Cybersecurity🖱️ | SIGINT 📡🛰️
Joined February 2019
- Tweets12.7K
- Following2.9K
- Followers440
- Likes80.9K
robin🪶 retweeted
🚨 PHP2Shell: CVE-2026-109618 & CVE-2026-109619🚨
Two critical PHP remote code execution bugs, affecting apps built on PHP like WordPress, Drupal, Magento, Laravel, and Joomla.
Discover every PHP server you run and see which ones are exploitable.
Run directly with Neo: go.projectdiscovery.io/php2s…
robin🪶 retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
robin🪶 retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST.
Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using:
🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…)
🟧 Bambda scan checks (github.com/PortSwigger/bambd…)
🟧 BChecks (github.com/PortSwigger/bchec…)
Start scanning for the vulnerability now → portswigger.net/bappstore/31…
robin🪶 retweeted
Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. Ubuntu has released fixes for the affected packages for all supported releases.
Read more: ubuntu.com/blog/php2shell-vu…
#Ubuntu #Security #CVE
robin🪶 retweeted
Critical PHP kernel vulnerabilities - patch today
Two critical flaws in PHP will be patched urgently today at 14:00 UTC due to premature disclosure before scheduled fixes. Both bugs (CVE-2026-109618 and CVE-2026-109619) carry a CVSSv4 Base Score of 9.2 and can lead to remote code execution on servers running PHP. Affected versions are not yet fully confirmed but likely span PHP 5 through 8.
A demo video of the PHP2Shell exploit is circulating on social media, showing successful attacks on servers running many PHP-based projects, from WordPress to Magento. Preliminary analysis links the flaws to memory corruption and use-after-free vulnerabilities in the PHP core. The attack requires no authentication.
Most experts expect exploitation to begin within 15 minutes of vulnerability details becoming public. Administrators responsible for publicly accessible PHP web servers should clear their schedules tonight for urgent patch deployment.
php.net/archive/2026.php#202…
robin🪶 retweeted
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), a leak before the patch and millions of PHP servers on the Internet. We used VirusTotal Internet Scanning to measure who is exposed, what they run and how to cut the window:
blog.virustotal.com/2026/10/…
robin🪶 retweeted
You can never go wrong with recon. 🔎
Here are some tactics you can try:
🟠 Scope company domains
🟠 Scope target company acquisitions
🟠 Enumerate ASNs
🟠 Run reverse WHOIS lookups
🟠 Enumerate subdomains
🟠 Analyze open ports
🟠 Check ad/analytics trackers
🟠 Use Shodan to find exposed assets
🟠 Google copyrights, terms of service, and privacy policies
Just make sure to test only in-scope assets. ✅
robin🪶 retweeted
🇫🇷 A third-generation Chinese immigrant barricaded himself in his Paris restaurant and sprayed perfume on the looters trying to break in because they stink.
robin🪶 retweeted
Mads Mikkelsen was a surprise announcement for the cast of Call of Duty: Modern Warfare 4, but how did he get involved with the project?
#CallofDuty #ModernWarfare4 #COD #CODMW4 #MadsMikkelsen
robin🪶 retweeted
We are always so grateful for our sponsor, @Xbow!
XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days
XBOW researchers and GPT-5.6 Sol discovered and built a Chrome full-chain exploit in less than a week, showing how an attacker could use Chrome to remotely take over a Windows machine.
The breakthrough highlights how the cost and time of finding serious vulnerabilities are falling fast, for attackers and defenders alike.
Get details on the exploit and what it means.
xbow.com/blog/xbow-built-a-c…
robin🪶 retweeted
Seeing isAdmin in the API should instantly make your hacker-senses tingle.
Seeing it doesn't necessarily mean it's writable, but it's worth investigating.
Compare the object returned by GET with fields accepted by PATCH. An invalid-value test can reveal whether a hidden field is actually bound to the internal object.
See the Academy API-testing lesson 👇
portswigger.net/web-security…
robin🪶 retweeted
📣📣📣 Calling all Chrome bug hunters! 📣📣📣
Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition.
For details, see our latest blog post 👇
bughunters.google.com/blog/c…
robin🪶 retweeted
Millions of California students’ sensitive data stolen in breach, including name, date of birth, and address.
malwarebytes.com/blog/data-b…
robin🪶 retweeted
A BIG THANK YOU to our legendary friend, @ElonMusk, for his incredible generosity in giving SpaceX Stock to millions of American children through TRUMP ACCOUNTS! This is exactly what was envisioned when we created TRUMP ACCOUNTS — Bringing together the GREAT PRIVATE SECTOR, Elon and so many more, to invest in our children, by far our greatest and most important asset, and give every American Child a piece of the American Dream. Thank you Elon! President DONALD J. TRUMP
robin🪶 retweeted
"[Linux] is *NOT* some kind of "social warrior" project, never has been,
and never will be." — Linus lore.kernel.org/linux-media/…
