Father of 6 Air Force Veteran Cyber to Science 3D+Science Interests Grad Student Aerospace Science 2029 ISC² CISSP Certified ISACA AAISM Certified
Joined June 2025
- Tweets1.3K
- Following506
- Followers104
- Likes935
Oh my
#CyberSecurity
Henri retweeted
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
Henri retweeted
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers.
Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began.
A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
A PLC, robot controller, rover computer, satellite subsystem, or industrial control node is not just another server.
A compromised command can change speed, pressure, temperature, position, force, or timing. The official documents establish the policy and threat context. AI-assisted cyber capability is reducing the distance between a software exploit and a physical consequence.
The next step is to add security controls to the simulation work. Robot assets and learned policies need provenance and integrity checks. Commands need authentication, authorization, bounds, and freshness.
Telemetry needs integrity and replay resistance. Sensors need consistency checks against spoofing or impossible state. Controllers need safe-state behavior, recovery paths, and an operator override that is tested rather than assumed.
henrialfonso.com will soon provide some guidance and services sorry for the wait.
Henri retweeted
🌕 Happening now! The largest consortium in the U.S. dedicated solely to lunar surface technology development is about to convene. 🚀 Learn from NASA, academic, and private sector experts about why this tech is critical for humanity’s first Moon Base and how we’re collaborating to bring it to life! 👩🚀
@JHUAPL @GeorgiaTech @NASAMoonBase
go.nasa.gov/4zz0VvB
Can't wait to contribute and help secure advancing technology.
Let's build.
We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models.
Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work.
We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming.
anthropic.com/news/cyber-ver…
