₿itcoiner, Mid-level Engineer & Building AI & Robotic Labs #npub1c8l997847szpt6prwug6usmfl48v7afun9d4zt6f5xexhrdps45sctmg0w
World
Joined July 2016
- Tweets125K
- Following5.5K
- Followers4.4K
- Likes197K
Pinned Tweet
In the next 10 years you’ll need to know how works with AI, robotic and computer quantum. Everything will work together
R-Sync 同期🦀🗿 retweeted
🚨 CYBERSECURITY ALERT - OCT 21, 2026
Multiple security issues confirmed:
🔴 eMudhra: 8 intermediate CA private keys compromised.
🔴 PHP: Two critical unauthenticated RCE vulnerabilities disclosed.
🔴 Node.js: Multiple security fixes released, including a high-severity Brotli RCE.
🔴 LiteLLM: PyPI v1.107.0 compromised with credential-stealing malware.
⚠️ Action: Patch affected systems, investigate potential exposure, and rotate secrets if compromise is suspected.
Verify. Patch. Protect. 🔐
🚨 THE INTERNET BROKE TODAY 🚨
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police 🇮🇳ALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server ♻️
#CyberSecurity #DataBreach #India #php2shell
R-Sync 同期🦀🗿 retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
R-Sync 同期🦀🗿 retweeted
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
R-Sync 同期🦀🗿 retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
R-Sync 同期🦀🗿 retweeted
So literally the entire internet is on fire because of incompetence
An Indian infosec certificate password was literally just the number "4"
And now a PHP issue going around.. wtf man
Now a lot of huge sites are having to go offline for security reasons
R-Sync 同期🦀🗿 retweeted
We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security thephp.foundation/blog/2026/…
R-Sync 同期🦀🗿 retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
R-Sync 同期🦀🗿 retweeted
Steam store is having some issues right now.
Some users are reporting problems with logging in, purchases and downloading updates, while Steam itself is still online for many users.
It doesn’t look like a complete global outage, but some Steam services are clearly having problems.
R-Sync 同期🦀🗿 retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
R-Sync 同期🦀🗿 retweeted
JUST IN - Google says its Gemini 4 Argon AI model helped discover and mitigate critical security flaws in PHP.
RT @Pirat_Nation: 4chan appears to be back online after today’s outage.
The site had restricted posting and other features while dealing w…
R-Sync 同期🦀🗿 retweeted
CRITICAL BUG IN PHP AFFECTS AS MANY AS 70% OF THE WORLD'S WEBSITES, COMPANY SAYS
PHP IS USED BY WORDPRESS AND MANY GOVERNMENT AND E-COMMERCE WEBSITES
BUG WAS FOUND USING AI, SECURITY RESEARCHERS SAY
PATCH WAS PUSHED A DAY EARLY AFTER DETAILS LEAKED OUT
R-Sync 同期🦀🗿 retweeted
‼️BREAKING: PHP has released its fix for the two leaked flaws, which can let attackers run code on servers without logging in.
"There are no complete mitigations, updating is the only safe choice," PHP says.
Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.
PHP says Apache with mod_php is most at risk, with a demonstrated exploit that fires before any application code runs.
PHP 8.1 and older get no official update, though PHP has published source backports for 7.4, 8.0 and 8.1.
R-Sync 同期🦀🗿 retweeted
URGENT - Millions of PHP websites could soon be vulnerable unless patched immediately. System admins worldwide are on high alert.
R-Sync 同期🦀🗿 retweeted
Our YouTube channel is back! 🧡
Thank you to @TeamYouTube for the second review, and to everyone who helped spread the word.
More keynotes and panels are coming: youtube.com/@thebitcoinconfe…
YouTube has banned The Bitcoin Conference channel.
All our channel does is post keynotes and panels from the largest Bitcoin conference in the world, bringing Bitcoin education to the masses.
Please reinstate our channel.
@YouTube @TeamYouTube
