Cyber security engineer. #blueteam This account is for kittens, memes, paintins and rants about my country politics. follow me on hmier bsky & cara.
Joined July 2009
- Tweets127K
- Following1.6K
- Followers1.8K
- Likes163K
Helios Mier retweeted
CrowdStrike Intelligence has reproduced variants of remote code execution (RCE) tied to PHP2Shell.
Why hasn't widespread exploitation been confirmed?
Our researchers explain the technical obstacles and what organizations should know: crwdstr.ke/6014BHbC12
Helios Mier retweeted
While responding with an emergency patch to a sudden RCE announcement, you are alerted to a second and third RCE in unrelated platforms you have to patch too.
Helios Mier retweeted
CrowdStrike CAO perspective on the PHP vulnerabilities released this week - at this time, CrowdStrike Counter Adversary Operations has not observed successful exploitation of these vulnerabilities in the wild or within our honeypot environments.
Additionally, we have not identified any fully weaponized exploit, or any POC exploit, sufficient to widely achieve applicable exploitation. Despite the attention PHP2Shell is receiving, only testing, probing, and unsuccessful exploitation attempts have been observed at this time.
These bugs aren’t trivial to exploit, this blog provides a bit of detail on the barrier to entry:
crowdstrike.com/en-us/blog/o…
you know what... fuk this shit up...
there are enough RCEs out there to create the mother of all worms and kill this fuking gibson...
fuk this up, factory reset, reinstall the whole internet.... im tired!
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
Helios Mier retweeted
IMHO, the Brotli bug (think zlib 20 years ago) is a bigger deal than PHP2Shell and all the "oooh, AI found it! AI found it!" hype.
Node2Shell is a terrible name.
I’m calling it Broccoli. 🥦
rofl.... a HTTP::Headers::ActionPack for PERL CVE just posted to seclists
denial of service-resource exhaustion
CVE-2026-113877 seclists.org/oss-sec/2026/q4…
Helios Mier retweeted
Discover a moment of pure, tender affection tucked safely inside the hollow of a rotting tree trunk
Helios Mier retweeted
Real talk I know he’s joking but I hope everyone’s doing okay.
This industry is rough sometimes.
Make sure you go and literally touch grass, look at the sun (not directly you know what I mean)
I think we've discovered another critical vulnerability:
CVE-2026-BURNOUT: AppSec Professional Exhaustion
Severity: Critical (CVSS 10.0)
Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures.
Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends.
Attack vector: Reading security advisories.
Affected versions: All AppSec professionals, regardless of experience.
Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
Helios Mier retweeted
❗️ EU governments backed a GDPR change on Wednesday that would let AI companies use Europeans' personal data without consent.
Privacy group noyb says OpenAI, Google and Meta could tap decades of collected data with almost no limits.
The European Parliament still has to agree.
Helios Mier retweeted
Brotli CVE-2026-111497 goes well beyond Node.js.
Quick search shows unpatched Brotli decoders in Java HTTP stacks, WOFF2 libs, CF workerd.
TLS certificate compression (RFC 8879) is another attack surface worth investigating.
Check statically linked Brotli copies.
Helios Mier retweeted
An update to our threat brief on PHP CVE-2026-109618 & CVE-2026-109619: We observed an attack using agentic AI platforms for rapid post-exploitation and access to MFA secrets within 2 hours. Read the updated brief for analysis and hunting queries: bit.ly/4z7Txr2
