
Security without fear. Cybersecurity news that informs and inspires. Editors: @DennisF & @lindseyOD123. https://xitter.cf/t.co/jcYvCZ704o
Joined September 2017
- Tweets4.5K
- Following432
- Followers4.4K
- Likes351
Good running tally of vulnerable PHP services from the team at @censysio
php2shell.censys.com/
Looks like @VulnCheckAI has developed a reliable exploit for #php2shell that works even on systems with ASLR enabled.
vulncheck.com/blog/php2shell…
One more example of why @duosec was not just special, but unique.
Anytime there was a security breach @dugsong and @jonoberheide would send the team pizza:
"The CISO is running around. Their hair is on fire. Maybe the breach got leaked to the news. They're dealing with the PR response. Their executives are all around them, asking what happened, what's affected.
We'd send them a pizza and energy drinks. We'd say 'so sorry this is happening. I hope this is helpful. Give us a call when you come up for air.'
Contrast that to what usually happens in that situation. BDR's from every security startup find that CISO's phone number. They call them and say "If only you bought our product, this wouldn't have happened."
But is that really what they need? Especially right then? It's very obviously not if you take half a second to think about it.
That's why we sent them pizza. And talked about the pizza play to every @duosec new hire in onboarding so that the whole company built customer empathy."
The #php2shell bugs are quite serious and may have a very long tail of exploitation.
Good breakdown of the actor behind the recent ConnectWise attack.
microsoft.com/en-us/security…
Quick new podcast with Ben Harris of @watchtowrcyber on the #php2shell bugs and what defenders can do now.
youtu.be/AkBnlNLbAgY
It's gonna be a busy day for defenders. Time to get those PHP patches installed ASAP.
decipher.sc/2026/10/20/criti…
The @php_net team just posted an early notice saying the release will be out 10/21 at 9 AM EDT.
php.net/archive/2026.php#202…
Focusing public policy discussions around AI on societal goods rathen than tech giants is a better way forward.
Our full podcast with the great @beauwoods is up now!
youtu.be/9v7LwNIvmAE?si=96zq…
Do you want a limited edition Decipher hoodie? Of course you do! Just be our 25,000th(!) sub on @YouTube and we'll hook you up. We're very close, so watch that number. Send us a before/after screenshot to info at decipher dot sc. (US folks only please)
Good luck!
Thinking about how AI models work for...reasons? Our conversation with @suremarv has some key insights into how they're built and why they don't always behave nicely.
youtu.be/tMuNl6Y8a10?si=SNBY…
In case you have a life and weren't tracking this over the weekend, this incident is ongoing and going poorly.
decipher.sc/2026/10/18/ongoi…

