...
was JAVA feeling lonely and wanted to get into the party?????
Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1
oracle.com/security-alerts/a…
@uwu_underground
Helios Mier retweeted
Qué contento estoy con mi app híbrida en PHP y Node que estoy desarrollando usando LiteLLM y OpenCode, alojada en mi GitLab self-hosted y con certificados de eMudhra.
AI is not making the wolrd unsafe... just making more visible all the problems that has been always there.
Been on security so long that this PHP thing is mot even in my top 5 global threats attended.
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
shut... the ... front... door...
was JAVA feeling lonely and wanted to get into the party?????
Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1
oracle.com/security-alerts/a…
@uwu_underground
Helios Mier retweeted
Between October 2020 and August 2026, nearly every single up-to-date Linux server running PHP was wide open for anyone in the world to gain root access.
Holy shit.
Helios Mier retweeted
All of your environment variables have been lifted off of engineering's "full stack cloud" environment.
blog.railway.com/p/security-…























