Dev’Ops | Apprenti-dompteur de Pingouin | CEO @HostMyServers
Annecy, France
Joined January 2012
- Tweets19K
- Following1.8K
- Followers1.2K
- Likes8.5K
Corentin Bonneton retweeted
🚨 CRITICAL - Unauthenticated RCE in React Server Components (GHSA-xqc2-xf4c-x3h3)
A critical vulnerability in React Server Components packages (react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel) allows unauthenticated remote attackers to execute arbitrary code via crafted RSC Flight payload responses transporting multiple typed arrays and attacker-controlled values.
👉 Affected: Versions 19.0.0–19.0.8, 19.1.0–19.1.9, 19.2.0–19.2.8, 19.3.0 | Upgrade immediately to 19.0.9, 19.1.10, 19.2.9, or 19.3.1 (or Next.js 16.4.1 / 15.5.28)
github.com/react/react/secur…
Corentin Bonneton retweeted
⚠️ Ethereum reporte la mise à jour Glamsterdam.
Son déploiement sur le testnet Hoodi est suspendu après la découverte de risques liés aux EIP-8037 et EIP-8038. Certains smart contracts pourraient devenir vulnérables.
Plus de détails dans notre article👇
cryptoast.fr/?p=232736&utm_s…
Corentin Bonneton retweeted
‼️WARNING - OpenSSH issues emergency fix for a critical SSH authentication bypass on Alpine Linux.
A password longer than 256 bytes can unlock key-only accounts on affected servers, without knowing the actual credentials.
Here's how it works ↓ thehackernews.com/2026/11/op…
Corentin Bonneton retweeted
Bonjour Madame Lalucq,
Un commentaire sur la fiabilité des banques régulées sous contrôle de la banque centrale et soumise aux plus standards de protection et de traçage anti blanchiment ?
This quoted post is unavailable.
Corentin Bonneton retweeted
‼️ BREAKING - Google disrupts a 1.3 million-device Android botnet and bans TV box maker Videostrong.
Google says the company deliberately built a backdoor into its devices and sold access to criminals.
The control servers are down. The backdoor is still there.
Full story: thehackernews.com/2026/11/go…
Corentin Bonneton retweeted
📢 Attention developers and node operators:
We strongly recommend updating to the latest version of LND to mitigate against the Linux kernel CVE.
xitter.cf/roasbeef/status/211630…
lnd v0.20.7 and v0.21.6 have been released, which contain a Go-specific mitigation (MPTCP flag off) for CVE-2026-98432 (use-after-free in the Linux kernel's IPv4 TCP).
github.com/lightningnetwork/…
github.com/lightningnetwork/…
We recommend that all users update to this new version.
Existing binaries can be protected by running them with the GODEBUG=multipathtcp=0 env variable: github.com/golang/go/issues/….
Note that as this is a Linux kernel level vulnerability, the only way to fully mitigate the vuln is to patch your kernel, as any network facing service may be affected (known PoCs use MPTCP, but other exploit vectors may be possible).
Corentin Bonneton retweeted
lnd v0.20.7 and v0.21.6 have been released, which contain a Go-specific mitigation (MPTCP flag off) for CVE-2026-98432 (use-after-free in the Linux kernel's IPv4 TCP).
github.com/lightningnetwork/…
github.com/lightningnetwork/…
We recommend that all users update to this new version.
Existing binaries can be protected by running them with the GODEBUG=multipathtcp=0 env variable: github.com/golang/go/issues/….
Note that as this is a Linux kernel level vulnerability, the only way to fully mitigate the vuln is to patch your kernel, as any network facing service may be affected (known PoCs use MPTCP, but other exploit vectors may be possible).
Corentin Bonneton retweeted
- Cursor confirmed Supply-chain
attacks just hit AI coding tools.
- Cursor found a bad Claude Code extension in its marketplace.
- The fake version attempted to install an SSH backdoor, steal host details, and establish persistent remote access.
- Not from Anthropic.
- Marketplace was taken down and cleaned.
- If you used Claude Code in Cursor recently, update immediately to 2.1.314.
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
Corentin Bonneton retweeted
🚨 UPDATE: Node2Shell (CVE-2026-111497) has moved from PoC to the wild.
Scanning is live and the first exploit attempts are out. The RCE is now confirmed on STOCK x86-64 Node.js, not just arm64.
Patch now → 22.23.4 / 24.22.1 / 26.12.1
Read ↓ thehackernews.com/2026/10/re…
Corentin Bonneton retweeted
Похоже, видеокарты NVIDIA, даже старые, уже никогда не будут дешёвыми. 😂
Энтузиасты нашли способ снять искусственное ограничение производительности RTX 30-й и 40-й серий в FP16/BF16-вычислениях. Причём без перепрошивки BIOS и модификации драйверов.
Результаты тестов:
🔥 RTX 3090 Ti — прирост BF16 до 80%
🔥 RTX 3090 — до 67%
🔥 RTX 3070 — до 81%
🔥 RTX 4090 — BF16 с 165,5 до 330,6 TFLOPS, практически х2.
🤖 Для локального ИИ — ускорение обработки промптов в отдельных тестах на 14–36%. Генерация токенов практически без изменений.
Пруфы и исходники:
RTX 30: github.com/Zagitta/gpu-unloc…
RTX 40: github.com/JustAResearcher/g…
Лично пока не тестировал. Проекты свежие, результаты предварительные.
А ведь ещё недавно старые видеокарты собирались отправлять на пенсию. Теперь, похоже, пенсию опять отменили. 😂
Corentin Bonneton retweeted
Confirmada una regresión de memoria en PHP 8.4.27 y 8.5.12.
Upwind ha publicado hoy un análisis independiente de PHP2Shell que confirma una regresión introducida en las versiones distribuidas el 21 de octubre, no es un bypass de CVE-2026-109618 ni de CVE-2026-109619, sino de un problema diferente que puede afectar a aplicaciones legítimas.
El fallo está registrado como php-src #24488.
github.com/php/php-src/issue…
Afecta a PHP 8.4.27 y 8.5.12 cuando coinciden estas condiciones:
- Una aplicación utiliza SimpleXMLElement.
- Sus propiedades se materializan mediante get_object_vars(), conversión a array o json_encode().
- El objeto participa en referencias circulares que posteriormente procesa el recolector de basura.
El resultado puede ser zend_mm_heap corrupted, una doble liberación de memoria y la terminación del proceso PHP.
Se ha reproducido con Valgrind, verificado por desarrolladores de PHP y observado también en pruebas de aplicaciones Laravel sobre Debian 13 con paquetes Sury.
La corrección ya está incorporada al código fuente de PHP, pero todavía no hay una versión oficial que la distribuya.
Corentin Bonneton retweeted
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/br…
Corentin Bonneton retweeted
Le Web a découvert cette semaine qu’une partie de ses correctifs PHP passait par le travail bénévole d’Ondřej Surý, qui prépare des paquets pour Debian et Ubuntu.
Dans un nouvel entretien à la BBC, il raconte avoir reçu plus de 10 000 dollars de dons en quelques jours, soit environ une année habituelle de contributions.
bbc.com/news/articles/cw30ej…
Corentin Bonneton retweeted
🚨 Censys is closely tracking PHP2Shell exposure and remediation worldwide.
Our live dashboard tracks affected PHP versions and patching progress by country, network, and PHP version.
View the live dashboard: php2shell.censys.com
Corentin Bonneton retweeted
An unofficial stopgap is going around:
Set session.upload_progress.enabled = Off until you can upgrade
PHP hasn't confirmed it helps, but WordPress and Laravel don't use the feature
Trellis steps are in the thread along with Cloudflare rules
discourse.roots.io/t/upgradi…
PHP is shipping a security release tomorrow (Oct 21, 14:00 UTC) for two critical vulnerabilities
Re-provisioning Trellis won't upgrade PHP on its own. Here's how to upgrade once the PPA build is out:
discourse.roots.io/t/upgradi…
PHP's announcement: php.net/archive/2026.php#202…
Corentin Bonneton retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
Corentin Bonneton retweeted
🔐 2026 Root KSK Rollover Update: KSK-2024 began signing the DNS root zone on 11 October at 14:00 UTC, as scheduled. No widespread disruptions have been observed. ICANN continues to monitor. #kskrollover
👉 Resources and support: go.icann.org/3W1m2YJ
Corentin Bonneton retweeted
La cyberattaque ciblant Danfoss est confirmée par le dirigeant des Coopératives U.
Pour en savoir plus :
- CVE (Septembre 2026) : xitter.cf/bluetouff/status/21095…
- Alerte sur les contrôleurs de réfrigération Danfoss AK-SM 800A et énumération des devices exposés (Août 2026) : xitter.cf/bluetouff/status/21095…
- Alerte initiale de l'incident en cours : xitter.cf/bluetouff/status/21095…
🚨🔴 CYBERALERT | 🇫🇷 Piratage hors-norme dans 150+ supermarchés en France !
Le patron de la CooperativeU confirme à l'instant une cyberattaque massive sur de nombreux supermarchés.
"Je confirme qu’une cyberattaque touche depuis cette nuit les installations de production de froid de plusieurs magasins de notre réseau @CooperativeU.
Nos équipes sont pleinement mobilisées, en lien avec les frigoristes, pour rétablir la situation au plus vite. Une enquête devra permettre de faire toute la lumière sur cette attaque.
S’attaquer à des équipements essentiels à la conservation des produits frais et à l’approvisionnement alimentaire des Français est d’une extrême gravité et est inédit. C’est inacceptable."
En cause et d'après mes premières infos, il s'agirait de Danfoss -le superviseur central de la régulation frigorifique-. Il faut savoir que les techniciens l'administrent souvent à distance via un serveur web avec une interface de gestion accessible par navigateur...
La situation est critique.
À suivre...
