CEO & Co-founder of Ballistix
Austin Metro Area
Joined February 2010
- Tweets37
- Following23
- Followers94
- Likes29
The NSA told anyone who can't patch PHP2Shell right away to take their systems offline.
PHP runs 70% of all websites.
Taking the internet offline is not an acceptable mitigation. Not in 2026. Not ever.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
The bug sat in the PHP engine for 14 years. Frontier models found it in weeks. Exploit attempts started four days before disclosure.
Brace yourself. Branded vulnerabilities are coming faster.
Patching alone can't keep up. This is why we're building Ballistix: protection hooks deployed in minutes, so you patch at your own speed.
Full post: medium.com/p/2dfafac5e415
Geva Solomonovich retweeted
Snyk is excited to partner with @TrendMicro to deliver comprehensive detection of vulnerabilities for teams operating in #DevOps environment. Check out today's news: buff.ly/30Y3V3K. #containers #opensource
Geva Solomonovich retweeted
Whats So Strategic About the Trend Micro and Snyk Partnership? ift.tt/2OuabxJ ift.tt/eA8V8J
Geva Solomonovich retweeted
Keep your code secure with tools from GitHub and GitHub Marketplace, like @snyksec.
Don’t just take it from us—the Snyk team shared advice on how to make better security decisions, no matter the scale.
github.co/2JPQbTz
Amazing development for both the @devseccon community and for @snyksec !
*ANNOUNCEMENT* Snyk has acquired @DevSecCon, the world’s premier conference dedicated to DevSecOps
buff.ly/2y90Dia
Geva Solomonovich retweeted
My first @pivotal blog dropped today. Many thanks to @springrod and @Gevasolo for providing technical peer review on this exciting topic! @snyksec and @atomist represent a powerful, new software solution segment. They are "code robots". ow.ly/HFQp30nRmux
Geva Solomonovich retweeted
Our very own COO @gevasolo on the #AGCPartners “Digital Transformation’s Impact on Security” panel #RSAC
Geva Solomonovich retweeted
We're hiring talented developers in Tel-Aviv and London, to help us bring Snyk’s approach to security into the containers world.
Interested in containers? passionate about security? know someone who might be? Please help spread the word!
boards.greenhouse.io/snyk/jo…
Great to hear @edsim @boldstartvc on @saastr w/ @HarryStebbings loved the discussion on how product should dictate target market of SMB vs enterprise and could not agree more on the importance of the investor base helping with enterprise relationships! bit.ly/tospwhs
Geva Solomonovich retweeted
[Blog] "Comparing NPM audit with Snyk" by @nearForm
"Snyk offers substantially more functionality with a more friendly user interface"
buff.ly/2OIzMQf
Geva Solomonovich retweeted
** URGENT SECURITY WARNING ** Please share.
Today, version 3.7.2 of eslint-scope (github.com/eslint/eslint-sco…) was found to contain malicious code that steals your NPM credentials. Take action now if you are using version 3.7.2.
Snyk DB entry: snyk.io/vuln/npm:eslint-scop…
Geva Solomonovich retweeted
Leveraging @snyksec & #JFrogXray integration to prevent #vulnerabilities , find vulnerabilities earlier in the life cycle, take immediate action with automated remediation by @Gevasolo & @sjmaple #swampUP #DevSecOps – at Napa, CA
Geva Solomonovich retweeted
Yeh, we always *knew* we were cool, but now it's official! Snyk Named a 2018 Gartner Cool Vendor in Application and Data Security. buff.ly/2IkFwwP
Geva Solomonovich retweeted
.@snyksec - Fix vulnerabilities in Node & npm dependencies with a click bit.ly/2GCfHe7