Catholic Homeschool Husband/Dad. Classics, Medieval Europe, Anglo-Saxons, Theology, Philosophy, Languages, Tolkien, D&D, Africa, Baltics, 🇩🇪🇪🇪🇱🇻🇮🇪–🇺🇸.

Washington, DC–ish
Joined April 2008
The media cycle is an invention of modernity, as is its corollary: the lie that you are obligated to express an opinion about every news item. There is more legitimate outrage in the world than it is healthy for you to be outraged about. Turn off the spigot and read Books.
5
2
2
35
5,001
Éadric Scúsmiþ (Eric K.) retweeted
This is the most serious 48 hours in cybersecurity history. "Black October" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
437
4,052
770
25,915
2,188,495
Éadric Scúsmiþ (Eric K.) retweeted
Exorcist for the Archdiocese of Washington D.C., Msgr. Stephen Rossetti, nicely summarizes why such attacks, often violent, are so keenly focused on the Catholic Church, and particularly the Eucharist. Rossetti, a former Air Force Lieutenant with a Ph.D. in Psychology, teaches Theology at The Catholic University of America and is Founder and President of the St. Michael Center for Spiritual Renewal, an online resource for deliverance ministry. Rossetti was awarded the honorific title of Monsignor by Pope Benedict XVI in November, 2006, for his work in helping priests and religious heal from psychological trauma and renew their faith. Rossetti stated the following as part of an interview for the St. Michael Center: "In our ministry as exorcists, the role of the Eucharist is critical. In many ways, the demons witness, contrary to their desire, to the power and sacredness of the Eucharist. For example, a fully possessed person often has great difficulty even stepping into a church, [let alone] going to Mass. I remember one woman, when she was dragged into a church by her father, who was sad that she was possessed, said that the Eucharist tasted like a dead animal. The demons find the Eucharist odious because they hate Jesus. Demon-possessed people can’t even step into a church; it’s almost as if there is a barrier there. There is a great aversion to the sacred in those who are possessed, especially to the Eucharist."
Anti-Catholic Attacks Increasing A 2025 statement from the U.S. Conference of Catholic Bishops lists 387 incidents of anti-Catholic vandalism that have occurred across 43 states and the District of Columbia. These incidents include arson, statues beheaded and/or delimbed, stained glass windows broken, anti-Catholic and blasphemous graffiti painted on church doors and walls, and gravestones in Catholic cemeteries broken, toppled over, and defaced with swastikas and anti-Catholic language, among other forms of destruction. Sometimes anti-Catholic violations turn violent. Consider the following incidents reported by the Catholic News Agency of violence against Catholic priests in the year prior to this writing: •In April 2025, a Catholic priest in Seneca, Kansas, was intentionally shot, with prosecutors pursuing a charge of first-degree murder; •In July 2025, a Mexican priest from the state of Guerrero was shot and gravely injured while traveling to administer the Eucharist to a sick person; this followed the murder of nine Catholic priests in Mexico since the 2018 election of a progressive President thought to be soft on cartel crime; •In November 2024, a priest in Singapore was stabbed in the face during Mass; •In March 2024, Fr. William Banda was shot and killed at Tzaneen Cathedral in South Africa while preparing to celebrate Mass; •72-year-old Fr. Lech Lachowicz in Wroclaw, Poland, was brutally attacked and killed on November 9, 2024, by an axe-wielding intruder who broke into the rectory; •On November 9, 2024, several Franciscan priests praying in their monastery were attacked by a man carrying a club, a broken bottle, and screaming, “I am Christ!” Several priests were severely injured; a 76-year-old friar, Br. Juan Antonio Llorente, died of headwounds. Incidents like this, far too many to mention, serve to underscore the hatred demonic powers have toward the Catholic Church, her priests, and especially toward the Eucharist they serve. Here are a few recent examples of demonically inspired hatred toward the Eucharist itself: •On October 10, 2021, consecrated hosts were stolen from the Sisters of Maria Stella Matutina convent in Toledo, Spain, as part of a satanic ritual leading up to a “black mass” on Halloween. When interviewed by ABC News, Catholic Exorcist, Fr. Jose Antonio Fortea stated that such desecrations take place every year during the month of October “but the media do not usually report them;” •A similar incident took place at the St. Rose of Lima Catholic Church in Pocosol, Costa Rica, on October 19, 2022, when unidentified vandals broke into the church at night, forced open the locked tabernacle, and stole all the consecrated hosts. The parish priest, Fr. Gerardo Ortiz Marin, offered a Holy Hour and solemn High Mass in reparation for the theft; •There were numerous anti-Catholic acts that took place in Nicaragua in 2023: on January 15th, vandals broke into the tabernacle and desecrated consecrated Hosts of Our Lady of the Abandoned Catholic Church in the capital city of Managua; on May 24th, a ciborium was stolen from St. Anne Parish in Nindiri and the consecrated hosts strewn about a vacant lot; and religious rights lawyer, Martha Molina, had logged 88 other acts of desecration in the first four months of 2023, all linked to the Presidency of Marxist dictator, Daniel Ortega, including the imprisonment of priests and Catholic lay leaders; •On March 28, 2025, a Satanic group's "black mass" at the Kansas Statehouse involved an act of public desecration of a consecrated host; the group’s leader, denouncing Jesus Christ, took a host he had stolen from a Catholic Church and threw it to the ground before attempting to step on it. When a Catholic man tried to intervene to prevent further desecration, he was viciously attacked by the leader; •In June 2025, the 3,300-mile National Eucharistic Pilgrimage, marching across the United States, was targeted at several stops by a Protestant group called “Church of Wells.” Known for their outspoken criticism of the Catholic practice of Eucharistic adoration, members of this group lined the route with protesters using bullhorns to disrupt processions.
1
13
50
1,104
This is a good idea. Abandoned sites that won't get patched are all over the place. The Old Web is now the Old West and actors good and bad will be looking for land to claim.
Replying to @AutismCapital
I saw someone talk about using a worm to use the PHP vulnerability to execute code that would patch these systems that people won't upgrade on their own.
2
85
Éadric Scúsmiþ (Eric K.) retweeted
Apparently there’s a patch for the critical PHP vulnerabilities but a few things that are alarming. 1) Many websites that use php with sensitive information are simply abandoned. There will be no upgrade. That means they’re going to get pwned and leaked. That’s a LOT of the internet 2) This requires active participants to upgrade their sites that even know about this vulnerability. If you’re on X you’re at the tip of the tip of the spear. Most people don’t know about this. 3) Anthropic says that this is ONE of SEVERAL critical vulnerabilities that they have found. Which means there’s more chaos coming. TLDR: A large portion of the unmaintained internet is about to be pwned and god help us all or something like that.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…
Readers added context they thought people might want to know
Wiz Research wasn't the first one to discover the exploit. An independent researcher first discovered it: x.com/calif_io/statu…
100
284
30
2,802
481,188
Éadric Scúsmiþ (Eric K.) retweeted
This isn’t some kind of internet doomsday and you should chill. Big vulnerabilities hit every so often and even in combination, these aren’t anything out of the ordinary: - The iPhone vuln is a physical proximity thing and has been patched. Update. - The certificate thing is more painful. A lot of things to update, but the biggest and most important you already can or will be able to soon. MitM attacks require positioning and effort. It’ll definitely be exploited, but not at internet scale. - The PHP vulnerabilities are easily the worst of this lot. A lot folks aren’t going to update this before they get hacked, and a lot of niche systems/devices/appliances just won’t get update packages. Lots of data breaches coming up. Depending on how easy/reliable it is (it’s memory corruption) you’ll have a short period of it getting hacked practically to extinction in mainstream systems, with a long tail of it being exploited in embedded/appliance situations. None of this is unprecedented, though. Even in combination, it’s nothing in scope that security folks haven’t dealt with before. Literally why they have jobs.
29
88
4
1,019
157,256
Éadric Scúsmiþ (Eric K.) retweeted
Regarding the PHP vulnerability, I have seen some security researchers recommending people limit web browsing for a few days (due to the potential for common websites to be compromised via this vuln). There is exploit code available for this vuln, though it is not known to exist “in the wild.” But with the weaponization of AI, it’s possible that the discovery and broad distribution of exploit code could happen fast - possibly reverse engineered after the patches are released. I expect cyber security providers of web application firewalls and exploit prevention services will have protections deployed quickly today, and IT teams will be busy patching and upgrading. And I think it may be wise to lay low on the Internet today. Do what you need to, but probably skip frivolous browsing. Also: Make sure you are running full service anti-virus / anti-malware on every device (including phones). I recommend BitDefender for home/personal use. Update your browser apps and only use Safari, FireFox, or DuckDuckGo. No opinion about Brave (people keep asking). Make sure ad blocking is turned on and auto play of active content is turned off. Be very cautious of links you receive in SMS messages, message apps, and email. Check and verify the source first and check the URL to make sure the website domain is as expected. Keep your operating system and all applications up to date, and watch for new updates over the coming days. Regarding iOS, I do not recommend upgrading to 27. Stay on 26 and update as possible. Make sure you have MFA turned on for all websites or online accounts. True MFA. Passkey has a major design weakness so I do not recommend it. This is all to protect your devices and your accounts in case a website you visit is explored and does attempt to steal your credentials, information, or deliver exploit code to your device. @PractiveSec will be following this today. Advisory coming for customers.
57
327
36
2,227
362,818
Éadric Scúsmiþ (Eric K.) retweeted
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks. The FBI urges organizations to take the following steps now: ➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated. ➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP. ➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation. ➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims. For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
403
5,154
1,189
24,567
3,057,210
There's 70% chance your website uses PHP. Make sure your site is up to date and patched.
We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security thephp.foundation/blog/2026/…
73
If you think this applies to fiction then ANY story with a conflict should be avoided lest it cause anxiety. Good grief, what a perfect example of the unnaturalness of reading every verse of biblical literature *literally*, whether it was meant that way or not.
This quoted post is unavailable.
1
6
195
Éadric Scúsmiþ (Eric K.) retweeted
Russia is using a network of holiday homes in the Baltic to wage hybrid war on the West. Great investigation from @JamesERothwell and @LilyShanagher Western officials are taking action against hundreds of Russian-linked homes in Lithuania, Sweden and Norway, which have been bought close to strategic military sites or key infrastructure. The most serious cases involve oligarch-linked properties at the entrances to naval bases, and holiday homes in close proximity to Nato facilities. telegraph.co.uk/world-news/2…
38
583
43
988
89,239
Éadric Scúsmiþ (Eric K.) retweeted
Hopefully, we can tie 1983-84 tonight. #NYR
2
5
112
2,054
Éadric Scúsmiþ (Eric K.) retweeted
Died without repentance.
35
133
4
2,549
18,096
Éadric Scúsmiþ (Eric K.) retweeted
As an 18-year-old this passage from C.S. Lewis completely blew up my agnosticism. I remember exactly where I was when I read it for the first time.
141
923
35
11,568
372,722
Éadric Scúsmiþ (Eric K.) retweeted
Couple of editor pet peeves: 1. Using the phrase "category error" as a synonym for "mischaracterization" as in "to describe X as Y would be a category error" to mean "X and Y are pretty different" when a category error would be like asking "which is more ethically consistent, a sedimentary rock or a glass of water?" 2. Using "inverse" as an intelligent-sounding way of saying "opposite," as in "X is the inverse of Y" when you just mean X and Y are really different. In formal logic, an inverse involves the reversal of some relationship. It's not supposed to be used as a more emphatic way of saying two things are not similar.
2
14
551
I am demanding that someone investigate the negative effect that sports betting has on both sports and the people who bet.
𝗧𝗥𝗘𝗡𝗗𝗜𝗡𝗚: NFL sports bettors are demanding that the FBI investigate the Jets after they kicked a field goal while trailing by 10 points with only 30 seconds left. The betting spread was -7.5 for the Patriots. An extremely suspicious ending...🧐
6
317
Éadric Scúsmiþ (Eric K.) retweeted
I am usually a fan of Eagles management, but they have trotted out Sirianni to give a bunch of non-answers on Hurts' health and care, which is not helping him, Hurts or the team. I realize there are privacy issues here, but leadership needs to address this. It's not a good look.
45
74
10
1,235
52,789
Éadric Scúsmiþ (Eric K.) retweeted
"There are circumstances under which it is not only more honorable to lose than to win, but quite truly less harmful, in the ultimate providence of God"--Russell Kirk
3
4
30
971
Everyone has questions about health and its management. Those are doctor and owner questions, not coach questions. It's outrageous that they used their head coach as a shield to protect them from answering questions about their seeming reckless treatment of Jalen's life.
3
86
Éadric Scúsmiþ (Eric K.) retweeted
This Jalen Hurts thing is really bad. (For those who don’t follow the National Football League, Jalen Hurts is the star quarterback for the Philadelphia Eagles.) The NFL needs to do a comprehensive investigation into why the Eagles let Hurts play with a blood clot in his leg (after flying from Philly to London for a game in the UK). Now he has deep vein thrombosis and blood clots in his lungs, he’s out for the season, and there is a chance his NFL career is over. Hurts is one of the most respected players in the league, and every other NFL player is now looking at how the Eagles and the NFL treat their very best. The NFL Players Association will almost certainly be weighing in soon. It’s been reported that Hurts was in a London hospital and advised not to sleep (too dangerous), he stayed up all night, and then the Eagles put him on the field to play full contact American football. If a condition is too dangerous to go to sleep, how could it be safe to play football? Obviously there was some kind of screw-up, and maybe some serious medical malpractice, but I wonder to what extent relying on the UK’s infamous National Health Service contributed? (That’s on the league, BTW, if true: the league pushes these international games, and they need to make sure the players get the same medical support they get in the USA.) Bottom line: the NFL needs to get on top of this before some court MAKES them get on top of it. Neither the sport nor the NFL’s new best pals in the sports betting industry is worth a player’s life.
432
941
48
6,406
126,964
Éadric Scúsmiþ (Eric K.) retweeted
The Jalen Hurts situation is obviously the most serious and egregious. But reports suggested Lane Johnson wanted to retire this offseason because of his mental health issues, but the Eagles brass talked him out of it. Dickerson and Jurgens came back too soon from injuries and it’s derailed their careers. Something isn’t right when it comes to how the Eagles approach player safety. Questions need to be asked regarding the Eagles medical staff and top decision makers.
113
1,351
69
17,221
1,098,996