@Cyburgerim

Cyber. Trends. Research. Product. Nonsense. Co-Founder & CEO @ Stealth.

linkedin.com/in/elad-erez/
Joined October 2022
  • Tweets6.6K
  • Following392
  • Followers4.4K
1.2KMedia

The Patchless Window

Article · @Cyburgerim
2
3
2
27
5,985
Cyburger retweeted
Cyburger
@Cyburgerim17h
Replying to @nikesharora
Love this! Finding vulnerabilities is becoming a game of speed. The main question today is which arrives first: the exploit or the protection. xitter.cf/Cyburgerim/status/2114…
Cyburger
@CyburgerimOct 24

Zero Vulnerabilities Is Not Zero Exposure

Article · @Cyburgerim
1
5
1,307

Zero Vulnerabilities Is Not Zero Exposure

Article · @Cyburgerim
2
1
19
3,512
Yes
NIK
@ns123abcOct 22
OpenAI CEO Sam Altman: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs." It's over.
2
4
1,326
Too much AI slop with PHP2Shell exploits, so decided to create the ultimate one. Please use for research purposes only!!!
8
41
5,862
Follow for more AI exploit slop
2
734
אחלה כתבה! מתזכר למטה בשרשור עם רשימה מעולה (וחלקית) של מנכ״ליות-מייסדות ישראליות בסייבר 🙌 ובנימה אישית, מגייס אלינו גם חוקרות ומפתחות סייבר מצוינות, אשמח מאוד מאוד מאוד, DM פתוח.
Cyburger
@Cyburgerim15 May 2023
"אין מנכ"ליות-מייסדות ישראליות בסייבר" 💀 אז לַבּוּר שזרק את ההערה + שני ליצנים נוספים ששמם Bard ו- ChatGPT: משרשר כאן רשימה חלקית של חברות סייבר ישראליות (/בייס ישראלי), עם מנכ"לית-מייסדת 🤹‍♀️🇮🇱🛡️ 🧵
1
32
3,054
2
1
63
2,355
Here we go again 😭
Nicolas Krassas
@DinosnOct 21
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
Unvalidated AI output (author admits in replies: omp with glm5.3 + ds4), not a lab result. Its screenshot says both CVEs are fixed; the 'surviving paths' need unserialize() of attacker data or an app LFI. Patch per php.net: php.net/archive/2026.p…
4
12
1,713
CVE-2026-109618 & CVE-2026-109619 both have the potential to be 2026's Log4j.
Florian Roth ⚡️
@cyb3ropsOct 20
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
1
1
8
1,671
Two potential critical PHP RCE CVEs upcoming ⚠️ But hey, at least it's not the weekend!
mRr3b00t
@UK_Daniel_CardOct 20
CVE-2026-109618 CVE-2026-109619 PHP vulnerability
1
10
1,828
The deals behind the deal. Great visual by Matthew Ball, @OmdiaHQ.
https://www.linkedin.com/posts/matthewball2_proofpoints-63bn-deal-for-varonis-is-as-share-7517214029866508288-ehfS/

ALT https://www.linkedin.com/posts/matthewball2_proofpoints-63bn-deal-for-varonis-is-as-share-7517214029866508288-ehfS/

Cyburger
@CyburgerimOct 15
Proofpoint 🤝 Varonis · $6.3B
1
7
2,157
Shall we talk about CVE IDs?
BleepingComputer
@BleepinComputerOct 15
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.

bleepingcomputer.com
4
1,130
Proofpoint 🤝 Varonis · $6.3B
Cyburger
@Cyburgerim5 Jun 2025
את מי TB יקנו בארץ? 🤔 - נכסים: 75 חברות, 93K עובדים, $30B הכנסות שנתיות - בסייבר: שווי אחזקות $60B~ (טופ5 אם היו נסחרים) - רכישת הסייבר הכי גדולה: Proofpoint $12.3B - רכישת הסייבר בארץ: Imperva $2.1B עם תקציב של עד $10B - איזו חברת סייבר תירכש? (IL/US)
4
1
22
5,047
xitter.cf/Cyburgerim/status/2095…
Cyburger
@CyburgerimSep 3
למתעניינים בהיגיון שמועת ה Proofpoint/Varonis מהלילה, שווה לקרוא את הלוגיקה שהובילה ל Proofpoint/Hornet ב$1B לפני שנתיים + כמובן דריסת רגל ענקית בData Security. עשויים להיות חברה בטופ5 מבחינת ARR בסייבר עם מעל $3B. ניחוחות של הנפקה?
2
384
Cyber & Burger?? 🫨
3
68
2,714
תארגנו לי קולאב דחוף
1
4
299
So, vulnpocalypse or not vulnpocalypse?
CNBC
@CNBCOct 14
Bank of America hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos cnbc.com/2026/10/14/anthropi…

Bank of America hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos

Bank of America hired 1,000 contractors to patch software flaws exposed by Anthropic’s Mythos, offering a rare look at costs involved in defending against AI.

cnbc.com
5
1
14
2,940
Serious question: what does Common even mean today when exploit generation is possible weeks before the CVE?
Cyburger
@CyburgerimOct 13

The Patchless Window

Article · @Cyburgerim
1
1
4
1,184
Replying to @Cyburgerim
Perfect Part 2 to my medium.com/anton-on-security… :-)

Rethinking Vulnerability Management: “If It’s Not in the Scanner, It Didn’t Happen” Needs to Go

Recently, somebody from a fairly mature security team told me something I did not want to hear: if software vendors run “Mythos-class”…

medium.com
2
1
3
642
Load more