Helping teams build secure applications, APIs, and AI systems.
Earth
Joined October 2019
- Tweets3.1K
- Following111
- Followers553
- Likes1.3K
Pinned Tweet
PHP2Shell: two critical PHP runtime bugs (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) allow unauthenticated RCE.
22.6M+ instances exposed. Public PoCs exist, and patching your app won’t fix it.
Upgrade to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, then restart every worker. 🧵
🤖 Made with AI
One vendor credential. 2,250+ Microsoft 365 tenants probed. Microsoft says ARTEX, an AI pentest framework, sped it up.
Confirmed victims are far fewer.
Details: secureblink.com/threat-feeds…
#SupplyChain #Attacksurface #Microsoft365 #Chinese #Hack #Threatfeed #SecureBlink
🤖 Made with AI
A group says it holds 8.63 million #RajasthanPolice emails. 🔍
The "70,000 records" headline hides five different units: mailboxes, addresses, ID records, phone numbers and gigabytes.
Police are probing. Nobody has confirmed a breach.
Details: secureblink.com/threat-feeds…
#RajasthanNews #Scarlettgroup #Police #Cyberattack #Hack #Databreach #Threatfeed #SecureBlink
🤖 Made with AI
MAIN POST An Indian certificate authority's private keys were recovered in milliseconds.
Eight of them were smaller than 256. 🔍
Chrome blocked them within 2 hours. Mozilla within 5. But some clients never check.
Details: secureblink.com/threat-feeds…
#Cyberattack #Encryption #eMudhra #PKI #Hack #Threatfeed #SecureBlink
Full breakdown with detection steps and CERT-EU, CISA and NSA guidance 👇
secureblink.com/threat-feeds…
#PHP2Shell #CyberSecurity #infosec
Can’t patch today?
- session.upload_progress.enabled=0
- Harden memory_limit and post_max_size
- Put a WAF or virtual patch in front
- Isolate end-of-life PHP (8.1 and older gets no php.net fix)
Then hunt for php-fpm or apache spawning shells.
Secure Blink retweeted
SBI data leak: India’s largest #bank confirms 3,897 customer records with #PII inside a set of about 375,000 records found on the dark web.
The source is still unknown. A #BreachForums actor, #Siriusim, claims much more.
Here is what is confirmed and what is only claimed.
🤖 Made with AI
SBI data leak: India’s largest #bank confirms 3,897 customer records with #PII inside a set of about 375,000 records found on the dark web.
The source is still unknown. A #BreachForums actor, #Siriusim, claims much more.
Here is what is confirmed and what is only claimed.
🤖 Made with AI
5/5 Risk to watch: callers who quote your CIF number or branch. Never share an OTP. Report fraud to 1930.
For bank SOCs, the place to hunt is bulk exports from lead and loan systems.
Full Threatfeed: secureblink.com/threat-feeds…
1,062,060 Texans. A utility that learned about its own breach from a hacking forum. 👀 CenterPoint Energy’s SEC filing blames an “external facing system.” The hacker’s version is far more specific. Which one holds up? 🧵
One more detail. No CVE. No exploit. No malware. Nothing to patch, nothing for a scanner to flag.
Full ThreatFeed: secureblink.com/threat-feeds…
#DataBreach #CyberSecurity #APISecurity #Hack #Threatfeed #SecureBlink
The 1% was personal data that policy said should not live in @github.
Part of it may be test data.
Meta has not said which fields.
Still open: who the group is, how the login was stolen, whether MFA was on, whose code was taken.
#MetaBreach #GitHub #ThreatIntelligence #DataBreach #Cyberattack #Hack #SourceCode #Threatfeed #SecureBlink
secureblink.com/threat-feeds…
Overnight, hundreds of #French supermarkets lost control of their refrigerators.
No ransom note. No outage at the tills. Defrost cycles that reportedly pushed cases toward 50°C.
A related flaw was patched 18 months ago. Nobody has tied it to this. 🧊
Details: secureblink.com/threat-feeds…
#OTSecurity #ThreatIntel #Hack #Cyberattack #Threatfeed #SecureBlink
