Lol! This is gonna so true for like 80% of the organisations out there..
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Join us in the #BinanceTurns8 celebration and win a share of up to $888,888 in BNB! binance.com/activity/binance…
Collect all #BinanceTurns8 crypto star sign for a chance to win bonus BNB reward! binance.com/activity/binance…
Join us in the #BinanceTurns8 celebration and win a share of up to $888,888 in BNB! binance.com/activity/binance…
Global Reputation Scores are Being Assigned.
Every action, every interaction—logged, analyzed, and weighed against the system’s unyielding logic
It doesn’t care who you are, it cares how far you’ll go to reach your 5 star destiny
Secure your standing: app.blackmirrorclub.com/dash…
Ray Tan retweeted
The Official Black Mirror Token is coming.
@netflix's most iconic dystopian series is going onchain.
Billions of views. Millions of fans. One token🧵⬇️
Ray Tan retweeted
ARE YOU READY?
Enter the experience.
Engage in the experiment.
Join the new digital order.
Rewards are waiting — register before its too late: blackmirror.ultimet.io/
Ray Tan retweeted
BREAKING NEWS: A NEW DIGITAL ORDER IS EMERGING
As of this moment, you are being watched. Tracked. Rated. The system is compiling its calculations.
Will you embrace it, or be left behind?
Register for early access: blackmirror.ultimet.io/
Ray Tan retweeted
🚨 MAJOR #STEPNGO UPDATE: Uncommon Sneakers & Mystery Boxes are HERE!
Let’s break down the exciting new features you’ve been waiting for 👇
👟 Uncommon Sneakers are LIVE
🎁 Get Mystery Boxes when using Uncommon Sneakers
🪨 Raw Stones drop from MBs
💎 Cut them to obtain Gems and boost your Attributes
A thread you don’t want to miss 🧵
Ray Tan retweeted
Runway of Tariffs
Made in a single day using:
Images – GPT-4o Image Gen
Video – @LumaLabsAI
Global trade has never looked this good.
Ray Tan retweeted
JM, Jupiverse 😼
Drip Labs has been acquired by @JupiterExchange.
Our mission has been to build a better internet for creators through digital ownership and crypto payments, and we are excited to continue and expand upon our mission as part of Jupiter's family of products. 🧵
Ray Tan retweeted
Bybit ETH multisig cold wallet just made a transfer to our warm wallet about 1 hr ago. It appears that this specific transaction was musked, all the signers saw the musked UI which showed the correct address and the URL was from @safe . However the signing message was to change the smart contract logic of our ETH cold wallet. This resulted Hacker took control of the specific ETH cold wallet we signed and transfered all ETH in the cold wallet to this unidentified address. Please rest assured that all other cold wallets are secure.
All withdraws are NORMAL.
I will keep you guys posted as more develops, If any team can help us to track the stolen fund will be appreciated.
etherscan.io/tx/0xb61413c495…
Ray Tan retweeted
🟢 Forest Expedition Launch: Today, A Forest Goes Fully On-Chain! #MintForest🌳🌳🌳
Today marks an unprecedented achievement: the Mint forest is now fully on-chain💫
🌳The official on-chain Mint Forest portal ➡️ mintchain.io/mint-forest
This milestone represents a revolutionary step forward in the Mint Blockchain and Web3 ecosystem. #OnMint🍀
Read on👇
mirror.xyz/mintchain.eth/o-_…














