Appsec and cloudsec crazy, CEO & founder and @sec_phoenix and @nsc42ltd board of @csaukchapter London host of @podcast_cyber
London, England
Joined September 2018
- Tweets19.5K
- Following1.6K
- Followers5.7K
- Likes25.8K
Pinned Tweet
Check out this great conversation: Chris romeo live no teapawt.net/i/broadcasts/1BdxYrROW…
Say what you want but #starlink rocks. Had super fast connection for 10h straight no problem from London to Austin
HTTP2SHELL - Broccoli2Shell is still complex and still widespread. Track the vulnerable versions here phoenix.security/http2shell-…
Live tracker: http2shell.pplx.app
#http2shell #python2shell #node2shell
Change my mind : 3rd party dependency is a cost of token that needs to be factor in automation
Scan your plan and do threat modelling
Scan your implementation for security
We had corners we cut for years now the tolerance bar has hit 0. This cost need to be factor in and avoiding oss and library is naive tbh
Fight me
#ai #Vulnerability #llm #oss
One potential outcome of the vulnpocalypse is that companies decide the cost (in risk, dollars, and engineering hours) of OSS dependencies is too high. Vulnerability management isn’t cheap or glamorous, and it’s unlikely that you need all of the attack surface you inherit with these packages. All of the small packages from the many transitive dependencies you inherit present supply chain risk that likely outweighs whatever value you’re getting from that few hundred lines of code.
The cost of the tokens to rewrite the fraction of that code you need, and maintaining it as 1p code, will eventually be lower than the continued cost of dependency management.
This will improve security, but would have negative consequences for the OSS ecosystem.
Post exploitation incident - litellm
We have completed our investigation into the attack chain behind the v1.107.0 release. Read it here: docs.litellm.ai/blog/securit…
Francesco Cipollone🔥Appsec and ☁️ Cloudsec 🐒 retweeted
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
This is genuinely a different report! And beautiful to look at #php2shell
Do you know who illustrated the comic on calif.io/php2shell?
Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax.
This artist-hacker couple has the best story, stay tuned!
A potentially “weaponized” PHP RCE exploit is circulating today—see below for a breakdown. Before you run it: don’t. A bundle is circulating that claims a full chain for the two embargoed PHP core flaws — CVE-2026-109618 and CVE-2026-109619.
Don't get me wrong, we have a campaign and are looking at remediation action asap this is bad, is internet-exposed, and is easy when it drops.
#php2rce #vulnerability #exploit #writeup #cybersecurity #PHP #PHP2Shell
🤖 Made with AI
Link to the analysis phoenix.security/php-core-rc…
#php2rce #vulnerability #exploit #writeup #cybersecurity #PHP #PHP2Shell
Link ot the original exploit teapawt.net/J4ck3LSyN/status/21127…
... get it while its hot... 😈
> CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x)
> session.upload_progress UAF
> jackalsyn.com/posts/php-up-2…
> Courtesy of Me, @acd421 & @Archknight23
#CyberSecurity #infosec #php2shell #php
There are inconsistencies here as well. Another potential rce
... get it while its hot... 😈
> CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x)
> session.upload_progress UAF
> jackalsyn.com/posts/php-up-2…
> Courtesy of Me, @acd421 & @Archknight23
#CyberSecurity #infosec #php2shell #php