Before applying @Windows hardening changes, create a System Restore Point. Bastion includes a menu option for this and a Dry Run so you can see exactly what will change.
Open source tools that keep data local and give the user final control are useful for both personal PCs and small teams. Bastion and Rampart are both GPLv3 for that reason.
Operation Locked In retweeted
The new RCE involving PHP is hard to exploit, lots of fake info and videos out there pretending they've been successful. With that said the threat is real it just requires a complex chain of attacks with certain conditions for it to work.
Even if you patched this week do the following:
Bastion Hardening Framework and Rampart give you selective, previewable tools for a personal Windows PC and a read-only look at a public hostname you control. Both are free under GPLv3, keep data local, and leave the final decisions with you.
Operation Locked In retweeted
The person hiring you often has to justify it to someone else. Your website is the evidence they forward.
GET TO WORK.
Congrats on the launch @shcallaway! 30k packages in 4 hours is huge. Love what you're doing for supply chain security.
We build Rampart (external web security/red teaming) there's a really cool "code-to-production" loop between what we both do.
operationlockedin.com/rampar…
This is why @Cloudflare is so important, they act to protect you and your customers from dangerous attacks.
⚠️ Vulnerability alert: php2shell
Unpatched sites running PHP 5.4 or later are at risk of remote code execution, data exposure, and crashes.
If your site’s web traffic is proxied through Cloudflare, we deployed protections before official public disclosure. Check the blog post to see which mitigations are enabled by default.
Even with these mitigations in place, update PHP as soon as possible to fix the underlying vulnerabilities.
xitter.cf/Cloudflare/status/2112…






