Senior Security Consultant @TrustedSec | Military grade meme poster, researcher, cloud penetration tester, voider of warranties. My thoughts are my own.

In someone’s cloud
Joined April 2009
Just wanted to remind everyone. Azure Cloud training does not need to be super expensive. You just need to know where to look. Because that is what hackers do. #Azure #Cloud #Hacking Books: amazon.com/Penetration-Testi… Labs: github.com/iknowjason/Awesom… Free SANS Courses (on demand): sans.org/webcasts/sans-works… sans.org/webcasts/sans-works… (Jun8th 2023..live!) sans.org/webcasts/hands-on-w… Need more training. Feel Free to check out my blog on this topic: rootsecdev.medium.com/becomi…
14
239
3
866
159,382
Still at it this morning. Happy Wednesday my friends. Q4 is here 🔥
12
771
‼️BREAKING: Cloudflare says it is already seeing early attacks on the two leaked PHP flaws, hours before the patch. Its CTO Dane Knecht says WAF rules for the known exploit vectors are live for all customers, including free plans, but calls them "a STOPGAP only". Websites are going dark while they wait. NotuBiz, used by 100+ Dutch local governments, pulled council information sites offline, including those of Den Bosch, Breda and Eindhoven. explain xkcd and the Star Citizen Wiki are down too. PHP ships the fix at 14:00 UTC today.
‼️ BREAKING: Two leaked remote code execution flaws in PHP are real, watchTowr confirms. PHP will ship fixes for two critical flaws, both rated CVSS 9.2, on Wednesday 21 October at 14:00 UTC, a day before the embargo was due to lift. CVE-2026-109618 and CVE-2026-109619 first surfaced in a Hacker News post whose author admitted having no evidence beyond "source: trust me, bro". Kevin Beaumont flagged the leak, and watchTowr confirmed it two hours later. PHP says it may release sooner if details go public or exploitation appears. It has not named the CVEs or the affected versions.
45
476
51
2,201
210,150
Hey everyone, its only tuesday. So its not like we are all reading this on a friday evening. So atleast defenders have that going for them this week.
We were all supposed to wait until Thursday at 11am ET. Information has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2926-109618/619 We cannot share further information right now. Take this seriously and apply patches when available.
5
1,080
Oh I acquired some hacking fuel today @nyxgeek @HackingLZ
1
1
11
941
rootsecdev retweeted
RAPID RESPONSE: Huntress has become aware of a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick). We’ve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. 🧵
10
120
19
462
116,657
Did three separate shots at the local clinic office yesterday. Flu, Covid, and pneumonia shots. So tired today. Someone bring me caffeine…STAT
3
822
This tracks
1
2
26
1,098
Got up early to work on a few things. Had a shell up on one of my AI agents. Me: oh hey wait I remember that I needed to do something. 👀
2
778
I have probably used this more lately than what I should have.
2
14
1,152
rootsecdev retweeted
11
598
13
4,206
33,739
Keep climbing for those deficits. Getting leaned out. Will report back by the end of the month to keep me honest 👌 Time to go lifting 😎
1
7
880
I just had Mythos update my internally developed threat intelligence platform. Hello 👋
7
866
Morning everyone including @HackingLZ @curi0usJack
38
1,201
🚨 #BREAKING: Microsoft executive attacks AI training as the "largest theft of labor in human history."
4
926
Going to go watch Terminator now.
Anthropic's Frontier Red Team believes small AI models may now be months away from being capable of self replicating without access to a datacenter. Quoting from the blog: 'The capabilities that make AI models generally powerful coding agents also generalize to cyber tasks, including autonomous replication. Like coding agents in 2024, we’re seeing signs of life for AI worms. We don’t yet have a full rogue replicator, but agents are becoming increasingly capable of completing the individual steps in the replication chain (and passing on their adaptations to future copies of themselves). At the same time, increasing amounts of inference compute are now available both inside and outside of datacenters (see Appendix D). It’s uncertain exactly what form autonomous AI replication will take. It could be a slow, distributed “digital slime mold,” living on relatively insecure compute. It could also be a powerful cyber model that breaches datacenters at a high pace, or a model that scams people for compute credits. As a prediction that goes beyond our experiments, we expect a future awash with agents running on all types of hardware, including some that aren’t under human control. While it’s true that IoT devices have been vulnerable for a long time, lightweight agents may be much more willing than human attackers to put in the effort to compromise large fractions of the world’s IoT compute. The rise of slow replicators would also be a bellwether for more aggressive, faster ones that can breach more hardened machines or be effective API key thieves. We should aim to harden our systems to make it difficult for such replicators to spread, but also prepare to deal with a world where they are here to stay.'
1
7
978
Progressive overloading Monday. Time to get it. Take the day. It’s yours.
14
832
😂🤣 I find the lack of SMB signing remediation…disturbing 🤣
25
2,739