Mike Manrod retweeted
New on LOLRMM: Ping32, an endpoint management suite from NSecsoft with live screen monitoring, screen recording, file backup and software push.
That is everything an attacker wants from a RAT, and they keep using it that way.
github.com/magicsword-io/LOL…
Mike Manrod retweeted
What an event. We can't thank our speakers, sponsors, volunteers, staff, and most importantly our ATTENDEES enough for being able to make this happen. #BSidesPeoria26 was the most incredible, record breaking, amazing event to date. We thank you all from the bottom of our hearts.
Mike Manrod retweeted
Holy moly, congrats @killa !!! 💥
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF).
Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
Mike Manrod retweeted
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF).
Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
Mike Manrod retweeted
You know what I could really use right now?
A new season of severance.
That would heal me.
Mike Manrod retweeted
Dearest Mother,
I write to you from the cold, glowing trenches of the Operations Center, my knuckles weary from the unending cadence of keypresses. The front lines are in total disarray. A dark day has fallen upon the territory: a great vulnpocalypse has breached our defenses, and the enemy marches through unpatched zero-days with relentless malice.
Earlier this morning, Captain Harrison received word that the perimeter firewall had collapsed. A foul exploit, disguised as a harmless web request, swept through our flanks. Before our brigade could deploy the emergency patches, half our domain controllers were captured, their secrets locked behind a cruel ransom note.
The battle rages on multiple fronts. Corporal Jenkins fought valiantly to revoke elevated privileges before he was isolated by a sea of phishing emails, while young Private Miller spent three grueling hours attempting to restore the active directory from a tape backup that was, alas, corrupted six moons ago.
We are low on provisions. The coffee rations have been depleted since mid-day, and the incident response playbook offers little solace against the tide of incoming alerts. Yet, we hold the line. We have severed the external VPN, fortified our remaining subnets with local firewalls, and declared a state of zero trust across the camp.
If the server racks hold through the night, we may yet push back the threat actors and compile a post-mortem report before Sunday break. Give my fondest regards to the neighborhood. Tell them that though the packets fall heavy around us, your son remains uncompromised.
Your faithful servant,
- Captain Tib3rius
Mike Manrod retweeted
Replying to @CroodSolutions
There's been an update!
Mike Manrod retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
Mike Manrod retweeted
VC guys and founders posting profound revelation about cybersecurity strategy
“We need a larger swarm!! We’re at 700 patches per second, but they keep attacking! We need 1200 patches per second!”
Mike Manrod retweeted
If you’re taking cybersecurity advice from someone who posts like this, I have bad news for you: you’re definitely going to get hacked.
Mike Manrod retweeted
The infinite money glitch.
Claim the technology your company is developing is capable of ending cybersecurity, but not before it creates vulnpocolypse.
Mike Manrod retweeted
🚨New 0day inbound, windows2shell🚨
Can compromise any Windows host. Potentially 70% of the internet is affected.
Tweet-able PoC:
cmd.exe/powershell.exe
Can’t be patched
(/S lulz)
Mike Manrod retweeted
Two more EDR killers just landed on LOLDrivers, both from Jehad Abudagga's (@j3h4ck) KillerLand research.
Same BYOVD play: load a signed driver, hand it a PID, and let the kernel terminate the security tools for you.
github.com/redteamfortress/K…
Mike Manrod retweeted
There will be more bugs. There will be more *bad* bugs. Be thankful when we find them before threat actors do because it’s worse when we don’t.
Mike Manrod retweeted
Hey. I just wanted to let you know that plex2shell also came out recently.
zmain.info/blog/plex2shell
Good night.
Mike Manrod retweeted
Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
Mike Manrod retweeted
Sorry folks, we have a confirmed PHP compromise with post-exploit activity. Still not the widespread outbreak we all braced for, but it’s actively exploited in the wild. Updated threat brief:
unit42.paloaltonetworks.com/…




























