Lubomir Cerny

The bug is like a joke. On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

iPhone Jailbreak Gets Past Lockdown Mode and Survives an Update macrumors.com/2026/11/03/iph…

Synology warns of C3RB3R ransomware attacks targeting NAS devices bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Reggae Star Wars is diabolical Who did this? 🤣

‼️ Fortinet Urges Patching Critical Flaws Affecting FortiOS, FortiManager, & FortiAnalyzer Details: cybersecuritynews.com/fortin… Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. The update follows security releases for FortiMail and FortiAuthenticator, extending the patching effort across several key products. Fortinet said its testing program uses advanced AI models to examine code paths, protocol handling, and configuration logic. #cybersecuritynews

Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now

🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches. The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses. Our earlier concerns about PHP session handling remain relevant. We've updated php2shell-protection with additional hardening guidance. #php #cybercurity github.com/syhunt/php2shell-…

Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines. If you run either stack in production, keep an eye on official advisories and apply patches promptly. Security maintenance doesn't stop at your application code. Your runtime matters too. Node.js advisory: nodejs.org/en/blog/vulnerabi…

Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.

🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.

🚨 AnyPS5: An open-source project for automatically porting PS5 executables to Linux and Windows GitHub: github.com/boykopovar/AnyPS5 AnyPS5 converts PS5 executables into formats that can run natively on supported desktop systems, while reimplementing required PS5 system libraries for dynamic linking. Features include: • Automatic executable relinking • Linux and Windows support • SPIR-V shader recompilation • Controller support • Configurable keyboard and mouse input • No separate emulator runtime process The project is focused on interoperability, preservation, research, and compatibility, with a growing list of verified games.

⚠️📢 Hackers manipulated refrigeration-control systems to heat supermarket fridges to 50°C in #France, forcing stores to dump spoiled food stocks. Separate IT outages also hit retailers in the Netherlands and Belgium. Read: hackread.com/hackers-heat-su… #Cybersecurity #Cyberattack

🎬 Blade Runner 2099! To vypadá zcela skvěle youtu.be/AwK5KxoJsvk