@riper81

I fight #Malware and bad actors at @monarxsecurity & run https://xitter.cf/t.co/5ZvsLnMDeS // I talk about WordPress, Web Security, WAF, CDNs and DevOps.

 Monterrey, Mexico
wpsecurityanalyzer.com
Joined January 2010
  • Tweets11.3K
  • Following3K
  • Followers1.5K
687Media
PHP2Shell is here and below are some User-Agents that are actively probing websites across the world for it: hellflow-php2shell/1.0 php2shell-109618 php2shell-poc-v3/3.0 php2shell-exposure-check/1.0 CybaVerse-PHP2Shell-PassiveCheck/1.0 sudo3rs-PHP2Shell-Checker/1.4.0
1
3
8
1,874
php2shell-lab-research/1.1 (+responsible benchmarking; contact: operator) php2shell-scan/1.0 (+github.com/0xrsydn/php2shell…) php2shell-visual-demo/1.0 Expect more to come during the day. PATCH YOUR PHP NOW!!! GO GO GO!!!!
256
Happy birthday 🍰
Oliver Sild
@OliverSildOct 21
It’s my bday and I planned to take the day off.. Looks like the internet had other plans for me today.
1
57
Sal Aguilar // WPSecurityAnalyzer.com retweeted
Oliver Sild
@OliverSildOct 21
It’s my bday and I planned to take the day off.. Looks like the internet had other plans for me today.
Eric Taylor
@bcs_erictaylorOct 20
PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619) Information about two new remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 (CVSS v3.1 10 / 10), has leaked ahead of their coordinated disclosure, and security firm Watchtowr Labs confirmed that the flaws are real. Both vulnerabilities are due to be disclosed on Thursday, October 22, alongside patches. Until those advisories land, no fix is available, which leaves the flaws as zero-days in PHP installations everywhere.There is currently a scheduled release of an advisement and possible patch on Wednesday, October 21 2026 at 14:00 UTC. Below is a video of a researcher, maybe the original researcher, showcasing the exploits. #CTI #BlueTeam #ThreatIntel #CVE-2026-109618 #CVE-2026-109619
6
5
1
58
26,962
After @TeamUpdraftWP incident - here's what we've seen and what we're doing to protect all of our customers monarx.com/press-news/securi… #malware #WordPress #infosec #websecurity #websitesecurity #updraft #threathunting
1
1
221
more replies
The same IPs that are dropping these backdoors disguised as WordPress Plugins are also dropping well-known backdoors such as accesson.php
1
31
If you're hosting company is using #Monarx #ThreatShield, you're already patched/protected against this issue. If you're a website owner and have root access to your server, let me know! I can help!
16
#Hostgator Latam is protected by #Monarx 🛡️. From March-August 2026, we're covering more than 600k customers, reviewing more than 28 billion files 😱 #malware #websitesecurity #infosec #hosting #websecurity #rasp webhosting.today/2026/10/07/…

HostGator & Monarx Log 51M Security Actions

HostGator and Monarx recorded over 51 million proactive security actions in Brazil, while monitoring 28 billion files across LATAM.

webhosting.today
1
1
61
Thank you for helping protect the web and its users!
Oliver Sild
@OliverSildOct 6
⚡ Another security release by WordPress. This time, one of the issues patched was reported to WordPress by our own security team at @patchstackapp patchstack.com/articles/word…

WordPress 7.1.3 Security Release - Patchstack

WordPress 7.1.3 landed on 6 October 2026. It’s a maintenance and security release with seven security fixes and four bug fixes. Two weeks ago, 7.1.2 fixed a sin

patchstack.com
77
Yes!
Oliver Sild
@OliverSildAug 26
🔥We heard you like the @patchstackapp merch, so we made some more! store.patchstack.com/

Patchstack Community Store

We believe in security through community, and to celebrate that, we've got some sweet merchandise for our team, partners, and community.

store.patchstack.com
1
152
Sal Aguilar // WPSecurityAnalyzer.com retweeted
Oliver Sild
@OliverSildAug 19
🚨If you're using Elementor Pro then go and update your websites right now! This update that was just released fixes an unauthenticated arbitrary file upload vulnerability that leads to remote code execution. All websites with Patchstack enabled have the vulnerability auto-mitigated, so no need to panic update (and potentially break the site) - but even then please prioritize maintenance at the earliest convenience. Details here 👇 patchstack.com/articles/crit…

Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin - Patchstack

This blog post is about an unauthenticated arbitrary file upload vulnerability in the Elementor Pro plugin that leads to remote code execution. The flaw lives i

patchstack.com
3
13
2
36
3,052
Sal Aguilar // WPSecurityAnalyzer.com retweeted
ALBERTO PERALTA
@ALBERTOPPERALTAJun 30
Genios los hermanos argentinos que hicieron éste doblaje – at Asuncion, Paraguay
126
2,134
95
11,474
557,127
Glad to read you again @KrasimirSec the bulgarian menace is back 🙌
Denis@unmaskparasitesJun 1
Revealing steganography in malware that fetches payloads from Steam Community comments. Re: post by @KrasimirSec godaddy.com/resources/news/m…
1
88
🚨 Active #Malware infection campaign targetting #WordPress websites. Injecting JS redirection scripts. Domains involved: ushort[.]observer ushort[.]info u-short[.]net urshort[.]live ushort[.]company ushort[.]today u-short[.]net ushort[.]com ushort[.]dev cc @unmaskparasites
3
1
6
357
more replies
They are also creating fake Coming soon htm, html and php pages that also contain a variation of this redirection.
1
1
88
More info tomorrow!
1
55
Sal Aguilar // WPSecurityAnalyzer.com retweeted
Tomzur
@tomzurMay 26
The new Bot protection feature is available for your WordPress sites, check your MyKinsta dashboard 🔥🟢🥁
4
1
15
1,720
#DirtyFrag and 3 @cPanel CVEs - another though week for the web hosting industry. Specially after #CopyFail ast week. Folks that are actively working on patching production servers to protect companies and customers THANK YOU❤️💪 bit.ly/4d8VMRe
1
1
86
Load more