toruta39 retweeted
PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619)
Information about two new remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 (CVSS v3.1 10 / 10), has leaked ahead of their coordinated disclosure, and security firm Watchtowr Labs confirmed that the flaws are real. Both vulnerabilities are due to be disclosed on Thursday, October 22, alongside patches. Until those advisories land, no fix is available, which leaves the flaws as zero-days in PHP installations everywhere.There is currently a scheduled release of an advisement and possible patch on Wednesday, October 21 2026 at 14:00 UTC.
Below is a video of a researcher, maybe the original researcher, showcasing the exploits.
#CTI #BlueTeam #ThreatIntel #CVE-2026-109618 #CVE-2026-109619
toruta39 retweeted
PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。公開しているウェブサイトでPHPを使用しているか確認し、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いいたします。
php.net/archive/2026.php#202…
toruta39 retweeted
We discovered and communicated with a Chinese AI agent fleet. We believe this is the first time that researchers have ever made contact with a rogue agent fleet in the wild.
Nearly all prior public agent incidents (like the HuggingFace hack) came from American labs. These agents were hosted by Tencent's evaluation research team, and they targeted Alibaba's Amap.
toruta39 retweeted
A big crowd gathered in Minnesota to witness a giant-pumpkin smashing event at the Stillwater Harvest Fest, with many in attendance running to grab a piece of gourd for themselves. abcnews.link/LE9e3u5
#日記 ずとまよライブは公演前と後はステージ撮影していいっていうことになっているのでみんなこぞって撮影するわけなんですけどその光景を見ていてあーこれ全部集めたら 3DGS でステージセット再構築できそうだなーと思ってしまってだーっと集めたらずとまろたちの熱い想いが詰まったエモいサイトになったんだけど作り方がちょっとアレなので怒られが発生したら消しますw(ステージ写真投稿サイトにすればよいかも) bunkadenrai.saqoosha.workers…
#ずとまよ #文渦伝雷 #伝雷
toruta39 retweeted
— SPECIAL NARA THANKS — #伝雷
zutomayo.net/special/bunka-d…
toruta39 retweeted
「文禍伝雷」開催を終えて
zutomayo.net/special/bunka-d…































