Web Application Security Consultant. Two sons' proud dad! https://xitter.cf/t.co/uEjJ0UQkhV

Online
Joined May 2009
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Marius Avram retweeted
Liked PHP2Shell? You’re gonna love Node2Shell. We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now! imperva.com/blog/node2shell-…
30
179
37
964
112,837
Marius Avram retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST. Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using: 🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…) 🟧 Bambda scan checks (github.com/PortSwigger/bambd…) 🟧 BChecks (github.com/PortSwigger/bchec…) Start scanning for the vulnerability now → portswigger.net/bappstore/31…
7
250
15
1,177
66,263
Marius Avram retweeted
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
64
559
91
3,048
458,687
Marius Avram retweeted
m@ttias ⚡️
@mattiasgeniarOct 21
PHP Patch is out!! PHP 8.5.12: 31c0ea7d7f github.com/php/php-src/commi… PHP 8.4.27: 506e87fa7d github.com/php/php-src/commi… PHP 8.3.36: 3c832b523e github.com/php/php-src/commi… PHP 8.2.35: 01a40e89fb github.com/php/php-src/commi… The two advisories with the full details: GHSA-w8hw-w9fx-j79w (CVE-2026-109618) github.com/php/php-src/secur… GHSA-6wmf-4rv5-p3rp (CVE-2026-109619) github.com/php/php-src/secur…
11
50
15
297
462,654
Marius Avram retweeted
Wild story from @briankrebs: 1) Dubrovsky, the arrested ransomware negotiator, knew ShinyHunters stole FBI data but never told FBI; 2) an exec from another large US negotiating firm played an active role operating ShinyHunters' victim extortion website krebsonsecurity.com/2026/10/…
2
35
136
10,958
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 18
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers. Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began. A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
97
333
64
3,653
474,014
Marius Avram retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
728
1,477
1,227
11,615
2,910,692
Marius Avram retweeted
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
138
394
217
2,273
787,033
Marius Avram retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number. More: 404media.co/heres-what-teleg…
491
889
148
4,182
944,651
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 16
🚨 BREAKING: Suspected Chinese spies hacked BeyondTrust Remote Support servers with a zero-day, CVE-2026-102764. One was hosted by BeyondTrust itself, and they were alerted instantly, but their automated 3rd party triage tool closed the alerts as false positives.
12
94
9
446
30,146
Marius Avram retweeted
Apple calls the iPad a computer. So I built Linux for it. I built LinPad OS - Linux for iPad. - Desktop windows + a real terminal - No jailbreak. No VM. Free & open source (pre-release). What is your iPad missing? linpados.com #Linux #iPad #OpenSource
64
184
17
1,680
122,657
Marius Avram retweeted
Curl has one high cve from very long time leading to possible RCE, and you now what @pruvadev did? reproduced. CVE-2026-92392: curl HTTP/2 upload Use-After-Free RST STREAM HTTP 1 1 REQUIRED/REFUSED STREAM leading to potential RCE pruva.dev/reproductions/REPR…
9
38
2,350
Marius Avram retweeted
🚨 PoC RELEASED — Splunk Enterprise RCE, no login needed CVE-2026-76268 | CVSS 9.8 (Splunk) Anyone who can reach the Patroni API on a search head cluster member can run OS commands. A public repo now claims a PoC. ⚠️ Affected: 10.2.0–10.2.6 • 10.4.0–10.4.2 ✅ Fixed: 10.2.7 • 10.4.3 Workaround: disable the PostgreSQL sidecar (unless you use Edge Processor, OpAmp, SPL2). • Not in CISA KEV • No known exploitation • PoC not run or verified by ThreatWire Patch today, and keep Patroni off untrusted networks. Full breakdown 👇 threatwire.tech/news/splunk-… #Splunk #CVE #Poc #threatWaire
9
47
2,239
🚨 CVE-2026-104935 🚨 Ivanti Connect Secure authentication bypass (CVSS 10.0). Discover every Ivanti VPN you run and see which ones are exploitable. Run directly with Neo: go.projectdiscovery.io/CVE-2…
1
8
42
2,810
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 14
‼️BREAKING: Hackers are planting webshells on Nextcloud servers through a critical Collabora flaw. CVE-2026-110447 in the built-in CODE Server app lets anyone run commands without logging in. Collabora says update to 26.4.303 or delete it.
11
167
12
1,030
69,161
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,170
6,088
5,730
77,621
26,063,764
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 13
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code. They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
135
811
138
4,727
278,317