Lubomir Cerny (@elcerny) header
Lubomir Cerny (@elcerny) profile picture

Lubomir Cerny

@elcerny

Father, aviation modeller, inline skater, IT admin

lcerny.cz
Joined May 2010
  • Tweets6.6K
  • Following314
  • Followers118
274Media
Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)Photo by Lubomir Cerny (@elcerny)
😳
International Cyber Digest (@IntCyberDigest) profile pictureInternational Cyber Digest
@IntCyberDigest12h
The bug is like a joke. On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
5
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says thehackernews.​com/2026/11/hackers-exploit-patched-apple-flaw-to.​html
Image from The Cyber Security Hub™ (@TheCyberSecHub)
10
8
1,683
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNews20h
⚠️ Zyxel's earlier security patch failed to block a working exploit. Researchers confirmed the exploit still allowed unauthenticated root command execution on GS1900 switches running Patch 2, provided the management interface was reachable. Zyxel has now released Patch 3 for 10 affected models. Read → thehackernews.com/2026/11/zy…
Image from The Hacker News (@TheHackersNews)
8
8
1
29
15,901
A helemese…
MacRumors.com (@MacRumors) profile pictureMacRumors.com
@MacRumorsNov 3
iPhone Jailbreak Gets Past Lockdown Mode and Survives an Update macrumors.com/2026/11/03/iph…
Image from MacRumors.com (@MacRumors)
11
Tohle vypadá jako povedená aplikace jak vysvětlit, kudy a jak tečou data: protocol-explorer-alpha.verc…
Protocol Explorer · Learn how the internet works

Protocol Explorer · Learn how the internet works

Watch the internet work, packet by packet: interactive lessons from DNS and TCP to TLS, with every packet decoded byte by byte.

protocol-explorer-alpha.vercel.app
8
Zajímavé: Cohere's Qwen Story: Looks More Like Model Jaggedness - Check Point Research research.checkpoint.com/2026…

Cohere's Qwen Story: Looks More Like Model Jaggedness - Check Point Research

Key findings On October 26, Cohere reported a puzzling incident involving Qwen3.8-Flash-Next, an open-weight model from Alibaba. The task was straightforward: write a detection rule for suspicious...

research.checkpoint.com
13
Máte-li Synology, měli byste aktualizovat
BleepingComputer (@BleepinComputer) profile pictureBleepingComputer
@BleepinComputerNov 2
Synology warns of C3RB3R ransomware attacks targeting NAS devices bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Synology warns of C3RB3R ransomware attacks targeting NAS devices

Synology warns of C3RB3R ransomware attacks targeting NAS devices

Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks.

bleepingcomputer.com
16
Pobavilo. #prsk
Dripbits (@dripbitsnft) profile pictureDripbits
@dripbitsnftOct 28
Reggae Star Wars is diabolical Who did this? 🤣
8
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 29
‼️ Linux kernel TCP flaw rated 9.8 CVSS. Anthropic demonstrated an exploit that runs commands as root on servers using MPTCP. Ubuntu and RHEL still lack fixes, while Debian, Oracle and others have released patches for some versions. Details: thehackernews.com/2026/10/li…
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.

thehackernews.com
55
325
86
1,315
393,106
Microsoft releases emergency .NET patches for critical Brotli flaw bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…
Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.

bleepingcomputer.com
16
86
8
293
44,634
Lubomir Cerny retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_auOct 25
Published our high fidelity scanner for node2shell: github.com/assetnote/node2sh… Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
GitHub - assetnote/node2shell-scanner: High fidelity detection mechanism for node2shell (CVE-2026...

GitHub - assetnote/node2shell-scanner: High fidelity detection mechanism for node2shell (CVE-2026...

High fidelity detection mechanism for node2shell (CVE-2026-111497) - assetnote/node2shell-scanner

github.com
6
80
2
378
20,272
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 24
‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js. Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability. Read full details ↓ thehackernews.com/2026/10/br…
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.

thehackernews.com
27
131
22
566
89,946
🚨 Palo Alto Networks warns PAN-OS is affected by PHP2Shell remote code execution flaws CVE-2026-109618 and CVE-2026-109619 affect the PAN-OS management web interface, including the HTTPS interface and XML API service. ⠀ Affected products include: • PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2 release trains • All Panorama versions • All WildFire WF-500 and WF-500-B appliances ⠀ No special configuration is required, but the risk is highest when the management interface is exposed to the internet. Palo Alto Networks rates the product impact at CVSS 8.7. PAN-OS hotfixes are expected between October 26 and 30, while dates for Panorama and WildFire appliance fixes remain unconfirmed. The company is not aware of malicious exploitation targeting its products. GlobalProtect and Captive Portal are not affected. Source: security.paloaltonetworks.co…
Image from Dark Web Informer (@DarkWebInformer)
7
108
9
357
39,543
To je tedy týden…
Cyber Security News (@The_Cyber_News) profile pictureCyber Security News
@The_Cyber_NewsOct 22
‼️ Fortinet Urges Patching Critical Flaws Affecting FortiOS, FortiManager, & FortiAnalyzer Details: cybersecuritynews.com/fortin… Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. The update follows security releases for FortiMail and FortiAuthenticator, extending the patching effort across several key products. Fortinet said its testing program uses advanced AI models to examine code paths, protocol handling, and configuration logic. #cybersecuritynews
Image from Cyber Security News (@The_Cyber_News)
1
75
Lubomir Cerny retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNewsOct 22
‼️ALERT - Two new unpatched CVSS 9.0 RCE flaws in #Linux's KSMBD SMB server were disclosed on public kernel mailing lists before fixes were ready. One can be triggered WITHOUT authentication. Neither has a mainline kernel fix. Details here ↓ thehackernews.com/2026/10/tw…
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline fix.

thehackernews.com
37
235
70
1,195
137,085
Tohle vypadá zajímavě. Přehled zranitelnosti, souhry z více zdrojú, mcp server i rss feed.
Sherwood (@shcallaway) profile pictureSherwood
@shcallawayOct 22
Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now
Image from Sherwood (@shcallaway)
3
47
Ouha, záplata nestačí. #jestenenikonec
Felipe Daragon (@FelipeDaragon) profile pictureFelipe Daragon
@FelipeDaragonOct 22
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches. The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses. Our earlier concerns about PHP session handling remain relevant. We've updated php2shell-protection with additional hardening guidance. #php #cybercurity github.com/syhunt/php2shell-…
GitHub - syhunt/php2shell-protection: Defensive mitigation and testing toolkit for PHP security...

GitHub - syhunt/php2shell-protection: Defensive mitigation and testing toolkit for PHP security...

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance - syhunt/php2s...

github.com
27
To je den...
Mike Kipruto (@itsMikeKipruto) profile pictureMike Kipruto
@itsMikeKiprutoOct 21
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines. If you run either stack in production, keep an eye on official advisories and apply patches promptly. Security maintenance doesn't stop at your application code. Your runtime matters too. Node.js advisory: nodejs.org/en/blog/vulnerabi…
Node.js — Wednesday, October 21, 2026 Security Releases

Node.js — Wednesday, October 21, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org
2
63
Ouha. Máte-li někde něco na PHP, bude veselo ☝️
Florian Roth ⚡️ (@cyb3rops) profile pictureFlorian Roth ⚡️
@cyb3ropsOct 20
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
Image from Florian Roth ⚡️ (@cyb3rops)
34
F5 releases out-of-band patches for critical NGINX vulnerabilities bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.

bleepingcomputer.com
4
44
1
119
19,683
Load more