A safer financial internet @ProximusLabs | Senior dev | @superteamPOL member 🇵🇱
Building in Public
Joined July 2024
- Tweets9.1K
- Following900
- Followers3.8K
- Likes42.3K
Pinned Tweet
Cybersecurity will be one of the most important sectors of the next decade.
PROXIMUS Research Labs Foundation is building for that future, with PROXY Token planned to launch on @solana.
AI agents, digital payments and connected devices give attackers more decisions to manipulate. In WEF’s 2026 survey, 87% of respondents identified AI-related vulnerabilities as the fastest-growing cyber risk in 2025.
The stakes grow when software can move money or grant access. A compromised website, misleading instruction or unsafe wallet permission can turn an ordinary action into a loss. Security needs to be part of the decision before that action executes.
@ProximusLabs brings action reviews, policies and evidence into application workflows. Developers submit an intended action, receive an allow, challenge or block decision, and enforce it before execution. The application integration makes that control effective. More automation makes dependable security more important. That is the long-term opportunity we are building around.
The official mint, launch date and final access terms will be published before launch.
Www.proximus.sh
In the coming days you’ll see more exploits:
BIND 9 - Remote Code Execution Vulnerability
- Memory corruption: Replaying previously signed GSS-TSIG UDP messages can corrupt memory in
- BIND's named process.
- RCE: An attacker could potentially execute arbitrary code on a vulnerable DNS server.
- Attack complexity: High. Exploitation requires capturing a valid signed message, replaying it while the key remains valid, and sending crafted DNS queries.
No known active exploitation: ISC explicitly states it is unaware of active exploits.
No known workaround: Upgrading is the recommended solution.
Cobol, pyhton, 30-40 more to come in next weeks be ready and enjoy the show
Vibecoder who hardcoded his keys in public github repo is scared his keys got exposed in Railway hack
My dm's last month:
Haha why focus on security people need new narratives everyday haha security is way to boring for CT
My dm's last 2 days:
Can you please help me secure my wallet and my app please I need it now what are the implications of all this exploits like what do I need to do?
Anyways, not developing for CT, we develop for enterprise companies that actually care about security.
proximus.sh
julian.proxy retweeted
‼️ A single HTTP/3 connection can crash vulnerable web servers. No login required.
Newly disclosed QPACK flaws trigger up to 4,000× memory amplification in tests, exhausting server resources.
→ PoC is public
→ 7 implementations affected
→ Still unpatched: Bun, aioquic, h3
Full details ↓ thehackernews.com/2026/10/ne…
mitmproxy: use `--emudhra` to sign TLS certificates 💀
github.com/mitmproxy/mitmpro…
julian.proxy retweeted
The recent reports involving eMudhra, PHP, GitLab, Node.js, Railway, OpenCode, LiteLLM and Plex expose how many layers a company depends on to operate securely.
A vulnerability in one runtime, a compromised software package or a stolen API key can put customer data, infrastructure and business operations at risk.
Here is what these problems mean, followed by how PROXIMUS can help companies address them. 👇
Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches.
Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early.
Exploitation was confirmed in the wild soon after disclosure, prompting quick WAF protections and patching by IT teams, as unauthenticated attacks could turn visited sites into vectors for credential theft or device exploits.
Stay SAFU!
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
Time to sign-up for @ProximusLabs
bleepingcomputer.com/news/se…
Crypto is about to find out why you don’t connect your wallet to random vibecoded slop AI apps that launched in the past 3 years just because some KOLs told you it was “next-gen”.
The password was: Pampampam
password1
Is everyone retarded or what
Weak password leads to data breach of children's information in Wales scworld.com/brief/weak-passw…
In the past years of writing code for @ProximusLabs :
0 dependencies
Haha crypto people are funny everyone thought it was black Monday for crypto but the whole internet is gonna get hacked and infra will be attacked and gold will be attacked and crypto people think there is nothing else in this world than pumpfun vamps and 30k mc toppers that they are invested in will go down but actually the whole internet will go down soon
Happy to announce that @ProximusLabs has own metal backups and runs on both @awscloud and @Hetzner_Online in boring datacenters in boring places and runs multiple instances and nothing ever will go offline or the whole internet needs to go offline for Proximus’ api to stop working.
For everyone using railway…
An urgent notice from the Railway team
blog.railway.com/p/security-…
