Cesar Chavez Martinez retweeted
A developer left a PHP server vulnerable to the new PHP2Shell flaws and put a Bitcoin key on it, challenging hackers to steal the funds.
After around 19 hours, a researcher known as KillaBoi successfully exploited the vulnerability and extracted the private key.
The wallet contained around $2,000, but the key turned out to be linked to the wrong wallet, so the funds couldn’t actually be taken.
The dev still confirmed the exploit worked and paid the researcher the prize.
Cesar Chavez Martinez retweeted
UPDATE: UNIT 42 RETRACTS PHP2SHELL EXPLOITATION UPDATE
Unit 42 has retracted its Oct 23 update that tied a European government intrusion to PHP2Shell (CVE-2026-109618 / CVE-2026-109619). It says it is unable to confirm that initial access was associated with those CVEs.
The CVEs remain critical unauthenticated RCE (CVSS 9.2). Patching guidance and the ~22.6M exposed-instance figure still stand. Our Oct 24 “UNIT 42 CONFIRMS…” post is superseded by this correction.
unit42.paloaltonetworks.com/…
#DDW #PHP2Shell #Unit42 #CyberSecurity #ThreatIntelligence
Cesar Chavez Martinez retweeted
❗️ A bug in Microsoft Authenticator let an Android app with zero permissions pose as Teams and steal a user's work-account tokens.
In Enclave's tests, the tokens opened the victim's mailbox, files and calendar with no prompt.
Microsoft fixed it in July as CVE-2026-80097.
Cesar Chavez Martinez retweeted
Hay un tendal de personas que han perdido acceso a su WhatsApp. No es un "hackeo", mucho menos una "clonación", hasta hoy hallé 3 vectores:
1) SIM Swapping o transferencia fraudulenta de titularidad del chip de la víctima al victimario. Hablar con la telefónica, denuncia policial
Lamento informar la venta de supuesta información correspondiente al Ministerio de Educación del Peru, documentación actualizada a Noviembre 2026, base de datos, usuarios, y otros relaciones a procesos internos. Esto se viene desarrollando por el foro de actores de amenazas (DF) – at Carmen de la Legua Reynoso, Peru
Cesar Chavez Martinez retweeted
面白いサイトが現れた。
例のPHPの脆弱性「php2shell」、実際に完全なRCEまで辿り着いて悪用している例が少なすぎて「わざと脆弱なまま放置したよ！自由に乗っ取ってね、30万円分のBitcoinウォレットも置いときます」という挑発サイトが爆誕
stealmybitcoin.com/
Hola @grok encuentra comentarios que emplean mi nick o imágenes capturadas de mi perfil o post – at San Borja, Peru
Cesar Chavez Martinez retweeted
WATCH: Migrant Uber Eats delivery workers in France are using multiple phones to reject low-paying orders, forcing the app’s algorithm to raise delivery offers to €15 or more.
Cesar Chavez Martinez retweeted
Security Alert: U.S. Mission Saudi Arabia (October 25, 2026)
Effective October 23, 2026, the Department of State ordered non-emergency U.S. government employees and U.S. government employee family members to leave Saudi Arabia due to safety risks.
Iranian-supported Houthis have engaged in hostilities against Saudi Arabia, including attacks on civilian airports and other critical infrastructure resulting in civilian casualties and severe travel disruptions. The hostilities have the potential to escalate rapidly beyond that immediate area.
U.S. government employees working in Saudi Arabia require special authorization from Chief of Mission to use any airport in Saudi Arabia following recent missile and UAV attacks on airports in the Kingdom.
King Khalid International Airport (RUH) in Riyadh announced a partial reopening as of October 25 for domestic flights and some international flights operated by national carriers. A limited number of flights normally based at RUH are operating out of Qassim-based Prince Naif bin Abdulaziz International Airport (ELQ).
Operations at King Abdulaziz International Airport in Jeddah (JED) are operational with some delays and cancellations.
Operations at King Fahd International Airport in Dammam (DMM) are operational with some delays and cancellations.
U.S. citizens should be aware of potential attacks on airports, airspace closures, flight cancellations, and travel disruptions. Please take extreme caution if you choose to use airports in Saudi Arabia. We recommend checking your flight departure status directly with the airline and with the airport.
Read more: sa.usembassy.gov/security-al…
Cuantos han sufrido está semana con todo lo de PHP el problema es que el 28 salen nuevos parches y se encuentra ya circulando los exploits. Terrible como avanza la tecnología. Así que si eres admin peruano sufre peruano sufre – at San Borja, Peru
Los equipos de SOC del gobierno están molestos, les mandaron a revisar mis videos y también ha crecido la cantidad de búsquedas con mi nombre y seguimiento en Linkedin. Feliz Domingo – at San Borja, Peru
Así se ven las transacciones del bajo mundo, las mismas pertenecen a la venta de base de datos de tarjetas obtenidas en forma irregular, la trazabilidad es básica en los procesos de investigación de la unidades de inteligencia financieras del mundo. – at Carmen de la Legua Reynoso, Peru
Cesar Chavez Martinez retweeted
Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. stealmybitcoin.com/
Cesar Chavez Martinez retweeted
Php2shell-scanner Tool for scanning php2shell using 3 methods: via URL, localhost, SSH
github.com/aancw/php2shel
Hola @grok sacame la información de quienes citarán mis post sin etiquetarme. – at San Borja, Peru
