mopman retweeted
Hello everyone! I know this is not LinkedIn, but I'm searching for an offensive security position worldwide. I have found and exploited many vulnerabilties in the latest years.
You can read about my work at berardinellidaniele.com
Remember when everyone talked about abolishing ICE and the pearls were clutched over how they're definitely a very important and serious organisation that the mere suggestion of dissolving is unthinkable because of how important and serious they are
Anyway "fake and gay"
Fake & Gay!
Moussa Diawara, the Malian national featured in this shockingly poorly researched @60Minutes report, now faces allegations of immigration FRAUD after his asylum application surfaced, revealing that he claimed to be a HOMOSEXUAL man who feared persecution in Mali.
Read more ⬇️
Basically media literacy lesson: anytime a headline says "x .. after y" enquire as to why they didn't say "because y"
It strikes me that advertising "abliterated model inference services" is probably a good way to get a bunch of people to feed you unpatched vulnerability intel over an api
GLM refusals are funny because it will start having full on debates with you about the ethics of what you're doing, including whether the extent of weaponisation is necessary for that specific bug class
It's so much more entertaining than just :cyber:
Honestly I don't really care what Joe Tidy knew about web development when the people throwing the shade are responsible for environments that were running PHP 5/7 in 2026
mopman retweeted
OK, serious question. About 2/3 of our customers are on PHP 7.3, one is on 5.6 (all on Windows, Apache 2.4, PHP started as a Fastcgi process, not Apache module). They can't install the latest PHP. We've done the recommended PHP settings mitigations, but they are not enough.
I feel like 'attempts' is covering a wide variety of activity here
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
CVE-2026-109618 / CVE-2026-109619 Mass-Exploitation Mitigation #php2shell
In fix.php:
header("X-Powered-By: Express");
In .htaccess
php_value auto_prepend_file "fix.php"
Make sure expose_php = Off in php.ini
Then have a beer
Must admit I've had a lot of burnout lately, if AI is going to replace security practice etc. The Stargate SG1 line where the superintelligence forgets how to be creative, humans are still important never really rung true for me
But all this PHP slop really brought me back, thx