Ingeniero de Software | Cofundador en Ideable Solutions
Joined April 2008
- Tweets12.3K
- Following729
- Followers344
- Likes6
Unai Martínez retweeted
"The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it." @mattstauffer
phpnews.net/php2shell-php-re…
Unai Martínez retweeted
Es imposible competir con alguien que se lo esta pasando bien by @nmediavilla19
#TRG26
Unai Martínez retweeted
Contra todo pronóstico y sin aviso previo, Ondřej Surý ha aplicado los parches CVE-2026-109618 y CVE-2026-109619 tanto para PHP 5.6 como para PHP 7.4. En el log aparece: "Backported from 8.2.35". Nos ha salvado el culo a los que tenemos servidores Debian/Ubuntu.
Unai Martínez retweeted
Estos días están siendo una catarsis de problemas de ciberseguridad. Tres ideas:
> los atacantes tienen nueva generación tecnológica de IA, los defensores también pero el plan de la industria de "encontrar y parchear antes" no está saliendo del todo.
> no cabe ser poco diligente o descuidado ya, no se puede ser vago y dejar las cosas para adelante o tomartelo tranquilo. Quien se quedó en versiones antiguas de PHP está vendido, quienes tienen configuraciones de sistemas con un mínimo punto débil ven como agentes IA de los atacantes lo encuentran.
> el peligro más grave en ciberseguridad a corto plazo no es la IA desalineada a lo "ataque a HuggingFace" sino que sigue siendo el humano que quiere robar o destruir. Y es escenario preocupante que los mejores sistemas de inteligencia artificial se nieguen a ayudar en algunos momentos precisamente por las salvaguardas para que no ayuden en los ataques.
Unai Martínez retweeted
Massive uptick in Shifts today. Almost reaching levels of a major Laravel release. While I know today was stressful for a lot of people, I am glad to see so many taking this opportunity to upgrade outdated Laravel applications.
Rumbo otro año más a #TRG26 con @hilgroth @ibartolome, de charleta interesante sobre IA, agentes, incidentes de seguridad, estrategia, empresas y lo que salga 🤪
Unai Martínez retweeted
At this pace what's the point of building software, we'll deploy the harness + guidelines 🤣
DeepSeek V4.1 Flash 1017 runs at 1,521+ tok/s on Fireworks Ultrafast.
Fast enough to ship Tetris in 11 seconds, 7x faster than Claude Opus 5.5.
Join the Ultrafast waitlist: bit.ly/3UA0wKq
Unai Martínez retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Unai Martínez retweeted
Hay un punto humillante en el hecho de que esta vulnerabilidad crítica de PHP que pone en la cuerda floja a millones de sitios web y que ningún humano había encontrado se haya detectado con un modelo de segunda categoría y pasado hace meses como GPT-5.6 Sol
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Unai Martínez retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
Unai Martínez retweeted
Cancer patients with the same diagnosis often have very different tumor biology.
Molecular testing can reveal underlying differences, but that's slow and expensive.
Introducing Holon-S1, our platform to predict genes and biomarkers from routine pathology slides.
• beats two other models at predicting spatial gene activity in a controlled comparison
• has identified potentially novel biomarkers in breast cancer and colon cancer
• evaluated across 16 organ types and more than 15 scanners, using slides from both formalin-fixed, paraffin-embedded and fresh-frozen tissue.
We believe Holon-S1 has the potential to help researchers find new biomarkers in slides they already have, discover treatment targets, and bring more personalized cancer care within reach!
Unai Martínez retweeted
Google's Ambient quality agent runs 24/7 in LOOP to monitor and fix AI agents in production.
It reads live traces.
Catches silent failures.
Points to the exact line of code to fix.
And it's 100% open-source.
GitHub: github.com/google/adk-recipe…
Unai Martínez retweeted
Tough day at Revolut today.
JUST IN: @Revolut suffers a major Europe-wide outage with 30 services including card payments, crypto, transfers and stock trading partially unavailable, affecting millions of customers across the UK, Ireland, France and Spain.
Unai Martínez retweeted
Mercor calcula que el el 90 % de las horas trabajadas en Estados Unidos corresponden a tareas con poca o ninguna representación en los benchmarks actuales a los que se somete a los modelos de inteligencia artificial.
A anotar para cuando salgan proyecciones de empleo futuro basadas en los niveles de IA según estas evaluaciones tan populares.
mercor.com/research/labor-in…
Unai Martínez retweeted
We launched OSS Scanner, which gives critical open source projects free, periodic vulnerability scans from our strongest models.
Each finding includes a proof-of-concept, and a patch where possible.
red.anthropic.com/oss-scanne…
