Nemesis | Adversarial Exposure Validation retweeted
PHP2Shell just landed and if you would like to test your sites/application/servers what would be the best tool? Nemesis from @Persistent_Psi , of course!
Two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 and CVE-2026-109619) let attackers potentially take over web servers. They affect huge range of PHP versions (widely used by WordPress, Joomla, Laravel, Drupal, etc.). Exploitation reports are already circulating. CloudFlare already see huge increase in traffic with attach/RCE patterns. Is your site/application vulnerable?
@Persistent_Psi Nemesis makes it easy. Atomic for PHP2Shell is already available, you just need to run the safe simulation against your PHP endpoints (servers) and get clear, evidence-based results on exposure, prevention, and detection. No custom exploit work required. Continuous BAS lets you validate patches and controls the same way attackers will probe them. Patch immediately, and then prove it works.
#CyberSecurity #PHP2Shell #BAS #Nemesis #BreachAndAttackSimulation #PHP #InfoSec
Great fun interviewing @marver of @Persistent_Psi and Rob of @goteleport ; for last nights Offensive vs Defensive in the Age of AI
Nemesis | Adversarial Exposure Validation retweeted
Full details of CVE-2025-53773 (RCE via Copilot in VSCode, Visual Studio, and other IDEs..) thanks to @gitlab and in particular @joernchen for the collaboration.
🚨 New RCE in Visual Studio & Copilot (CVE-2025-53773)!
0-Click command execution via prompt injection in READMEs/code comments. AI can alter settings & execute commands, risking CI/CD pipelines.
Patch now!
Full details: persistent-security.net/post…
Nemesis | Adversarial Exposure Validation retweeted
We've released the first breach and attack simulation MCP - Nemesis MCP server integration is here: linkedin.com/pulse/nemesis-a…
Nemesis | Adversarial Exposure Validation retweeted
🙏 The eSIM/eUICC Security Training at @hardwear_io was also a lot of fun for me to hold. I'm happy to have had such a knowledgeable group with a great dynamic!
Nemesis | Adversarial Exposure Validation retweeted
📢 Attention all security engineers, researchers and developers!
Let's uncover the secrets of eSIM along with @marver at #hw_ioNL2024; learn about secure deployment practices, potential attack surfaces, and much more!
Link: hardwear.io/netherlands-2024…
#esim #euicc #securityexperts
Nemesis | Adversarial Exposure Validation retweeted
CVE-2024-30078 Kunlun Lab 👀🔥 msrc.microsoft.com/update-gu…
Nemesis | Adversarial Exposure Validation retweeted
Read about how our @Giutro and Nikos from @Persistent_Psi bypassed @okta Verify "phishing-resistant" features.
persistent-security.net/post…
All your sessions are belong to us 🎣
Nemesis | Adversarial Exposure Validation retweeted
Want to know how to audit large software projects effectively? Eric Sesterhenn and myself will teach what you need to know @nullcon: nullcon.net/berlin-2024/trai…
Nemesis | Adversarial Exposure Validation retweeted
Embedded Threats: A Deep Dive Into The ESIM World
- Markus Vervier
youtu.be/Ka70323Y6aQ
#hacklu @hack_lu
Nemesis | Adversarial Exposure Validation retweeted
Starting off today by celebrating 10 years of ATT&CK! The pioneering minds behind the framework are reuniting for an unforgettable journey through the storied history of ATT&CK. Here's to a decade of innovation! #ATTACKcon4 @stromcoffee @likethecoins @jadefh @esheeslee
Nemesis | Adversarial Exposure Validation retweeted
x41-dsec.de/news/2023/06/07/…
X41 Audited Go TUF
Thanks go out to @OSTIFofficial for sponsoring and coordinating this audit.
Nemesis | Adversarial Exposure Validation retweeted
Check out our most recent audit of go-tuf at this link. It’s not a “tuf” read! ostif.org/go-tuf-on-bugs-ost…
Nemesis | Adversarial Exposure Validation retweeted
The recording of my @offensive_con talk about eSIM is online: Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology
youtu.be/5oecn43xsDg?t=1085
#OffensiveCon23
Nemesis | Adversarial Exposure Validation retweeted
The 2023 @offensive_con was a blast as usual, amazing people, organization, and vibe! Thank you @yubiguel, @LukasHermannBFS, and their whole team for pulling this off!
Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology by @marver now #OffensiveCon23
Nemesis | Adversarial Exposure Validation retweeted
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key for GitHub.com. Read more here: github.blog/2023-03-23-we-up…
Nemesis | Adversarial Exposure Validation retweeted
BREAKING: Thousands of computer servers around the world have been targeted by a ransomware hacking attack, Italy's National Cybersecurity Agency said - Reuters
Nemesis | Adversarial Exposure Validation retweeted
Italy sounds alarm on large-scale computer hacking attack reut.rs/3Y7pUDJ
























