Lubomir Cerny (@elcerny) header
Lubomir Cerny (@elcerny) profile picture

Lubomir Cerny

@elcerny

Father, aviation modeller, inline skater, IT admin

lcerny.cz
Joined May 2010
  • Tweets6.6K
  • Following314
  • Followers118
274Media
Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)
Pobavilo. #prsk
Dripbits (@dripbitsnft) profile pictureDripbits
@dripbitsnftOct 28
Reggae Star Wars is diabolical Who did this? 🤣
7
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 29
‼️ Linux kernel TCP flaw rated 9.8 CVSS. Anthropic demonstrated an exploit that runs commands as root on servers using MPTCP. Ubuntu and RHEL still lack fixes, while Debian, Oracle and others have released patches for some versions. Details: thehackernews.com/2026/10/li…
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.

thehackernews.com
53
308
81
1,252
364,612
Microsoft releases emergency .NET patches for critical Brotli flaw bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…
Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.

bleepingcomputer.com
16
86
8
293
44,463
Lubomir Cerny retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_auOct 25
Published our high fidelity scanner for node2shell: github.com/assetnote/node2sh… Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
GitHub - assetnote/node2shell-scanner: High fidelity detection mechanism for node2shell (CVE-2026...

GitHub - assetnote/node2shell-scanner: High fidelity detection mechanism for node2shell (CVE-2026...

High fidelity detection mechanism for node2shell (CVE-2026-111497) - assetnote/node2shell-scanner

github.com
5
80
2
376
20,072
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 24
‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js. Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability. Read full details ↓ thehackernews.com/2026/10/br…
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.

thehackernews.com
27
131
22
568
89,684
🚨 Palo Alto Networks warns PAN-OS is affected by PHP2Shell remote code execution flaws CVE-2026-109618 and CVE-2026-109619 affect the PAN-OS management web interface, including the HTTPS interface and XML API service. ⠀ Affected products include: • PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2 release trains • All Panorama versions • All WildFire WF-500 and WF-500-B appliances ⠀ No special configuration is required, but the risk is highest when the management interface is exposed to the internet. Palo Alto Networks rates the product impact at CVSS 8.7. PAN-OS hotfixes are expected between October 26 and 30, while dates for Panorama and WildFire appliance fixes remain unconfirmed. The company is not aware of malicious exploitation targeting its products. GlobalProtect and Captive Portal are not affected. Source: security.paloaltonetworks.co…
Image from Dark Web Informer (@DarkWebInformer)
7
108
9
358
39,465
To je tedy týden…
Cyber Security News (@The_Cyber_News) profile pictureCyber Security News
@The_Cyber_NewsOct 22
‼️ Fortinet Urges Patching Critical Flaws Affecting FortiOS, FortiManager, & FortiAnalyzer Details: cybersecuritynews.com/fortin… Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. The update follows security releases for FortiMail and FortiAuthenticator, extending the patching effort across several key products. Fortinet said its testing program uses advanced AI models to examine code paths, protocol handling, and configuration logic. #cybersecuritynews
Image from Cyber Security News (@The_Cyber_News)
1
75
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 22
‼️ALERT - Two new unpatched CVSS 9.0 RCE flaws in #Linux's KSMBD SMB server were disclosed on public kernel mailing lists before fixes were ready. One can be triggered WITHOUT authentication. Neither has a mainline kernel fix. Details here ↓ thehackernews.com/2026/10/tw…
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline fix.

thehackernews.com
37
236
70
1,197
136,831
Tohle vypadá zajímavě. Přehled zranitelnosti, souhry z více zdrojú, mcp server i rss feed.
Sherwood (@shcallaway) profile pictureSherwood
@shcallawayOct 22
Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now
Image from Sherwood (@shcallaway)
3
46
Ouha, záplata nestačí. #jestenenikonec
Felipe Daragon (@FelipeDaragon) profile pictureFelipe Daragon
@FelipeDaragonOct 22
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches. The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses. Our earlier concerns about PHP session handling remain relevant. We've updated php2shell-protection with additional hardening guidance. #php #cybercurity github.com/syhunt/php2shell-…
GitHub - syhunt/php2shell-protection: Defensive mitigation and testing toolkit for PHP security...

GitHub - syhunt/php2shell-protection: Defensive mitigation and testing toolkit for PHP security...

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance - syhunt/php2s...

github.com
27
To je den...
Mike Kipruto (@itsMikeKipruto) profile pictureMike Kipruto
@itsMikeKiprutoOct 21
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines. If you run either stack in production, keep an eye on official advisories and apply patches promptly. Security maintenance doesn't stop at your application code. Your runtime matters too. Node.js advisory: nodejs.org/en/blog/vulnerabi…
Node.js — Wednesday, October 21, 2026 Security Releases

Node.js — Wednesday, October 21, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org
2
63
Ouha. Máte-li někde něco na PHP, bude veselo ☝️
Florian Roth ⚡️ (@cyb3rops) profile pictureFlorian Roth ⚡️
@cyb3ropsOct 20
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
Image from Florian Roth ⚡️ (@cyb3rops)
34
F5 releases out-of-band patches for critical NGINX vulnerabilities bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.

bleepingcomputer.com
4
44
1
119
19,670
Microsoft: October Windows Server updates break Exchange sign-in, mail flow bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…
Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.

bleepingcomputer.com
14
22
2
93
17,098
MacOSX Heartbreaker malware analysis : objective-see.org/blog/blog_… #apple #malware
Heartbreaker 💔

Heartbreaker 💔

Metamorphic ransomware comes for macOS

objective-see.org
1
19
A ta krajta 👇 #broadcom
International Cyber Digest (@IntCyberDigest) profile pictureInternational Cyber Digest
@IntCyberDigestOct 17
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
13
Mám @Alzacz rád, ale několikrát odložit termín doručení u něčeho, co bylo naskladneno a nakonec celou objednávku zrušit a vytvořit novou mi přijde poněkud nešťastné.
Image from Lubomir Cerny (@elcerny)
2
527
Stojí za přečtení kechlibar.net/2026/10/16/krv…
20
To je vlastně dobrá zpráva. Bude snazší se nabourat do vlastní TV a vyházet ten reklamní bordel :-) thehackernews.com/2026/10/lg…
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Three LG webOS flaws can be chained to give attackers on the same network root access on two tested TV models; LG has issued a fix.

thehackernews.com
1
34
A heleme...
Dark Web Informer (@DarkWebInformer) profile pictureDark Web Informer
@DarkWebInformerOct 12
🚨 AnyPS5: An open-source project for automatically porting PS5 executables to Linux and Windows GitHub: github.com/boykopovar/AnyPS5 AnyPS5 converts PS5 executables into formats that can run natively on supported desktop systems, while reimplementing required PS5 system libraries for dynamic linking. Features include: • Automatic executable relinking • Linux and Windows support • SPIR-V shader recompilation • Controller support • Configurable keyboard and mouse input • No separate emulator runtime process The project is focused on interoperability, preservation, research, and compatibility, with a growing list of verified games.
Image from Dark Web Informer (@DarkWebInformer)
1
43
Load more