Sssshhhh… // ᕦ(ò_óˇ)ᕤ 🇺🇸 //
Murica
Joined June 2018
- Tweets11.7K
- Following332
- Followers530
- Likes1.6K
—Dave retweeted
Regarding the PHP vulnerability, I have seen some security researchers recommending people limit web browsing for a few days (due to the potential for common websites to be compromised via this vuln).
There is exploit code available for this vuln, though it is not known to exist “in the wild.” But with the weaponization of AI, it’s possible that the discovery and broad distribution of exploit code could happen fast - possibly reverse engineered after the patches are released.
I expect cyber security providers of web application firewalls and exploit prevention services will have protections deployed quickly today, and IT teams will be busy patching and upgrading.
And I think it may be wise to lay low on the Internet today. Do what you need to, but probably skip frivolous browsing.
Also:
Make sure you are running full service anti-virus / anti-malware on every device (including phones). I recommend BitDefender for home/personal use.
Update your browser apps and only use Safari, FireFox, or DuckDuckGo. No opinion about Brave (people keep asking). Make sure ad blocking is turned on and auto play of active content is turned off.
Be very cautious of links you receive in SMS messages, message apps, and email. Check and verify the source first and check the URL to make sure the website domain is as expected.
Keep your operating system and all applications up to date, and watch for new updates over the coming days. Regarding iOS, I do not recommend upgrading to 27. Stay on 26 and update as possible.
Make sure you have MFA turned on for all websites or online accounts. True MFA. Passkey has a major design weakness so I do not recommend it.
This is all to protect your devices and your accounts in case a website you visit is explored and does attempt to steal your credentials, information, or deliver exploit code to your device.
@PractiveSec will be following this today. Advisory coming for customers.
—Dave retweeted
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.
—Dave retweeted
Rund 70 % der Websites setzen auf PHP. Darunter WordPress, Nextcloud, Joomla, TYPO3, Shopware, Magento und unzählige Eigenentwicklungen.
Jetzt wurden zwei kritische Sicherheitslücken angekündigt. Beide mit einem Schweregrad von 9,2 von 10. Es gibt Hinweise auf Remote Code Execution ohne Anmeldung: Angreifer könnten auf betroffenen Servern eigenen Code ausführen und dadurch sensible Daten stehlen.
Heute um 16 Uhr deutscher Zeit sollen Sicherheitsupdates und Details veröffentlicht werden. Dann wird auch klar, welche Versionen und Konfigurationen betroffen sind. Angreifer werden sich diese Informationen ebenfalls sofort ansehen.
Wer solche Systeme betreibt: Bereitet euch jetzt darauf vor, betroffene PHP-Installationen schnellstmöglich zu aktualisieren.
Wer jemanden kennt, der Websites, Onlineshops oder Nextcloud betreibt: Gebt die Info weiter! Gemeint ist die PHP-Version auf dem Server, nicht einfach das nächste WordPress-Update.
Wenn sich die befürchtete Tragweite bestätigt, könnte das weit über einzelne gehackte Websites hinausgehen. Auf diesen Systemen liegen Kundendaten, interne Dokumente und andere hochsensible Informationen.
php.net/archive/2026.php#202…
—Dave retweeted
Blaming the riots in Paris on Islam creates a false dialectic and is actually cowardly. The issue is low IQ people cannot live, unmonitored, in societies they lack the capacity to build. Everyone is too afraid of saying this and instead push slop.
—Dave retweeted
JUST IN: Activity on several major U.S. political subreddits plunges following attacks on Russian data centers.
—Dave retweeted
We've won more games in Philly in the last nine days than the Flyers, Eagles, and Phillies combined this month.
—Dave retweeted
I don't have the words to describe how insane @PhilaUnion's turnaround has been this season.
Just look at their results:
L
L
L
L
L
L
W
D
D
L
D
L
L
L
D
L
Carnell fired + World Cup Break
W
W
W
W
D
D
W
W
W
W
W
W
W
1-10-4 before the World Cup
11-0-2 after the World Cup
Truly unbelievable.
—Dave retweeted
🚨 BREAKING 🚨
ATF Releases NFA guidance in response to the Texas NFA lawsuit:
"Effective October 9, 2026, ATF will no longer require individuals to seek ATF approval under the NFA before making or transferring short-barreled rifles, short-barreled shotguns, silencers, and “any other weapon[s]” as defined in 26 U.S.C. § 5845(e). ATF will also no longer require such items to be registered in the National Firearms Registration and Transfer Record. These policies apply uniformly to anyone otherwise subject to these requirements, not just to the plaintiffs in the litigation."
—Dave retweeted
Go buy a suppressor. Buy an SBR. Buy three. Today. Right now. Over the counter. No wait. Put a stock on a shorty. Put a vert grip on a pistol. Bask in it. Revel in it. Post them on the internet. Hold them in your hands. Rub them with Hoppes and tell them they're special. You're special. You deserve it.
🚨 BREAKING 🚨
ATF Releases NFA guidance in response to the Texas NFA lawsuit:
"Effective October 9, 2026, ATF will no longer require individuals to seek ATF approval under the NFA before making or transferring short-barreled rifles, short-barreled shotguns, silencers, and “any other weapon[s]” as defined in 26 U.S.C. § 5845(e). ATF will also no longer require such items to be registered in the National Firearms Registration and Transfer Record. These policies apply uniformly to anyone otherwise subject to these requirements, not just to the plaintiffs in the litigation."
—Dave retweeted
We believe that the West can awaken from its long slumber – and rekindle the fire that was first lit in ancient Greece millennia ago.
—Dave retweeted
Do you know how bad something has to be to be called “absolute shit” in comparison to Microsoft Teams?
The European Commission has rolled out an alternative to Microsoft Teams.
But officials using it aren't impressed, with one describing the tool as “absolute shit.”
vist.ly/5kje9
—Dave retweeted
Trump has lost his touch.
He’s become so isolated by the cult of personality that he thinks he can just say anything and normal voters will believe him because MAGAs do.
It makes him look pathetic and desperate.
Wonder if even Benny Johnson types will be hyping this.
If Republicans win the House of Representatives and the Senate in the 2026 Midterm Elections, I’m going to give all adult citizens in the United States of America, $5,000! Thank you for your attention to this matter, and I look forward to signing those checks!
Readers added context they thought people might want to know
This repeats a promise Trump made in September 2026. The US has approximately 250 million adult citizens so the total cost would be over 1.25 trillion dollars. Congress must approve any such federal spending.
nytimes.com/2026/09/10/us/…
pbs.org/newshour/polit…
—Dave retweeted
NEW: Multiple highly reliable OSINT accounts are posting photos and videos out of the Yemeni capital of Sanaa that seem to indicate Saudi airstrikes on the city.
This is a HARD red line for Ansar Allah (Houthis), and a large response is very, very likely in the coming hours and days.
Watch Riyadh. Watch the East-West Pipeline. Watch Yanbu.
—Dave retweeted
UPDATE: 5 men have now been arrested on suspicion of a car bomb plot against RAF Fairford, found with 3 vans suspected to have been used as car bombs.
The men were pictured shirtless in handcuffs, a detail suggesting officers may also have suspected suicide vests. Counter terrorism police, the Army's explosive ordnance disposal team and the SAS have all been deployed to the scene.
Armoured US military vehicles are patrolling the base as helicopters circle overhead. Access roads remain closed and bomb disposal units are still on site.
RAF Fairford has been placed on Delta alert, the highest US threat level, with RAF Lakenheath separately raised to Charlie alert.
This is an active major security emergency, and it's still unfolding.
