Father, aviation modeller, inline skater, IT admin
Joined May 2010
- Tweets6.6K
- Following316
- Followers118
- Likes8.2K
Lubomir Cerny retweeted
‼️‼️ Microsoft’s November 2026 Patch Tuesday fixes a massive 1,235 vulnerabilities, including 66 rated Critical and an actively exploited Microsoft Outlook zero-day.
The Outlook flaw (CVE-2026-124194) can be exploited using malicious message files that trick Windows into connecting to attacker-controlled network locations, leaking NTLMv2 authentication hashes that could be used to impersonate victims.
Of the 66 Critical flaws, 48 are remote code execution vulnerabilities, 15 are privilege escalation flaws, and three are use-after-free bugs in Microsoft Edge.
The massive update follows October's record-breaking 1,411 vulnerabilities.
➡️Full details: bleepingcomputer.com/news/mi…
Lubomir Cerny retweeted
🆕 New CVE
Microsoft Entra Device Registration: privilege escalation in device registration (CVE-2026-109469)
An unauthenticated remote attacker can gain elevated privileges by bypassing authorization checks.
Patch → see advisory
cve.now/CVE-2026-109469?utm_…
Saturnin se představuje. Milé překvapení:
audioteka.com/cz/audiokniha/…
15
Lubomir Cerny retweeted
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html
Lubomir Cerny retweeted
⚠️ Zyxel's earlier security patch failed to block a working exploit.
Researchers confirmed the exploit still allowed unauthenticated root command execution on GS1900 switches running Patch 2, provided the management interface was reachable.
Zyxel has now released Patch 3 for 10 affected models.
Read → thehackernews.com/2026/11/zy…
A helemese…
12
Tohle vypadá jako povedená aplikace jak vysvětlit, kudy a jak tečou data:
protocol-explorer-alpha.verc…
13
Zajímavé:
Cohere's Qwen Story: Looks More Like Model Jaggedness - Check Point Research
research.checkpoint.com/2026…
15
Máte-li Synology, měli byste aktualizovat
Synology warns of C3RB3R ransomware attacks targeting NAS devices
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
19
Lubomir Cerny retweeted
‼️ Linux kernel TCP flaw rated 9.8 CVSS.
Anthropic demonstrated an exploit that runs commands as root on servers using MPTCP.
Ubuntu and RHEL still lack fixes, while Debian, Oracle and others have released patches for some versions.
Details: thehackernews.com/2026/10/li…
Lubomir Cerny retweeted
Microsoft releases emergency .NET patches for critical Brotli flaw
bleepingcomputer.com/news/mi…
bleepingcomputer.com/news/mi…
Lubomir Cerny retweeted
Published our high fidelity scanner for node2shell: github.com/assetnote/node2sh…
Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
Lubomir Cerny retweeted
‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js.
Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability.
Read full details ↓ thehackernews.com/2026/10/br…
Lubomir Cerny retweeted
🚨 Palo Alto Networks warns PAN-OS is affected by PHP2Shell remote code execution flaws
CVE-2026-109618 and CVE-2026-109619 affect the PAN-OS management web interface, including the HTTPS interface and XML API service.
⠀
Affected products include:
• PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2 release trains
• All Panorama versions
• All WildFire WF-500 and WF-500-B appliances
⠀
No special configuration is required, but the risk is highest when the management interface is exposed to the internet.
Palo Alto Networks rates the product impact at CVSS 8.7. PAN-OS hotfixes are expected between October 26 and 30, while dates for Panorama and WildFire appliance fixes remain unconfirmed.
The company is not aware of malicious exploitation targeting its products.
GlobalProtect and Captive Portal are not affected.
Source:
security.paloaltonetworks.co…
To je tedy týden…
‼️ Fortinet Urges Patching Critical Flaws Affecting FortiOS, FortiManager, & FortiAnalyzer
Details: cybersecuritynews.com/fortin…
Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing.
The company said customers should address internet-facing devices first. The update follows security releases for FortiMail and FortiAuthenticator, extending the patching effort across several key products.
Fortinet said its testing program uses advanced AI models to examine code paths, protocol handling, and configuration logic.
#cybersecuritynews
1
76
Lubomir Cerny retweeted
‼️ALERT - Two new unpatched CVSS 9.0 RCE flaws in #Linux's KSMBD SMB server were disclosed on public kernel mailing lists before fixes were ready.
One can be triggered WITHOUT authentication.
Neither has a mainline kernel fix.
Details here ↓ thehackernews.com/2026/10/tw…
Tohle vypadá zajímavě. Přehled zranitelnosti, souhry z více zdrojú, mcp server i rss feed.
Today we're launching cve.now 🚨
Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this?
cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login.
cve.now
3
48
Ouha, záplata nestačí. #jestenenikonec
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches.
The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses.
Our earlier concerns about PHP session handling remain relevant.
We've updated php2shell-protection with additional hardening guidance.
#php #cybercurity
github.com/syhunt/php2shell-…
28