Derpino retweeted
JUST IN: Elon Musk declares money will become irrelevant, predicting future currency will be measured in “wattage and tonnage.”
There are so many listings at 1k. How do these multiple 3-4k comps make any sense besides pumping the market? How are they pumping the market with like 20 listed at 1k? Wth lol
🚨 State Bank of India (SBI) confirms a data loss incident after identifying 3,897 customer records containing personal information in a dataset of roughly 375,000 records on the dark web.
Exposed details reportedly include names, phone numbers, dates of birth, addresses, and banking identifiers.
Read - thehackernews.com/2026/10/st…
Derpino retweeted
🚨 UPDATE: 1.7M $BTC sits in addresses with exposed public keys, Starknet says, as quantum attack estimates fall 20x.
Derpino retweeted
Police have confirmed nearly $1 million worth PSA trading cards were stolen in Fedex truck heist
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised.
Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes.
Full details - thehackernews.com/2026/10/ei…
Derpino retweeted
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised.
Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes.
Full details - thehackernews.com/2026/10/ei…
Derpino retweeted
‼️BREAKING: Security firm Calif appears to have a working exploit for the leaked PHP flaws, hours before the patch.
A briefly posted video credited to Calif shows it running commands on a WordPress 7.1.3 site on PHP 8.5.4. Kevin Beaumont says a screenshot from it is real.
A separate public PoC is also circulating, but its own author now says one of its attack chains is dead and code execution is unreliable.
Admins have two stopgaps until the fix lands at 14:00 UTC today.
Turning off session.upload_progress.enabled in php.ini disables the feature the leaked details point to. The only cost is upload progress bars.
Blocking every request with a multipart Content-Type at the web server goes further, but breaks file uploads.
Neither is official. Gina Peter Banyard, a PHP core developer at the PHP Foundation, says "the only mitigation is patching / upgrading PHP."
If you can afford to switch a server off for a day, she says, that might be the most sensible thing to do.
"I sadly know too much," she wrote.
Derpino retweeted
‼️ PHP UPDATE: A public exploit for the leaked PHP flaws is now online, complete with downloadable code, hours before the patch.
Its author, who posts as J4ck3LSyN, says it was recreated and "lab/field tested", and labels one of the two bugs "weaponized (lab)".
The PoC was recently updated, admitting the attack chain it first described does not work.
A separate exploit credited to security firm Calif was shown running commands on a WordPress test site in a video that was briefly posted.
PHP's fix is due at 14:00 UTC today.
Can @dfinity do something?
PHP has warned about two serious security bugs that could put websites at risk.
The vulnerabilities can potentially let attackers run their own code on vulnerable web servers. PHP is used by websites and services running platforms such as WordPress, MediaWiki, Magento, Joomla, Drupal and more.
Some websites are temporarily taking parts of their services offline while they wait for more details about the bugs.
Derpino retweeted
‼️ PHP UPDATE: The Dutch parliament, the Dutch national cyber agency and Finland's central government have pulled websites offline ahead of the PHP patch.
Finland's state IT centre Valtori is shutting down public-facing central government web services. The National Land Survey of Finland is already down.
In the Netherlands, the Tweede Kamer, the NCSC and the Dutch Data Protection Authority are offline. So are tech site Tweakers and NotuBiz, which runs council information for 100+ local governments.
The University of Vienna switched off its websites, webmail and Moodle. The University of Freiburg and Finland's Haaga-Helia have taken services down too.
Fur Affinity, Pinboard, explain xkcd and every wiki on Miraheze are dark as well.
Valtori says its shutdown is a precaution, not the result of an attack or breach.
PHP was created by Rasmus Lerdorf in 1994, it initially stood for Personal Home Page
PHP's fix is due at 14:00 UTC today.
Derpino retweeted
🚨 TECH EMERGENCY: The internet could be facing what security researchers are calling a “HACKPACALYPSE.”
In simple terms, an Indian company responsible for issuing digital certificates used to secure software and internet communications reportedly made a catastrophic security mistake.
Some of its supposedly secret cryptographic keys were generated using shockingly weak numbers, including one as simple as “4.” Other keys were reportedly just as insecure, making them potentially easy for attackers to crack.
Now, a massive security response could be underway, with affected software, systems, and devices needing urgent updates before hackers can exploit these weaknesses.
The biggest concern? State-sponsored hackers, including groups linked to North Korea, could potentially take advantage of vulnerable, unpatched systems to launch cyberattacks, compromise software, and cause widespread disruption.
The race is now on to secure affected systems before attackers can exploit them.
How many people still got this flag next to their neuron? #8yrgang its about to be OG status soon! And were betting that selling these OG accounts on ID geek in the far future will be almost priceless!
Derpino retweeted
Buying cards at shows? Read this:
A lot of cards are getting pen-marked to hide whitening and edge damage. It’s easy to miss in bad lighting.
Bring a small blacklight, check the edges before you buy. You might look like a try-hard, but it’ll save you from an expensive mistake.
Derpino retweeted
‼️BREAKING: Cloudflare says it is already seeing early attacks on the two leaked PHP flaws, hours before the patch.
Its CTO Dane Knecht says WAF rules for the known exploit vectors are live for all customers, including free plans, but calls them "a STOPGAP only".
Websites are going dark while they wait. NotuBiz, used by 100+ Dutch local governments, pulled council information sites offline, including those of Den Bosch, Breda and Eindhoven.
explain xkcd and the Star Citizen Wiki are down too.
PHP ships the fix at 14:00 UTC today.
‼️ BREAKING: Two leaked remote code execution flaws in PHP are real, watchTowr confirms.
PHP will ship fixes for two critical flaws, both rated CVSS 9.2, on Wednesday 21 October at 14:00 UTC, a day before the embargo was due to lift.
CVE-2026-109618 and CVE-2026-109619 first surfaced in a Hacker News post whose author admitted having no evidence beyond "source: trust me, bro".
Kevin Beaumont flagged the leak, and watchTowr confirmed it two hours later.
PHP says it may release sooner if details go public or exploitation appears. It has not named the CVEs or the affected versions.
