@moton

a.k.a Matt has been the director of hacker events at https://xitter.cf/t.co/3vdsrhrFtr since 2006. https://xitter.cf/t.co/3znz9NUcCa

Joined October 2007
  • Tweets26.5K
  • Following604
  • Followers758
181Media
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.

cisa.gov
9
Microsoft releases Windows OOB updates to distrust eMudhra certificates - bleepingcomputer.com/news/mi…

Microsoft releases Windows OOB updates to distrust eMudhra certificates

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic...

bleepingcomputer.com
14
CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace - cybersecuritynews.com/cisa-f…

CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools to help organizations find security misconfigurations in Microsoft 365 and Google Workspace.

cybersecuritynews.com
5
CISA lays out plan to push cyber adversaries out of US critical infrastructure - Help Net Security - helpnetsecurity.com/2026/10/…

CISA lays out plan to push cyber adversaries out of US critical infrastructure - Help Net Security

CISA’s 2030 strategy outlines pillars to strengthen cyber defense, protect critical infrastructure, and build national resilience.

helpnetsecurity.com
7
Attackers Exploit Teams External Chat to Breach Organizations in Under - Infosecurity Magazine - infosecurity-magazine.com/ne…

Attackers Exploit Teams External Chat to Breach Organizations in Under

Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware

infosecurity-magazine.com
7
CISA confirms PHP2Shell vulnerabilities now exploited in attacks - bleepingcomputer.com/news/se…

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch...

bleepingcomputer.com
27
macOS autofs Vulnerability PoC Enables Gatekeeper Bypass - securityonline.info/macos-au…

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper...

TL;DR Researcher Mr.Gedik has published a full write-up and proof-of-concept harness for CVE-2026-84568 and CVE-2026-84570, two macOS autofs vulnerabilities. The first lets an attacker who control…

securityonline.info
1
66
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

cisa.gov
28
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw - thehackernews.com/2026/10/ph…

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP updates Windows builds 8.2 through 8.5 to fix a Brotli flaw that could enable code execution through automatic cURL decompression.

thehackernews.com
69
CISA promises proactive defense in new strategic plan | Cybersecurity Dive - cybersecuritydive.com/news/c…

CISA promises proactive defense in new strategic plan

The beleaguered agency, still recovering from major workforce cuts, promised to deepen partnerships and stay ahead of evolving threats.

cybersecuritydive.com
36
Kali Linux 2026.3 released with 6 new tools, desktop updates - bleepingcomputer.com/news/li…

Kali Linux 2026.3 released with 6 new tools, desktop updates

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.

bleepingcomputer.com
2
53
ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security - industrialcyber.co/sbom/enis…

ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain...

ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security.

industrialcyber.co
29
PHP Publishes Mitigation Advice for New RCE Flaw - Infosecurity Magazine - infosecurity-magazine.com/ne…

PHP Publishes Mitigation Advice for New RCE Flaw

PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected

infosecurity-magazine.com
42
PHP2Shell security flaws now sucessfully exploited in the wild - bleepingcomputer.com/news/se…

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.

bleepingcomputer.com
41
FortiSIEM Vulnerability Exploited in the Wild After PoC - securityonline.info/fortisie…

FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public

TL;DR Canada’s Cyber Centre updated its Fortinet advisory on October 23, 2026, to warn that CVE-2026-106173 “is being exploited in the wild.” This FortiSIEM vulnerability, rated …

securityonline.info
53
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog - securityaffairs.com/201609/h…

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Arista VeloCloud Orchestrator vulnerability to its Known Exploited Vulnerabilities catalog.

securityaffairs.com
35
CISA Adds One Known Exploited Vulnerability to Catalog - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
31
CISA Adds One Known Exploited Vulnerability to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
30
PHP shares mitigation for new RCE vulnerability with no patch - bleepingcomputer.com/news/se…

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

bleepingcomputer.com
1
59
PAN-OS PHP2Shell Flaws Hit Firewall Management Interface - securityonline.info/pan-os-p…

Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama

TL;DR Palo Alto Networks confirmed that the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The PAN-OS PHP2Shell risk sits in the mana…

securityonline.info
61
Load more