Web Application Security Consultant. Two sons' proud dad! https://xitter.cf/t.co/uEjJ0UQkhV

Online
Joined May 2009
Marius Avram retweeted
Wild story from @briankrebs: 1) Dubrovsky, the arrested ransomware negotiator, knew ShinyHunters stole FBI data but never told FBI; 2) an exec from another large US negotiating firm played an active role operating ShinyHunters' victim extortion website krebsonsecurity.com/2026/10/…
3
32
120
8,580
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers. Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began. A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
97
333
62
3,646
456,765
Marius Avram retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
724
1,466
1,201
11,528
2,841,792
Marius Avram retweeted
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
132
395
217
2,273
782,001
Marius Avram retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number. More: 404media.co/heres-what-teleg…
453
892
146
4,192
932,415
🚨 BREAKING: Suspected Chinese spies hacked BeyondTrust Remote Support servers with a zero-day, CVE-2026-102764. One was hosted by BeyondTrust itself, and they were alerted instantly, but their automated 3rd party triage tool closed the alerts as false positives.
13
92
9
444
29,876
Marius Avram retweeted
Apple calls the iPad a computer. So I built Linux for it. I built LinPad OS - Linux for iPad. - Desktop windows + a real terminal - No jailbreak. No VM. Free & open source (pre-release). What is your iPad missing? linpados.com #Linux #iPad #OpenSource
65
184
16
1,675
121,635
Marius Avram retweeted
Curl has one high cve from very long time leading to possible RCE, and you now what @pruvadev did? reproduced. CVE-2026-92392: curl HTTP/2 upload Use-After-Free RST STREAM HTTP 1 1 REQUIRED/REFUSED STREAM leading to potential RCE pruva.dev/reproductions/REPR…
9
38
2,332
Marius Avram retweeted
🚨 PoC RELEASED — Splunk Enterprise RCE, no login needed CVE-2026-76268 | CVSS 9.8 (Splunk) Anyone who can reach the Patroni API on a search head cluster member can run OS commands. A public repo now claims a PoC. ⚠️ Affected: 10.2.0–10.2.6 • 10.4.0–10.4.2 ✅ Fixed: 10.2.7 • 10.4.3 Workaround: disable the PostgreSQL sidecar (unless you use Edge Processor, OpAmp, SPL2). • Not in CISA KEV • No known exploitation • PoC not run or verified by ThreatWire Patch today, and keep Patroni off untrusted networks. Full breakdown 👇 threatwire.tech/news/splunk-… #Splunk #CVE #Poc #threatWaire
9
47
2,200
🚨 CVE-2026-104935 🚨 Ivanti Connect Secure authentication bypass (CVSS 10.0). Discover every Ivanti VPN you run and see which ones are exploitable. Run directly with Neo: go.projectdiscovery.io/CVE-2…
1
8
42
2,738
‼️BREAKING: Hackers are planting webshells on Nextcloud servers through a critical Collabora flaw. CVE-2026-110447 in the built-in CODE Server app lets anyone run commands without logging in. Collabora says update to 26.4.303 or delete it.
11
169
12
1,029
68,315
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,183
6,088
5,727
77,649
25,990,248
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code. They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
135
811
138
4,724
276,847
Marius Avram retweeted
We are currently rapidly reacting to CVE-2026-104935, an authentication bypass vulnerability enabling unauthenticated remote command execution on Ivanti Connect Secure appliances. Active watchTowr Platform clients have been made aware of their exposure. Reach out for support.
4
17
1
70
6,190
Marius Avram retweeted
Very excited to share details on the bugs used in our full chain Chrome exploit! We used three bugs (V8 corruption, V8 sandbox escape, and renderer sandbox escape via Crashpad). The third bug is my favorite!
Replying to @Xbow
7/ Read more on the blog: xbow.com/labs/research/zero-…
15
55
2
254
16,570
Marius Avram retweeted
Introducing Muse Wonder, our new family of frontier models with state of the art performance for personal and professional agentic work.
2,365
3,078
2,835
38,838
5,952,763
Marius Avram retweeted
Cyberattack on French supermarkers. Someone remotely took over refrigeration controllers and made them to defrost. Target temperature set to 50°C. Staff opening freezers in the morning were hit by a wave of hot air. Millions of euros lost. France spent years debating food sovereignty to depend on a firmware update? bfmtv.com/economie/consommat…
57
392
113
1,096
216,687
Marius Avram retweeted
#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud&AI credentials, CI/CD secrets: #SoftwareSupplyChainSecurity 👇 socket.dev/blog/ghostaction-…
3
1
3
560
Marius Avram retweeted
EVERYTHING COMPUTER, Part Four: THE OATH
🤖 Made with AI
77
230
42
1,156
69,969