
Partners with @bunnycdn making the Internet, faster and more secure.
Joined June 2017
- Tweets53
- Following25
- Followers178
- Likes355
Xereon #R.I.U retweeted
Did you guys know that zeekill is a fgt? GDKJordie a loser that can swat only and also was not a part of us like Vinnie Omari? Also i want to put a note Satan was someone else and not Anthony Ortiz. Dude is a massive fanboy of DBZ… poor but true.
Replying to @SoftChats @WalterBank82289 @TcpSolid @urharmless @para_politics @bx_on_x @h4tsqu1d @Ami_Marisol
How is it possible you couldn’t dox him for 10 years? His opsec isn’t great.
Xereon #R.I.U retweeted
Hey @urharmless aka Greg Steuber: give up, I have unwound a decade of your carefully crafted lies. You are a sociopath. You have lied to the ATF, you have probably lied to DHS and countless other federal agencies.
Twisty, Vox, Jordie, Ben/Jestr, Charles.. 1000s of swattings.
Ladies and gentlemen, this is Nomad.
Remember him? He’s been arrested.
This is a thread on that history.
🚨HUGE ARREST ANNOUNCEMENT🚨
The man we called "Nomad" - an O9A-affiliated violent extremist who plotted to assassinate President Trump, myself, and many others - is officially behind bars.
Lakotah Salvini - aka “IA Nomad” @IceAgeNomad aka “James Washington” aka “Sinistrous” of the former Rapewaffen Division - has been arrested and indicted on federal charges of fraud and impersonating a federal officer.
Nomad first popped up on my radar in early 2024 as I was beginning my investigation into the 764 network and its connection to the Satanic accelerationist cult Order of Nine Angles (O9A).
Nomad weaseled his way into various gun and veteran communities here on X, convincing many that he was a CIA contractor and attempting to recruit them into his fake PMC, Castle International.
From there, he tried to manipulate them to commit crimes, including assassinations, on his behalf with the promise of federal immunity.
I tried like hell to convince the gun and vet communities on X that Nomad was not only a fraud, but a dangerous violent extremist affiliated with O9A. I took a lot of arrows in the process, but cooler heads eventually prevailed, and Nomad was publicly outed.
In retaliation, Nomad, his 764-affiliated associate “Mercury”, and several others embarked on a 2 year long campaign to assassinate me and others who stood in the way of their goals.
Nomad’s crew also acted as pro-Ukrainian and anti-Trump extremists. They recruited for bogus operations in Ukraine, rubbed shoulders with serious foreign neo-Nazi factions, and discussed plans to assassinate President Trump on several occasions.
For 2 years I waited for the feds to finally arrest him so that my family and I could feel safe again.
Nomad was never a "fed" of any sort. In fact, he wasn't even American. He was a Canadian citizen living in the US illegally when he was detained by ICE in August after a strategically placed tip.
From there, the FBI indicted him on one count of Conspiracy to Commit Offense or Defraud the US and one count of Impersonating a Federal Officer.
These charges don't even begin to cover the extent of his crimes or the danger he poses to our country. I am holding out hope that there will be a superseding indictment, but at least now he's in custody.
This entire saga is deserving of a multi-part article, video essay, and honestly a Netflix deal. In the meantime, I will try to outline the major details in the thread.
It's a long story, but I promise it's worth the read. Bust out your popcorn for THE NOMAD FILES.
Xereon #R.I.U retweeted
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer. cfl.re/4iqHaQ1
Xereon #R.I.U retweeted
Hi friends,
1/3 of all websites on the internet are compromised
Do not browse the internet for a few days
Yes really, it's that bad
Readers added context they thought people might want to know
The post misrepresents a PHP vulnerability: servers for up to ~70% of websites may be vulnerable to compromise until patched, with only limited early exploitation attempts reported, not 1/3 already compromised. General browsing need not stop.
krebsonsecurity.com/2026/10/widesp…
washingtonpost.com/technology/202…
wiz.io/blog/php2shell…
Xereon #R.I.U retweeted
Make sure you leave out milk and cookies for your web devs tonight.
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Xereon #R.I.U retweeted
PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619)
Information about two new remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 (CVSS v3.1 10 / 10), has leaked ahead of their coordinated disclosure, and security firm Watchtowr Labs confirmed that the flaws are real. Both vulnerabilities are due to be disclosed on Thursday, October 22, alongside patches. Until those advisories land, no fix is available, which leaves the flaws as zero-days in PHP installations everywhere.There is currently a scheduled release of an advisement and possible patch on Wednesday, October 21 2026 at 14:00 UTC.
Below is a video of a researcher, maybe the original researcher, showcasing the exploits.
#CTI #BlueTeam #ThreatIntel #CVE-2026-109618 #CVE-2026-109619























