builder | CEO @cellebrite | bod: @aiven_io, @ProductsCount | past: @Auth0, @okta, @digitalocean, @amazon, @NBCUniversal, @nielsen. đź“ŤNYC | SF
New York
Joined January 2008
- Tweets21.1K
- Following5.3K
- Followers4.4K
- Likes73.1K
Shiv Ramji retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
Shiv Ramji retweeted
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server.
tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible.
The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this.
The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed.
@Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged.
For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free.
Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem.
If you’re interested in learning more, you can read our blogs:
Vulnerable roots: blog.cloudflare.com/emudhra-…
PHP vulnerabilities: blog.cloudflare.com/php-vuln…
Shiv Ramji retweeted
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
Shiv Ramji retweeted
Helping teams access what matters and act with confidence is at the core of our #Autumn2026Release.
Today we’re sharing how this release, led by #CellebriteGenesis, is helping uncover what manual review can miss while expanding device and operating system access. 🧵
Shiv Ramji retweeted
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
Shiv Ramji retweeted
New!! Cloudflare Cut 20%. Atlassian Cut 10%. Bending Spoons Cuts 75%. All Three Are Growing Faster or Earning More. So How Lean Can B2B Teams Really Get?
Small teams ship more.
The cuts worked where AI agents already did the work.
saastr.com/cloudflare-cut-20…
Shiv Ramji retweeted
Maye Musk, Elon's mother, visited the Tesla Fremont factory during the Model 3 production crisis and found her son sleeping on the factory floor. She described the scene: the CEO of a public company lying on a thin mattress under a desk next to an assembly line, surrounded by the noise of manufacturing, looking like he hadn't slept properly in weeks. Because he hadn't.
She didn't try to convince him to go home. She knew better. Instead she got a sleeping bag and slept on the factory floor next to him. A 70 year old woman. A supermodel who had appeared on magazine covers. A mother of three successful children. Lying on a concrete floor in a car factory because her son was there and she was not going to leave him sleeping alone.
Maye has described Elon's childhood as one she worried about constantly. The bullying. The reading obsession. The emotional distance from his father. The decision to leave South Africa at 17. Every phase of his life involved a form of isolation that a mother could see but couldn't fix. The factory floor was another version of the same isolation. Different decade. Same boy. Alone with a problem.
She has said that the hardest part of being Elon's mother is not the controversy or the media. It is watching a child work himself to the edge of physical collapse and knowing that asking him to stop would be like asking him to stop breathing. The drive is not a choice. It is architecture. She has watched it operate since he was a child reading encyclopedias for 10 hours. The scale changed. The architecture didn't.
A mother who raised three children alone. Who held five jobs simultaneously to keep them fed. Who built a career as a model in her 60s. That woman looked at the factory floor, looked at her son, and concluded that the best thing she could do was lie down beside him. Not to fix it. Not to lecture. To be there. On the floor. In the noise. So he wasn't alone.
The most powerful image in Elon Musk's life is not a rocket launch. It is a 70 year old mother on a factory floor next to a son she could never teach to rest.
Shiv Ramji retweeted
I wish I were 18 today... If you ARE young and reading this, the most accomplished people alive envy your starting position. The tools are becoming free, the problems are enormous, and this time you don't need to ask for permission.Â
Go change the world!
Shiv Ramji retweeted
Never seen anything grow as fast as @Grok @Bot!
And there is no free tier, which means people are deriving real value in excess of what they pay.
As the saying goes, you get what you pay for.
HOLY SH*T, JENSEN HUANG SAYS GROK BOT USAGE IS SKYROCKETING, AND ELON IS DOING SOMETHING ALMOST NOBODY ELSE DOES
JENSEN HUANG SAYS GROK BOT USAGE IS SKYROCKETING, AND ELON IS DOING SOMETHING ALMOST NOBODY ELSE DOES
nvidia's ceo, spent one minute on elon and grok bot.
what he said:
1. elon trains and runs his own models on nvidia chips
2. grok bot demand is climbing fast, jensen called it super cool
3. elon also rents that compute out to other companies
4. building it, running it and renting it: the only other one jensen names is google
5. his take on elon: nobody knows more about energy
start small: give grok bot one research task you keep putting off.
save this and read the article below to make money with grok bot ↓
Shiv Ramji retweeted
I think @tobi is the epitome of the modern entrepreneur. A CEO that's mission-driven, detail-obsessed, and a hands-on engineer who communicates openly to the world on @x.
Yesterday we announced vercel.shop in GA, and vercel.store đź‘•, our own Vercel merch store dogfooding it.
Vercel Shop gives you a production-grade, blazing-fast Next.js storefront that's agent-ready out of the box, with @shopify as its backend.
Shopify and Vercel share the mission of enabling and powering the entrepreneurs of the future. Excited to see what people build with us 🫶
Shiv Ramji retweeted
Everyone is talking about AI agents. But which ones actually made it out of the demo stage?
I just launched Shipped or Stalled, a free public registry of named AI agent projects at big companies.
Every project is tagged Pilot, Production, Scaled or Killed, and every tag links to a public source so you can check it yourself.
Right now there are 44 projects in it:
23 in production, 9 scaled, 9 killed and 3 still in pilot.
The killed ones might be the most useful part, because they show where things break
Take a look:
shippedorstalled.ai/
Know of a project I'm missing, or one that's changed status? Send it in here:
shippedorstalled.ai/submit/
A weekly newsletter is coming soon. Tell me what you think!
Shiv Ramji retweeted
Your nation is calling upon the most cracked engineers. It’s time to work on hard problems that your parents and grandparents will finally understand. Link to apply below 🇺🇸
Introducing American Forge: a six-month residency for exceptional engineers ready to take on the toughest problems in American government.
Run by National Design Studio in partnership with @cognition
forge.ndstudio.gov/?s=x
Shiv Ramji retweeted
Wrote up how we're trying to reduce PR review friction with concept of "small-change" as PRs/eng/week has increased 10x on some teams. (Aside: incidents down 42% HoH, critical incidents down 78%! Velocity vs quality never been a falser dichotomy.)
lethain.com/small-changes/
Shiv Ramji retweeted
I got tired of all the spam calls I was getting so I had @bot find my number listed on sites and file the removals. I made it a free skill so you can do the same. x.ai/bot/fUj6TYhiW_cjtzWvbsF…
@SpaceXSI @elonmusk
