@moton

a.k.a Matt has been the director of hacker events at https://xitter.cf/t.co/3vdsrhrFtr since 2006. https://xitter.cf/t.co/3znz9NUcCa

Joined October 2007
  • Tweets26.5K
  • Following604
  • Followers757
181Media
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog - securityaffairs.com/201609/h…

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Arista VeloCloud Orchestrator vulnerability to its Known Exploited Vulnerabilities catalog.

securityaffairs.com
6
CISA Adds One Known Exploited Vulnerability to Catalog - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
24
CISA Adds One Known Exploited Vulnerability to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
24
PHP shares mitigation for new RCE vulnerability with no patch - bleepingcomputer.com/news/se…

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

bleepingcomputer.com
50
PAN-OS PHP2Shell Flaws Hit Firewall Management Interface - securityonline.info/pan-os-p…

Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama

TL;DR Palo Alto Networks confirmed that the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The PAN-OS PHP2Shell risk sits in the mana…

securityonline.info
54
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware - thehackernews.com/2026/10/ph…

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP systems.

thehackernews.com
42
Laravel Authentication Bypass PoC Targets TokenGuard - securityonline.info/laravel-…

Laravel Authentication Bypass PoC Released for Critical TokenGuard Flaw CVE-2026-114509

TL;DR Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical Laravel authentication bypass in the built-in TokenGuard. The flaw, rated CVSS 9.2, lets an unauthentica…

securityonline.info
1
1
115
FortiSIEM Vulnerability PoC Enables Remote Code Execution - securityonline.info/fortisie…

FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw

TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…

securityonline.info
60
VU#763488 - Memory corruption vulnerabilities in PHP - kb.cert.org/vuls/id/763488

CERT/CC Vulnerability Note VU#763488

Memory corruption vulnerabilities in PHP

kb.cert.org
36
VeloCloud Orchestrator Vulnerability Exploited in the Wild - securityonline.info/veloclou…

Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild

TL;DR Arista says attackers are actively exploiting CVE-2026-114625, a critical VeloCloud Orchestrator vulnerability rated CVSS 9.9. The SQL injection flaw lets any logged-in user gain “supe…

securityonline.info
45
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - Help Net Security - helpnetsecurity.com/2026/10/…

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - Help Net Security

earchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619.

helpnetsecurity.com
1
62
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed - thehackernews.com/2026/10/so…

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were released.

thehackernews.com
50
Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released - gbhackers.com/php-vulnerabil…

Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released

The detected exploitation attempts targeting two critical PHP vulnerabilities on October 17, 2026, four days before their public disclosure and security updates.

gbhackers.com
33
PHP2Shell Exploited: Remote Code Execution PoC Is Public - securityonline.info/php2shel…

PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public

TL;DR Attackers are now exploiting PHP2Shell, a pair of critical PHP remote code execution flaws tracked as CVE-2026-109618 and CVE-2026-109619. Amazon saw the first attempt on October 17, four da…

securityonline.info
77
QPACK Amplification Attack PoC Hits HTTP/3 Servers - securityonline.info/qpack-am…

PoC and Full Details Released for QPACK Amplification Attack That Crashes HTTP/3 Servers

TL;DR On October 20, 2026, FoxIO published full details and proof-of-concept code for “Header Accordions,” a QPACK amplification attack against HTTP/3 servers. A remote, unauthenticate…

securityonline.info
31
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog - microsoft.com/en-us/security…

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Micros...

Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.

microsoft.com
71
php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable® - tenable.com/blog/php2shell-c…

php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

Two critical PHP vulnerabilities could lead to unauthenticated remote code execution. Patches are available for supported PHP 8.x branches.

tenable.com
84
CISA: SafePay ransomware hit over 600 critical infrastructure orgs - bleepingcomputer.com/news/se…

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.

bleepingcomputer.com
30
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected - bleepingcomputer.com/news/se…

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.

bleepingcomputer.com
50
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws - thehackernews.com/2026/10/ci…

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

CISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and proxy malware.

thehackernews.com
56
Load more