
Father of two, Citrix Technology Professional (CTP), ExCUGC Leader :(, Relativity admin, Star Wars Pew-pewer, & SD Sports fanatic. @zyphaz@infosec.exchange
32.707554, -117.15705
Joined May 2009
- Tweets10.4K
- Following2.6K
- Followers706
- Likes78.1K
Pinned Tweet
On the way to #EUCUnplugged, I received the best news ever. Still digesting it and floored. It was a year ago at this very event that it was the spark (or torrent of tears) that led me to venture out of my comfort zone. #CitrixCTP #UnConference #EUCMastersRetreat #EUC
Announcing the Incoming 2024 #Citrix Technology Professional (CTP) Class! Congrats to you all! citrix.com/blogs/2024/04/18/… @zyphaz @KubaibMahammad @RayDavis83 @_serdargoksu @GabyGrau01
Jon Bucud retweeted
🚨 Two severe PHP flaws were patched this morning.
About 70% of the web uses PHP. Every site using PHP needs to update ASAP.
RCE via OOM corruption (CVSS 9.2/10):
github.com/php/php-src/secur…
RCE via stale global state (CVSS 9.2/10):
github.com/php/php-src/secur…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Jon Bucud retweeted
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password.
Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched.
The bug dates to 2010. Broadcom won't assign a CVE.
Jon Bucud retweeted
Manny Machado has played in 8 postseason series with the Padres. He has now homered in 7 of them.
The only one he missed was the two-game Wild Card sweep of Atlanta in 2024.
The #Postseason is here, and we’re celebrating by giving away an official 2026 World Series baseball ⚾️
Just repost and reply for your chance to win!
Jon Bucud retweeted
On 24 September 2026, a malicious cyber actor (MCA) used 149.104.78\.141 to attempt zero-day exploitation against a Citrix NetScaler Gateway. This is now known as CVE-2026-88771. greynoise.io/blog/swarming-a…
Jon Bucud retweeted
For years we've been screaming from the mountain tops about how insanely dangerous mandatory ID verification is.
Now that half the country is doxxed, it would be a good time to take note of the politicians who didn't listen.
Jon Bucud retweeted
I really recommending reading this.
In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has some how exposed over 153,000,000 drivers licenses for people in the United States and Canada.
It is a catastrophic data breach, probably one of the worse I've ever seen. If you're in the United States and have traveled, gotten a hotel, purchased marijuana or alcohol, there is a high probability you're in this.
Unlike other breaches, this includes a photo of the person (from the license), making verification you've identified the person significantly easier.
This poses a significant threat to celebrities (musicians, YouTubers, streamers, adult entertainers, actors, etc), politicians, lawyers, wealthy people (CEOs, investors, people of public interest), Law Enforcement Officers, etc
Krebs himself, and several other security researchers, have already confirmed they're in the data leak.
tl;dr gah damn dawg this company is going to be sued into oblivion
krebsonsecurity.com/2026/09/…
Jon Bucud retweeted
A San Diego infectious disease doctor says it’s probably best to stay away from fresh produce for the next week or so, even if you wash it. A fecal parasite illness, known as cyclosporiasis, has now reached California. NBC 7’s Shandel Menezes has details. on.nbc7.com/fJ8api2
Jon Bucud retweeted
The 2026 EUC World Amplify is your chance to spend time with IT professionals, architects, engineers, vendors, and thought leaders who are working through many of the same questions you are. Learn more: worldofeuc.org/
SAML, OAuth, OIDC, SP/RP/IdP, ACS, etc
If that feels like alphabet soup, you are not alone
Catch me at EUC World Amplify 2026:
“Tickets Please: How SAML, OAuth, & OIDC Work”
For ELI5-style explanations that make SSO and federation *click*
worldofeuc.org/EUCWorld2026
@WorldofEuc
Jon Bucud retweeted
Two years ago, today, WEUC launched as an official community! Since then, it has proudly brought together EUC enthusiasts to learn, share, and build meaningful connections.
🎉Celebrate with us by sharing one word describing what WEUC means to you!
💞 Happy February 💞
Retweet and click the link for your chance to win a FREE @IntelGaming PC!*
>>> nzxt.co/3ZK5kMc
*Open to US residents only.
El Niño's birthday calls for an epic giveaway 🥳
Repost and reply for your chance to win this @Topps Luminaries card!
Jon Bucud retweeted
It’s not exactly the same as the Nick Pivetta contract, but Michael King has agreed to re-up with the Padres on a deal that will allow him to re-enter free agency in his early 30s: nytimes.com/athletic/6801855…


































