Father of 6 Air Force Veteran Cyber to Science 3D+Science Interests Grad Student Aerospace Science 2029 ISC² CISSP Certified ISACA AAISM Certified
Joined June 2025
- Tweets1.3K
- Following509
- Followers103
- Likes937
More will come for my #30DaysOfDot challenge. Its almost coming to an end and #Dot is hurrying. This was the last project. I was mostly hands off just keeping an eye if it needed my attention.
The random workspace reboots are annoying. A proper logging setup and scrum fixed it right up.
Henri retweeted
Discord is about to put your public messages on Google
Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December.
The feature is ON by default in most regions, but you can opt out:
User Settings → Data & Privacy → turn off “Show my message content from Discoverable channels on web pages.”
In the EU, UK, Canada, Brazil, Australia and South Korea, it will be OFF by default.
Private servers, DMs and group DMs are not included. Usernames and avatars won’t appear alongside indexed messages.
Henri retweeted
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
Oh my
#CyberSecurity
Henri retweeted
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
Henri retweeted
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers.
Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began.
A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
A PLC, robot controller, rover computer, satellite subsystem, or industrial control node is not just another server.
A compromised command can change speed, pressure, temperature, position, force, or timing. The official documents establish the policy and threat context. AI-assisted cyber capability is reducing the distance between a software exploit and a physical consequence.
The next step is to add security controls to the simulation work. Robot assets and learned policies need provenance and integrity checks. Commands need authentication, authorization, bounds, and freshness.
Telemetry needs integrity and replay resistance. Sensors need consistency checks against spoofing or impossible state. Controllers need safe-state behavior, recovery paths, and an operator override that is tested rather than assumed.
henrialfonso.com will soon provide some guidance and services sorry for the wait.
Henri retweeted
🌕 Happening now! The largest consortium in the U.S. dedicated solely to lunar surface technology development is about to convene. 🚀 Learn from NASA, academic, and private sector experts about why this tech is critical for humanity’s first Moon Base and how we’re collaborating to bring it to life! 👩🚀
@JHUAPL @GeorgiaTech @NASAMoonBase
go.nasa.gov/4zz0VvB
