Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Hong Kong
Joined December 2014
- Tweets37.7K
- Following425
- Followers32.1K
- Likes33.9K
Pinned Tweet
In case you missed it:
Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.
Just saying but you don’t need Abliterated AI to reproduce this in 10 minutes.
❗️ php2shell is a very serious vulnerability affecting MOST OF THE WEB.
Our GLM 5.3 Abliterated was able to reproduce the exact vulnerability in 30 minutes.
While waiting the official PHP fix, we recommend to turn off session.upload_progress.enabled in the php.ini settings. Should help mitigate some of the dangers although not all.
I mean all great to have Ablit models but the thing is you could do the same without Ablit and just any other cloud model.
🚨 PHP2Shell is extremely dangerous. And AI just changed the game.
We tasked OrcaCyber Zero 1.5 (orcarouter.ai/models/orca/or…) with investigating the critical PHP RCE vulnerabilities.
It autonomously built a complete working proof-of-concept (PoC).
Due to the severity of these vulnerabilities and their potentially massive impact across the web, we've decided NOT to publish the exploit code or technical details.
Here's what makes this particularly scary:
Your WordPress could be fully updated. Your plugins could be patched. Your website could STILL be vulnerable because the flaw is in PHP itself.
Millions of PHP-powered websites may be exposed. Not every PHP installation is necessarily exploitable, but the potential attack surface is enormous.
If you're running PHP, upgrade to a supported, security-fixed version ASAP.
Need to buy this and test sometime. They just killed parallels?!
Optimizing DX12 on VMPal.com. The benchmark is now around NVIDIA 5080?
There's still plenty of room to improve performance (about 20–30% up).
Vincent Yiu retweeted
Syswhispers4
github.com/JoasASantos/SysWh…
At this point it’s not really an accident anymore. They’re deliberately trying to perform unauthorised attacks and then try to play it like it’s the AI’s fault. If you can’t control the AI you don’t deserve to use it. The user should be responsible.
In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities.
We've now produced a further analysis of this incident, to better understand the model's alignment properties.
anthropic.com/research/align…
Mate these bullshit reviews. No one talks about how MagSafe doesn’t work opened up, or the crappy screen compatibility.
Bro if Apple doesn’t show the black bars and incomplete use of space their advert / launch event should seriously be considered a scam.
What’s this bs?
Not sure, but I'm sure POCs will evolve. Not by the fact that one POC will hit all - but the fact that an AI agent can dynamically adapt and create the POC for the target system.
CVE-2026-109618 and CVE-2026-109619 currently have no universal working PoC.
If you want to read the reason 👇
berardinellidaniele.com/post…
Vincent Yiu retweeted
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation.
eliastaylor.com/noexploit/
Anyone manage to get the primitive to get RCE? Any tricks?
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
wtf 100+ prose
Running GLM-5.3-Flash on 2× DGX Spark with NVIDIA Flare ✨
- 1M context window, 2.32M-token shared KV pool
- Prose decode, single stream: 117.2 tok/s
- Prose decode, 2 concurrent: 167.4 tok/s aggregate
- Prose decode, 4 concurrent: 215.8 tok/s aggregate
- 32K prefill: 2,327.9 tok/s
- Available memory after loading: ~13 GiB on head /worker each
Checkpoint: GLM-5.3-Flash-NVFP4-MXFP8-CSF-QAD
github.com/NVIDIA/flare-loca…
Quite honestly Cloudflare is doing so much for the world right now. They technically could be like every other vendor and just be “late”. They’re acting where it matters.
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
