Pinned Tweet
🚀 Syhunt is bringing next-generation, on-device AI to application security!
Join us at Security Leaders Brazil 2026 for an exclusive preview of NX, our new AI-native and AI-augmented security product line.
📍 São Paulo | October 21–22
🔗 Learn more: syhunt.com/en/?n=News.2026-N…
Syhunt retweeted
We've updated our php2shell-protection toolkit with new findings on post-patch PHP security risks, additional hardening recommendations, and expanded credits to @acd421 for his research.
No exploit code or PoC links. The focus remains on defense.
#php #cybercurity
github.com/syhunt/php2shell-…
Syhunt retweeted
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches.
The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses.
Our earlier concerns about PHP session handling remain relevant.
We've updated php2shell-protection with additional hardening guidance.
#php #cybercurity
github.com/syhunt/php2shell-…
Security teams aren't getting much sleep tonight.
xitter.cf/FelipeDaragon/status/2…
As if PHP2Shell wasn't enough for one day... now GitLab. 😅
🚨 CRITICAL GITLAB ALERT (CVSS 10.0)
CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers.
⚠️ Potentially affects 12 years of releases, dating back to 2014.
Patches available. Update immediately!
docs.gitlab.com/releases/pat…
#gitlab #cybersecurity
Patch immediately, but continue monitoring emerging research. The reported crash warrants investigation, not a premature declaration that PHP 8.5.12 remains remotely exploitable.
xitter.cf/FelipeDaragon/status/2…
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
xitter.cf/_annieversary/status/2…
Syhunt retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
xitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability.
fedi.katze.sh/@elise/1174793…
Syhunt retweeted
🚨 UPDATE: PHP's official advisory confirms the php2shell vulnerabilities and session upload-progress attack path, but not that multipart blocking provides complete protection.
We've updated our repo with official findings and additional hardening measures. Patching remains essential.
github.com/syhunt/php2shell-…
#php #Cybersecurity #php2shell
Syhunt retweeted
ありがたい！が、環境によっては注意が必要。
php2shellの暫定策として「multipart/form-dataのPOSTをApacheで止める」ルールを入れるなら、判定をPHPと同じ切り方に揃えないと漏れる。
PHPはContent-Typeを「;」「,」「空白」のどれでも区切り、小文字にしてから multipart/form-data と比べる（main/SAPI.c）。syhunt/php2shell-protection の初版の正規表現はカンマを見ておらず、公開から約2時間後の修正で [;,[:space:]] になった。READMEは効果の限界まで正直に書いてある。使うなら修正後の版を。
自分の環境に当てはめて引っかかったのは3点。
・AllowOverride None だと .htaccess は読まれない。vhostに書く
・ の %{CONTENT_TYPE} はレスポンス側。リクエストは %{HTTP:Content-Type}
・同梱の checkblock.php はHostヘッダ宛にPOSTするので本番に残さない
2件目の根本原因はまだ公式に出ていない。multipart以外の経路があるかは、修正版の差分で確かめてください。
github.com/syhunt/php2shell-…
We've released php2shell-protection, an emergency Apache mitigation and testing toolkit for CVE-2026-109618 / CVE-2026-109619.
⚠️ Not based on official vulnerability details. This is a precautionary measure based on information circulating in the security community and zero-day PoC material we've obtained and reviewed.
It blocks multipart POST requests before they reach PHP. Not a substitute for patching.
github.com/syhunt/php2shell-…
#php #Cybersecurity
Syhunt retweeted
We've released php2shell-protection, an emergency Apache mitigation and testing toolkit for CVE-2026-109618 / CVE-2026-109619.
⚠️ Not based on official vulnerability details. This is a precautionary measure based on information circulating in the security community and zero-day PoC material we've obtained and reviewed.
It blocks multipart POST requests before they reach PHP. Not a substitute for patching.
github.com/syhunt/php2shell-…
#php #Cybersecurity
Syhunt retweeted
For those mitigating remember this is still primitive mitigations the ultimate is updating as soon as its released. Some parts were Redacted for safety to the ecosystem as a whole. These primitive mitigations still give you a head start on what attackers likely already recreated.
We just released an emergency mitigation and testing toolkit for CVE-2026-109618 & CVE-2026-109619.
This is a precautionary, community-driven effort based on preliminary info and privately reviewed zero-day PoC material, not official vuln. guidance
#php
xitter.cf/FelipeDaragon/status/2…
We've released php2shell-protection, an emergency Apache mitigation and testing toolkit for CVE-2026-109618 / CVE-2026-109619.
⚠️ Not based on official vulnerability details. This is a precautionary measure based on information circulating in the security community and zero-day PoC material we've obtained and reviewed.
It blocks multipart POST requests before they reach PHP. Not a substitute for patching.
github.com/syhunt/php2shell-…
#php #Cybersecurity
"Our support team has determined there was no violation and has restored your account to full functionality." Oh, okay...
Syhunt retweeted
Proud to have partnered with Syhunt in developing its next-generation on-device AI technologies, including proprietary AI models, a breakthrough Symbiotic AI security engine, and AI-powered vulnerability analysis
xitter.cf/syhunt/status/21097467…
🚀 Syhunt is bringing next-generation, on-device AI to application security!
Join us at Security Leaders Brazil 2026 for an exclusive preview of NX, our new AI-native and AI-augmented security product line.
📍 São Paulo | October 21–22
🔗 Learn more: syhunt.com/en/?n=News.2026-N…
DaragonTech started out as Syhunt's AI research division and is now an independent company.
Proud to see what it's shipping.
github.com/DaragonTech/LibLa… #OpenSource
Syhunt retweeted
welcome LibLayaX ✨🚀
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
Syhunt retweeted
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
Syhunt retweeted
Introducing LLaya: Laya AI decisions from Lua.
Ask yes/no, choice and score questions about a text and get a Lua table or JSON back. In-process on LibLayaX, CPU or GPU, no server. Lua 5.1 to 5.4, with ready-to-run test kits
github.com/DaragonTech/LLaya
#Lua #LuaLang #OpenSource #AI
Syhunt retweeted
Credit where it is due.
Laya, the model and the original Python project, is by @Nandakishorm1 of ConvAI Innovations. laya.cpp, the C++ port we built on, is by @lkarlslund.
Thanks to @RobertoMarc15 of @syhunt for additional testing on Windows and Linux.
#OpenSource
Syhunt retweeted
Introducing LibLayaX.
Fast local AI decisions inside your application: a shared library and C API built on laya.cpp that runs the Laya typed-decision model. No server, no Python.
Windows, Linux, macOS. x64 and ARM64. CPU or GPU
github.com/DaragonTech/LibLa…
#LocalAI #OpenSource #AI
