MiniDriver retweeted
Downing Street rejects Witkoff’s description of Putin as a ‘humanitarian’
No 10 says Russian president ‘has killed thousands of people, both innocent Ukrainians and his own people’
theguardian.com/world/2026/o…
MiniDriver retweeted
New Mexico's Attorney General holds press conference detailing the state's lawsuit against the federal government over withholding evidence regarding the criminal ongoings at Epstein's New Mexico ranch.
This man must be protected at all costs.
MiniDriver retweeted
Murderous dictator Vladimir Putin slaughtered children in a park in Ukraine on Tuesday and Steve Witkoff praised him as a "humanitarian" on Wednesday.
If you're not repulsed and disgusted, you just might be a sick and twisted piece of shit yourself.
MiniDriver retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
MiniDriver retweeted
Every time Russian troops use Soviet symbolism is a stark reminder that this war is not about NATO or any other excuse.
It is about restoring the Russian Empire, of which the Soviet Union was just one form
MiniDriver retweeted
🚨 BREAKING: LINUX IS NOW FACING TWO CRITICAL SECURITY VULNERABILITIES, AND THERE ARE NO OFFICIAL KERNEL FIXES YET.
Both rated 9.0/10 in severity.
One could allow hackers to take control of vulnerable servers WITHOUT EVEN LOGGING IN.
And the most alarming part? The flaws were made PUBLIC before patches were ready.
Here's what's happening:
→ TWO CRITICAL RCE FLAWS: Both affect KSMBD, Linux's built-in SMB file server.
→ NO PASSWORD REQUIRED: One vulnerability could allow unauthenticated attackers to execute malicious code on vulnerable servers.
→ KERNEL-LEVEL ACCESS: Successful exploitation could potentially give attackers control within the Linux kernel itself.
→ NO MAINLINE PATCH YET: Both vulnerabilities were publicly disclosed before official kernel fixes were available.
→ DISCOVERED BY AI: Trend Micro's AI-powered security scanner identified the flaws.
→ SERVERS AT RISK: Linux systems running the vulnerable KSMBD service need immediate attention, especially if port 445 is exposed.
First PHP. Then Node.js. Then GitLab. Then Python.
NOW LINUX.
And this time, the vulnerabilities are PUBLIC before the fixes are ready.
If you manage Linux servers, CHECK YOUR EXPOSURE NOW.
🚨 BREAKING: IT JUST KEEPS GETTING WORSE. NOW PYTHON IS FACING A MASSIVE SECURITY EMERGENCY.
Python's security team has issued an URGENT warning after a certificate authority compromise put Python's HTTPS security at risk.
→ 8 CERTIFICATE AUTHORITY KEYS COMPROMISED. Some were so weak they could be cracked almost INSTANTLY.
→ FAKE TRUSTED WEBSITES: Attackers could potentially impersonate Python.org, PyPI and other websites during intercepted connections.
→ MALICIOUS DOWNLOADS: Vulnerable environments could be tricked into downloading software from attacker-controlled servers.
→ YOUR OS PATCH MAY NOT PROTECT YOU: Older versions of pip can STILL trust compromised certificates even after system updates.
→ EMERGENCY UPDATES: Python developers are being told to immediately update pip, certifi, uv and other affected tools.
→ DOCKER USERS AT RISK: Existing container images may retain vulnerable certificate stores and need rebuilding.
First PHP. Then Node.js. Then GitLab. Then LiteLLM.
NOW PYTHON.
The very systems developers rely on to establish TRUST online are becoming the attack surface.
If you use Python, PATCH NOW.
Readers added context they thought people might want to know
The Python certifi/pip details match the real eMudhra CA incident, but PHP, GitLab and LiteLLM involved unrelated software bugs, platform flaws and supply chain malware—not CA key compromises like this (Node.js patched concurrently for the same CA issue).
discuss.python.org/t/information-…
emudhra.we-have-a-problem.com
github.com/advisories/GHS…
docs.litellm.ai/blog/security-…
snyk.io/blog/php-patch…
Readers added context they thought people might want to know
KSMBD is a rarely used optional in-kernel SMB server distinct from the common Samba implementation; it is not enabled or shipped by default on major distributions like RHEL, and the flaws affect only systems explicitly running it with port 445 exposed.
thehackernews.com/2026/10/two-cv…
threatlandscape.io/blog/ksmbd-zdi…
MiniDriver retweeted
The final pieces of the puzzle are falling into place, revealing an increasingly disturbing picture of what is happening behind the scenes in Washington.
If you are still wondering where Donald Trump's hysterical attacks on Kyiv come from, why he keeps making absurd claims about "the rain that saved Ukraine," and why he responds so aggressively to journalists who challenge him, consider the analysis of someone who understands the inner workings of the White House.
Dr. Fiona Hill, a former senior White House national security official and one of America's leading experts on Russia, has offered a deeply troubling interpretation of Trump's behavior.
Trump wants Zelenskyy to capitulate.
Why? Because, according to this interpretation, the entire situation comes down to something painfully simple: Trump's wounded ego.
This is a man who promised to end the war in Ukraine within 24 hours. He imagined himself receiving the Nobel Peace Prize and being celebrated as one of the greatest peacemakers in history. He envisioned a spectacular diplomatic triumph that would secure his place in the history books.
Instead, his grand promises have collided with reality.
Months have passed, the magical peace agreement has failed to materialize, and the Kremlin dictator continues to reject proposals that do not satisfy his demands. Putin has repeatedly demonstrated that he has little interest in helping Trump achieve his political ambitions.
So who should Trump blame for this humiliating failure?
Himself? Absolutely not. In Trump's political universe, admitting a mistake is practically unthinkable.
Putin? Apparently not. Trump continues to treat the Kremlin dictator as a powerful leader worthy of respect, despite Russia's continuing destruction of Ukrainian cities and the deaths of innocent civilians.
That leaves one convenient target: Volodymyr Zelenskyy.
Trump is furious because the Ukrainian president refuses to surrender, refuses to kneel before Moscow, and refuses to sign an agreement that would sacrifice his country's sovereignty and territorial integrity.
He is furious because an entire nation refuses to capitulate to an aggressor merely so the 47th president of the United States can stand before the cameras and declare himself the man who ended the war.
And now, as Hill's analysis suggests, the pressure is increasingly being directed not at Moscow, which launched the invasion, but at Kyiv, which is fighting for its survival.
The apparent calculation is that Washington, potentially supported by war-weary European governments, can pressure Ukraine into accepting terms that would allow Trump to claim a diplomatic victory, regardless of the long-term consequences for Ukrainian security.
But the price of this political spectacle is not measured in television ratings, headlines, or Nobel Prize nominations.
It is measured in the blood of Ukrainian soldiers defending their country in freezing trenches. It is measured in the lives of civilians killed by Russian missiles and drones, in destroyed homes, shattered families, kidnapped children, and entire cities reduced to ruins.
Ukraine is fighting an aggressor determined to destroy its independence. At the same time, Ukrainians must confront the possibility that some of those who call themselves allies may place their own political ambitions above Ukraine's survival.
There is something profoundly disturbing about demanding concessions from the country being invaded while treating the invading dictator as an indispensable partner in negotiations.
Ukraine did not start this war.Ukraine did not invade Russia.Ukraine is not responsible for Putin's imperial ambitions or Trump's unfulfilled political promises.
And Ukrainians should not be expected to pay for anyone's wounded pride with their freedom,their territory,or their lives.
A peace agreement that rewards aggression and leaves Ukraine defenseless is not a historic diplomatic victory. It risks becoming an invitation to the next war.
MiniDriver retweeted
There were reports on efforts to deal with the aftermath of Russian attacks on our cities and communities.
Overnight, Russia used, among other weapons, three ballistic missiles with cluster warheads against Kyiv. These missiles are designed to detonate in the air as they approach their targets, spreading damage across an area 400 meters in diameter.
One of them struck Pechersk, Kyiv's historic center, hitting the area between the Kyiv-Pechersk Lavra and the Holy Presentation Monastery.
Monastery buildings, homes, shops, cafés, and other civilian infrastructure were damaged.
This is another extraordinarily revealing strike – revealing because it was no accident. The choice of weapon was deliberate, the choice of target area was deliberate, and so was the intent to inflict as much loss and damage on civilians as possible. There was no military target nearby, not even in theory, and the weapon was designed to cause widespread destruction. Russia has not changed the way it wages this war, and it is taking no steps that would signal a genuine desire to end it.
Throughout the day, air raid alerts have continued in Kyiv and many other cities. So have the strikes. In Kharkiv, a regular commuter train was hit. Dnipro, Marhanets, Mykolaiv, and Kherson, as well as cities and villages in the Kyiv, Zhytomyr, Donetsk, Kharkiv, Chernihiv, and Rivne regions, came under attack.
Russia keeps targeting our energy infrastructure. Since October 11, there have been more than 170 strikes on critical energy facilities, even though we are shooting down a significant number of “shaheds” and some of the missiles. I thank all our friends around the world who are helping us restore our energy system.
Our intelligence services report that Russia has set priorities for further terror against Ukrainians in the coming weeks. Russia is clearly taking advantage of the slowdown in air defense supplies from our partners. It is equally clear that when some partners ease the pressure on Russia, it only reinforces Putin's belief that his goals are within reach. We need different signals and different steps – stronger ones.
I have instructed the Ministry of Defense, together with the military command and the Ministry of Foreign Affairs, to brief our partners on every aspect of the real situation and the threats we face, based on intelligence data. It is important to speed up deliveries of defense packages that have already been approved. I thank all the leaders and countries that are helping!
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
MiniDriver retweeted
🚨 New figures show that knife crime is down by 11% and overall homicides are down by 7%, since July 2024.
Fatal knife attacks are also at their lowest level in 35 years.
MiniDriver retweeted
If a narcissistic pedophile con man has convinced you that Russia is your friend and Canada is your enemy, you need your fucking head examined to see if you even have a brain.
MiniDriver retweeted
Dear @realDonaldTrump,
Russia invaded Ukraine and killed, raped and mutilated innocent Ukrainians. They also, according to your own wife, kidnapped 20,000 Ukrainian children.
Why are you putting America on the side of killers, rapists and kidnappers?
MiniDriver retweeted
🇺🇸 Antony Blinken: “95% of economic aid to Ukraine NEVER left the United States.”
The story about $350 billion supposedly being sent to Ukraine is an outrageous lie. Former Special Envoy Keith Kellogg also called this claim FAKE!
The United States provided Ukraine with only $65.9 billion in military assistance. That was under Biden! And not a single cent under Trump!
That orange bastard will eventually have to answer for all his lies and manipulation. Why are Americans still putting up with this disgrace before the entire world?! 🤷🏼
MiniDriver retweeted
There is a terminal decline in the US administration
Downing Street hits back after Trump’s war secretary diminishes UK’s role in Afghanistan
Pete Hegseth suggested that ‘maybe five’ other countries contributed to the war
independent.co.uk/news/uk/po…
MiniDriver retweeted
No information on ballistic missile launches: The U.S. has once again failed to warn Ukraine about an attack on Kyiv — Radio Liberty.
There are fatalities and injuries.
A massive crater, caused by a missile strike in front of an office building in Kyiv’s Dniprovskyi district—footage captured by a U.S. journalist on the scene.
The building housed only the offices of civilian businesses, as well as a "Sportlife" fitness center.
MiniDriver retweeted
❗️Pentagon chief @PeteHegseth is delaying deliveries of Patriot missiles to #Ukraine needed to intercept ballistic missiles, sources tell The Kyiv Independent.
Contracts for the missiles are sitting on Hegseth’s desk, unsigned.
A source says the missiles have already been paid for by Ukraine’s allies.
The missiles are paid for. The contracts are ready. So what exactly is holding them up? 🤬🤬🤬🤬🤬
MiniDriver retweeted
Trump is a Russian asset and a traitorous CUNT. #TraitorTrump
MiniDriver retweeted
For those keeping score Trump's best buddy Putin just bombed another Ukrainian hospital full of civilians






























