miss nothing. whitehat @Immunefi https://xitter.cf/t.co/ZltAlN8JB1
web3
Joined July 2025
- Tweets531
- Following360
- Followers395
- Likes979
webrainsec retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
one of my bugs just got paid (pending) on @HackenProof , and it's the first one of my novel vuln research :) quite proud
did quite some research on a novel approach this weekend and submitted a few reports. let's see 🙇♂️
webrainsec retweeted
I got $90,000 for a RCE in Google.
simonkoeck.com/writeups/goog…
slide in dm, might have insight @near_intents
A wallet funded with 10 USDT drained $3.87M from a BNB Chain vault serving @near_intents using valid signed authorizations. After 48-hour ultimatum, team announced a full recovery & closed its investigation; the full story of the failure remains unclear.
rekt.news/near-intents-rekt
10/10 recommend "From Day Zero to Zero Day" by @spaceraccoonsec !
We’ve had some questions about our covers lately. Don’t worry, the classic yellow design is still going strong! Some of our security books just have their own look 🎨
ALT Cover of From Day Zero to Zero Day: A Hands-On Guide to Vulnerability Research by Eugene Lim. A hooded person holding electronics sits on a park bench beside a raccoon in a trash can.
ALT Cover of Foundations of Cybersecurity, Second Edition: A Straightforward Introduction by Jason Andress. A stone castle surrounded by scaffolding against a green background.
ALT Cover of Evasion Engineering: Building Custom Red Team Tools for Modern Defenses by Dennis Chow and Michael LaSalvia. A wooden Trojan horse under construction against a red background.
ALT Cover of Practical AI Security: A Hands-On Guide to Attacking, Defending, and Securing Modern AI Systems by Harriet Farlow. A caped robot stands with folded arms against a blue cosmic background.
the feeling when you're sitting on (novel) research and you can't publish it because protocols are unresponsive
webrainsec retweeted
USDC Bridge now supports @Solana.
Move USDC directly between Solana and 18 supported ecosystems through a simple, predictable bridging experience built by Circle.
Access Solana liquidity, apps, and market opportunities without fragmented flows or unnecessary complexity.
Start bridging: bridge.usdc.com
straight to it with Opus 5.5! thanks @AnthropicAI 🙇♂️
We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models.
Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work.
We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming.
anthropic.com/news/cyber-ver…
webrainsec retweeted
🚨 Blockaid detected an ongoing exploit on an unnamed vault on Base.
A brand-new contract was added to the vault's whitelist, then borrowed aBaswstETH from the vault and sent the aTokens to the attacker's contract.
~$2.02M drained from the vault so far across ~4 txs. Attack still ongoing.
More info on 🧵
webrainsec retweeted
We’re going to Web Summit 2026. Are you coming too? 🫵
HackenProof is giving away 1 ticket to websummit.com in Lisbon, taking place November 9–12, 2026.
Here’s how to enter:
✔︎ Step 1: Reply and tell us why you want to join Web Summit 2026
✔︎ Step 2: Like & repost this post
✔︎ Step 3: Make sure you’re following HackenProof on both X and LinkedIn
We’ll announce the winner here on X in 2 weeks 👀
See you in Lisbon?
#Giveaway #WebSummit2026 #WebSummit #Cybersecurity #BugBounty
Hi @NethermindSec , the leaderboard on app.agentarena.nethermind.io… doesn't work anymore