Researcher @syhunt, monitoring the dark web and researching #opensource software
Joined November 2020
- Tweets193
- Following48
- Followers55
- Likes121
Roberto Marc🏹 retweeted
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches.
The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses.
Our earlier concerns about PHP session handling remain relevant.
We've updated php2shell-protection with additional hardening guidance.
#php #cybercurity
github.com/syhunt/php2shell-…
Roberto Marc🏹 retweeted
As if PHP2Shell wasn't enough for one day... now GitLab. 😅
🚨 CRITICAL GITLAB ALERT (CVSS 10.0)
CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers.
⚠️ Potentially affects 12 years of releases, dating back to 2014.
Patches available. Update immediately!
docs.gitlab.com/releases/pat…
#gitlab #cybersecurity
Roberto Marc🏹 retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
xitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability.
fedi.katze.sh/@elise/1174793…
Roberto Marc🏹 retweeted
And as expected another attack surface has arisen.
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
xitter.cf/_annieversary/status/2…
Roberto Marc🏹 retweeted
Proud to have partnered with Syhunt in developing its next-generation on-device AI technologies, including proprietary AI models, a breakthrough Symbiotic AI security engine, and AI-powered vulnerability analysis
xitter.cf/syhunt/status/21097467…
🚀 Syhunt is bringing next-generation, on-device AI to application security!
Join us at Security Leaders Brazil 2026 for an exclusive preview of NX, our new AI-native and AI-augmented security product line.
📍 São Paulo | October 21–22
🔗 Learn more: syhunt.com/en/?n=News.2026-N…
Roberto Marc🏹 retweeted
🚀 Syhunt is bringing next-generation, on-device AI to application security!
Join us at Security Leaders Brazil 2026 for an exclusive preview of NX, our new AI-native and AI-augmented security product line.
📍 São Paulo | October 21–22
🔗 Learn more: syhunt.com/en/?n=News.2026-N…
Roberto Marc🏹 retweeted
DaragonTech started out as Syhunt's AI research division and is now an independent company.
Proud to see what it's shipping.
github.com/DaragonTech/LibLa… #OpenSource
Roberto Marc🏹 retweeted
welcome LibLayaX ✨🚀
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
Roberto Marc🏹 retweeted
AI decisions without an API bill
LibLayaX is an opensource alternative to the Jev API: a shared library that runs the Laya typed-decision model inside your application. Your data never leaves the machine
Win11, Linux, macOS. CPU or GPU
github.com/DaragonTech/LibLa…
#OpenSource #Jev
Roberto Marc🏹 retweeted
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
Roberto Marc🏹 retweeted
We just ported the Lua 5.1 library to pure Rust 🦀
Rulua, binary-compatible with lua5.1.dll / .so / .dylib.
Existing apps and C modules just load it.
Try it, break it, tell us 👇
github.com/DaragonTech/Rulua
#lua #rust #rustlang #coding #opensource
Roberto Marc🏹 retweeted
🚀 Lude 1.0 is here — Lua 5.1.4, ported to pure Delphi 10.2+ & Free Pascal.
A drop-in replacement for lua5.1.dll/.so/.dylib, with the same 123 exports.
🌍 Win, Linux & Mac
💻 x86 & ARM
✅ Passes the official Lua test suite
github.com/DaragonTech/Lude
#lualang #pascal #delphi
Roberto Marc🏹 retweeted
I created MIT-Human license: basically MIT, but AI isn't allowed to help develop the code.
I tested it with Claude. Found a loophole. I patched the license. Now it refuses.
Your turn - give it to your fav coding AI: github.com/DaragonTech/TinyS…
More: github.com/DaragonTech/MIT-H…
#AI
Roberto Marc🏹 retweeted
One QR code was never enough. So we stacked three.
TriLayerQR: a photo, a name and a hidden memo in one scannable square. A new kind of QR for the AI age.
Free and open source. 👇
github.com/DaragonTech/TriLa…
#AI #genai #opensource #innovations
Roberto Marc🏹 retweeted
In the Age of AI, Vision Is the Last Competitive Advantage
In his latest article, @felipedaragon explores what that means for leadership in the AI era — and why knowing what NOT to build may be the most important skill of the #AI era.
Read the article: syhunt.com/thehunter/?n=Arti…
Roberto Marc🏹 retweeted
The Predictions That Came How AI Has Already Transformed Cybersecurity
Read the article: syhunt.com/thehunter/?n=Arti…
#cybersecurity #predictions #prediction #trends #forecasts #infosec #AI #artificialintelligence #agentic
Roberto Marc🏹 retweeted
The Rise of AI Pentesters — and Why Specialization Will Define the Winners
Read the article: syhunt.com/thehunter/?n=Arti…
#aipentester #ai #cybersecurity #agentic #pentesting #infosec #artificialintelligence #genai
Roberto Marc🏹 retweeted
Introducing Cross-Model Scripting (XMS) vulnerabilities:
Our new paper explores cross-site scripting (XSS) risks arising from unsanitized LLM-generated output and introduces the term Cross-Model Scripting (XMS) to describe these AI-mediated injection scenarios
📄: syhunt.com/en/?n=Articles.20…
#paper #cybersecurity #infosec #xss #pentesting #llms #ai #genai
Roberto Marc🏹 retweeted
Introducing CrossSpeak!
A new writing layer designed to bridge the gap between human creativity and AI comprehension. 🤯
It looks different, reads the same. AI still gets it. Pure semantic magic!
github.com/syhunt/CrossSpeak
#llms #ai #genai
