Montessori kid using her chaos monkey energy to manifest security impact
Minneapolis, MN
Joined July 2012
- Tweets8.7K
- Following3.4K
- Followers1.9K
- Likes17.8K
kat traxler retweeted
JUST IN: Japanese tech company GMO Internet calls for government intervention following a major cyberattack that left some users reporting unauthorized financial transactions.
kat traxler retweeted
SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass - khoadha
blog.viettelcybersecurity.co…
kat traxler retweeted
JUST IN: Quest Diagnostics reports a cybersecurity breach potentially exposing sensitive patient records, with the number of affected patients still unknown.
kat traxler retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
kat traxler retweeted
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
github.com/assetnote/php2she…
kat traxler retweeted
AWS SAYS THE EXPLOIT ATTEMPT ORIGINATED FROM AN IP ADDRESS ASSOCIATED WITH A COMMERCIAL ANONYMIZATION NETWORK, AND THAT PHP2SHELL IS NOW BEING BROADLY EXPLOITED IN THE WILD
kat traxler retweeted
The internet is having a very bad cybersecurity day techcrunch.com/2026/10/21/th… via @techcrunch
kat traxler retweeted
PHP2Shell (CVE-2026-109618/109619) hit our MadPot honeypots on Oct 17, four days before disclosure.
Investigating? Start your timeline there, not at the advisory date. Patch to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 now.
aws.amazon.com/blogs/securit…
kat traxler retweeted
Since my posts have been shared here ~30 times in the past few weeks, it seems like I'm going to be contributing to Space Karen's Ketamine Extravaganza whether I like it or not.
I don't really intend to be active here, but I'll post some of the more important cybersecurity-focused stuff, since it gets screenshotted anyway. That way, people don't have to read post a week late and out of context.
kat traxler retweeted
AI tools helped find one of the most severe online bugs ever #php2shell
In our latest episode of Crying Out Cloud, Amitai Cohen sits down with @sagitz_ (Wiz Research) and Thai Duong (@calif_io) to unpack the massive PHP2Shell vulnerability
wiz.io/crying-out-cloud/brea…
kat traxler retweeted
To teach a lesson,
After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again.
A big budget can buy a domain. It shouldn't buy someone else's research credit.
If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve.
Hack the planet. Credit the researchers.
kat traxler retweeted
Until we get confirmation Jira is safe from the PHP vulnerability, I don’t think anyone should be opening tickets or assigning me work.
kat traxler retweeted
CVE-2026-46633: Proving exploitability of Twig sandbox bypass gist.github.com/vladko312/d6…
