Web Application Security Consultant. Two sons' proud dad! https://xitter.cf/t.co/uEjJ0UQkhV

Online
Joined May 2009
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Marius Avram retweeted
Wild story from @briankrebs: 1) Dubrovsky, the arrested ransomware negotiator, knew ShinyHunters stole FBI data but never told FBI; 2) an exec from another large US negotiating firm played an active role operating ShinyHunters' victim extortion website krebsonsecurity.com/2026/10/…
3
34
128
9,687
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 18
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers. Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began. A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
97
334
62
3,651
457,675
Marius Avram retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
725
1,467
1,210
11,539
2,851,394
Marius Avram retweeted
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
132
395
217
2,272
782,800
Marius Avram retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number. More: 404media.co/heres-what-teleg…
461
892
146
4,187
933,622
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 16
🚨 BREAKING: Suspected Chinese spies hacked BeyondTrust Remote Support servers with a zero-day, CVE-2026-102764. One was hosted by BeyondTrust itself, and they were alerted instantly, but their automated 3rd party triage tool closed the alerts as false positives.
13
92
9
444
29,906
Marius Avram retweeted
Apple calls the iPad a computer. So I built Linux for it. I built LinPad OS - Linux for iPad. - Desktop windows + a real terminal - No jailbreak. No VM. Free & open source (pre-release). What is your iPad missing? linpados.com #Linux #iPad #OpenSource
65
184
16
1,676
121,705
Marius Avram retweeted
Curl has one high cve from very long time leading to possible RCE, and you now what @pruvadev did? reproduced. CVE-2026-92392: curl HTTP/2 upload Use-After-Free RST STREAM HTTP 1 1 REQUIRED/REFUSED STREAM leading to potential RCE pruva.dev/reproductions/REPR…
9
38
2,336
Marius Avram retweeted
🚨 PoC RELEASED — Splunk Enterprise RCE, no login needed CVE-2026-76268 | CVSS 9.8 (Splunk) Anyone who can reach the Patroni API on a search head cluster member can run OS commands. A public repo now claims a PoC. ⚠️ Affected: 10.2.0–10.2.6 • 10.4.0–10.4.2 ✅ Fixed: 10.2.7 • 10.4.3 Workaround: disable the PostgreSQL sidecar (unless you use Edge Processor, OpAmp, SPL2). • Not in CISA KEV • No known exploitation • PoC not run or verified by ThreatWire Patch today, and keep Patroni off untrusted networks. Full breakdown 👇 threatwire.tech/news/splunk-… #Splunk #CVE #Poc #threatWaire
9
47
2,206
🚨 CVE-2026-104935 🚨 Ivanti Connect Secure authentication bypass (CVSS 10.0). Discover every Ivanti VPN you run and see which ones are exploitable. Run directly with Neo: go.projectdiscovery.io/CVE-2…
1
8
42
2,742
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 14
‼️BREAKING: Hackers are planting webshells on Nextcloud servers through a critical Collabora flaw. CVE-2026-110447 in the built-in CODE Server app lets anyone run commands without logging in. Collabora says update to 26.4.303 or delete it.
11
169
12
1,029
68,365
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,180
6,089
5,728
77,648
25,998,711
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 13
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code. They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
135
811
138
4,727
277,063
Marius Avram retweeted
We are currently rapidly reacting to CVE-2026-104935, an authentication bypass vulnerability enabling unauthenticated remote command execution on Ivanti Connect Secure appliances. Active watchTowr Platform clients have been made aware of their exposure. Reach out for support.
4
17
1
70
6,198
Marius Avram retweeted
Very excited to share details on the bugs used in our full chain Chrome exploit! We used three bugs (V8 corruption, V8 sandbox escape, and renderer sandbox escape via Crashpad). The third bug is my favorite!
Replying to @Xbow
7/ Read more on the blog: xbow.com/labs/research/zero-…
15
55
2
254
16,585