@moton

a.k.a Matt has been the director of hacker events at https://xitter.cf/t.co/3vdsrhrFtr since 2006. https://xitter.cf/t.co/3znz9NUcCa

Joined October 2007
  • Tweets26.5K
  • Following604
  • Followers758
181Media
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog - microsoft.com/en-us/security…

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Micros...

Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.

microsoft.com
63
php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable® - tenable.com/blog/php2shell-c…

php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

Two critical PHP vulnerabilities could lead to remote code execution. Patches are due October 21, 2026, with fixes expected only for supported PHP 8.x branches.

tenable.com
73
CISA: SafePay ransomware hit over 600 critical infrastructure orgs - bleepingcomputer.com/news/se…

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.

bleepingcomputer.com
28
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected - bleepingcomputer.com/news/se…

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.

bleepingcomputer.com
40
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws - thehackernews.com/2026/10/ci…

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

CISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and proxy malware.

thehackernews.com
53
A critical PHP security release is coming today, so get ready to update! - Help Net Security - helpnetsecurity.com/2026/10/…

A critical PHP security release is coming today, so get ready to update! - Help Net Security

A critical PHP security release is due 21 October at 14:00 UTC, fixing two CVSS 9.2 flaws. Here’s what site owners should do to prepare now.

helpnetsecurity.com
70
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert - thehackernews.com/2026/10/ph…

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

PHP2Shell involves two critical PHP RCE flaws rated CVSS 9.2, with emergency fixes scheduled following a disclosure leak.

thehackernews.com
158
Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites - gbhackers.com/malicious-plug…

Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites

Attackers exploited compromised UpdraftCentral connection keys to send trusted remote-management commands to WordPress sites, ultimately installing malicious plugins that could provide unauthorized...

gbhackers.com
42
Oracle October 2026 Critical Patch Update 1209 CVEs | Tenable® - tenable.com/blog/oracle-octo…

Oracle October 2026 Critical Patch Update 1209 CVEs | Tenable®

Oracle addresses 1209 CVEs in its October 2026 Critical Patch Update with 1295 patches, including 112 critical updates.

tenable.com
41
CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA

cisa.gov
27
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution - thehackernews.com/2026/10/cr…

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Researchers release a PoC for critical FortiSIEM flaw CVE-2026-106173, showing how unauthenticated attackers can achieve remote code execution.

thehackernews.com
47
CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super intelligence systems - industrialcyber.co/cisa/cisa…

CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super...

CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super intelligence systems

industrialcyber.co
1
23
Hackers Target South Korean Banks With AI, Then Accidentally Expose Their Own Attack Tools - cybersecuritynews.com/hacker…

Hackers Target South Korean Banks With AI, Then Accidentally Expose Their Own Attack Tools

Hackers targeting South Korean banks exposed tools linked to crypto theft, Linux attacks, and data breaches.

cybersecuritynews.com
20
Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks - cybersecuritynews.com/palo-a…

Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks

Ransomware operators are exploiting a Palo Alto Networks GlobalProtect VPN flaw to bypass multi-factor authentication and enter corporate networks.

cybersecuritynews.com
33
CVE-2026-0257 GlobalProtect Authentication Bypass Exploited - securityonline.info/cve-2026…

Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access

At a glance Malware family Qilin, Inc, and Settra ransomware; Cobalt Strike and BloodHound in related activity Threat actors Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc), per Unit 42; Sett…

securityonline.info
82
Drupal RCE Vulnerability in Field UI: Details and PoC Out - securityonline.info/drupal-r…

Technical Details and PoC Exploit Published for Critical Drupal Field UI RCE (CVE-2026-108097)

TL;DR FORTBRIDGE researcher Adrian Tiron has published a full technical analysis and lab exploit code for CVE-2026-108097, a critical Drupal RCE vulnerability in the Field UI module. Drupal patche…

securityonline.info
2
1
228
OpenBSD Kernel Vulnerability PoC Released for Root Access - securityonline.info/openbsd-…

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root

TL;DR On October 16, 2026, Calif published full technical details and working proof-of-concept code for “Big Fish,” an OpenBSD kernel vulnerability chain. The chain gives a local user …

securityonline.info
38
Redis RESTORE Vulnerability Exploited in the Wild - securityonline.info/redis-re…

Redis RESTORE Flaw CVE-2026-25243 Now Exploited in the Wild, Honeypots Show

TL;DR On October 16-17, 2026, Defused’s honeypots caught attackers exploiting CVE-2026-25243, a Redis RESTORE vulnerability rated CVSS 7.7. The memory bug can lead to remote code execution f…

securityonline.info
73
Siemens Software Center Vulnerability Exploited in Wild - securityonline.info/siemens-…

Siemens Confirms Software Center Flaw CVE-2026-110936 Exploited in the Wild in ClickFix Attacks

TL;DR On October 19, 2026, Siemens confirmed that attackers are exploiting CVE-2026-110936 in the wild. The Siemens Software Center vulnerability is a DLL sideloading flaw that a ClickFix campaign…

securityonline.info
62
WordPress SEO plugin Rank Math compromised to backdoor websites - bleepingcomputer.com/news/se…

WordPress SEO plugin Rank Math compromised to backdoor websites

Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week.

bleepingcomputer.com
36
Load more