@moton

a.k.a Matt has been the director of hacker events at https://xitter.cf/t.co/3vdsrhrFtr since 2006. https://xitter.cf/t.co/3znz9NUcCa

Joined October 2007
  • Tweets26.5K
  • Following604
  • Followers758
181Media
Kali Linux 2026.3 released with 6 new tools, desktop updates - bleepingcomputer.com/news/li…

Kali Linux 2026.3 released with 6 new tools, desktop updates

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more.

bleepingcomputer.com
1
38
ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security - industrialcyber.co/sbom/enis…

ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain...

ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security.

industrialcyber.co
20
PHP Publishes Mitigation Advice for New RCE Flaw - Infosecurity Magazine - infosecurity-magazine.com/ne…

PHP Publishes Mitigation Advice for New RCE Flaw

PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected

infosecurity-magazine.com
36
PHP2Shell security flaws now sucessfully exploited in the wild - bleepingcomputer.com/news/se…

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.

bleepingcomputer.com
37
FortiSIEM Vulnerability Exploited in the Wild After PoC - securityonline.info/fortisie…

FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public

TL;DR Canada’s Cyber Centre updated its Fortinet advisory on October 23, 2026, to warn that CVE-2026-106173 “is being exploited in the wild.” This FortiSIEM vulnerability, rated …

securityonline.info
36
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog - securityaffairs.com/201609/h…

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Arista VeloCloud Orchestrator vulnerability to its Known Exploited Vulnerabilities catalog.

securityaffairs.com
35
CISA Adds One Known Exploited Vulnerability to Catalog - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
30
CISA Adds One Known Exploited Vulnerability to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
29
PHP shares mitigation for new RCE vulnerability with no patch - bleepingcomputer.com/news/se…

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

bleepingcomputer.com
1
59
PAN-OS PHP2Shell Flaws Hit Firewall Management Interface - securityonline.info/pan-os-p…

Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama

TL;DR Palo Alto Networks confirmed that the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The PAN-OS PHP2Shell risk sits in the mana…

securityonline.info
59
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware - thehackernews.com/2026/10/ph…

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP systems.

thehackernews.com
43
Laravel Authentication Bypass PoC Targets TokenGuard - securityonline.info/laravel-…

Laravel Authentication Bypass PoC Released for Critical TokenGuard Flaw CVE-2026-114509

TL;DR Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical Laravel authentication bypass in the built-in TokenGuard. The flaw, rated CVSS 9.2, lets an unauthentica…

securityonline.info
1
1
122
FortiSIEM Vulnerability PoC Enables Remote Code Execution - securityonline.info/fortisie…

FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw

TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…

securityonline.info
67
VU#763488 - Memory corruption vulnerabilities in PHP - kb.cert.org/vuls/id/763488

CERT/CC Vulnerability Note VU#763488

Memory corruption vulnerabilities in PHP

kb.cert.org
36
VeloCloud Orchestrator Vulnerability Exploited in the Wild - securityonline.info/veloclou…

Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild

TL;DR Arista says attackers are actively exploiting CVE-2026-114625, a critical VeloCloud Orchestrator vulnerability rated CVSS 9.9. The SQL injection flaw lets any logged-in user gain “supe…

securityonline.info
46
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - Help Net Security - helpnetsecurity.com/2026/10/…

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - Help Net Security

earchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619.

helpnetsecurity.com
1
63
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed - thehackernews.com/2026/10/so…

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were released.

thehackernews.com
50
Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released - gbhackers.com/php-vulnerabil…

Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released

The detected exploitation attempts targeting two critical PHP vulnerabilities on October 17, 2026, four days before their public disclosure and security updates.

gbhackers.com
33
PHP2Shell Exploited: Remote Code Execution PoC Is Public - securityonline.info/php2shel…

PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public

TL;DR Attackers are now exploiting PHP2Shell, a pair of critical PHP remote code execution flaws tracked as CVE-2026-109618 and CVE-2026-109619. Amazon saw the first attempt on October 17, four da…

securityonline.info
78
QPACK Amplification Attack PoC Hits HTTP/3 Servers - securityonline.info/qpack-am…

PoC and Full Details Released for QPACK Amplification Attack That Crashes HTTP/3 Servers

TL;DR On October 20, 2026, FoxIO published full details and proof-of-concept code for “Header Accordions,” a QPACK amplification attack against HTTP/3 servers. A remote, unauthenticate…

securityonline.info
35
Load more