@NikkiC360

I am a fun loving channel manager for the global MSSP @Custodian360. Also part of the @CyberHouseParty @HelplineCyber @nikkic360.bsky.social

 Wokingham
custodian360.com
Joined August 2017
  • Tweets21.4K
  • Following4.8K
  • Followers4.5K
3.9KMedia
Nikki Webb 🖤 retweeted
mRr3b00t
@UK_Daniel_CardOct 25
🚨New 0day inbound, windows2shell🚨 Can compromise any Windows host. Potentially 70% of the internet is affected. Tweet-able PoC: cmd.exe/powershell.exe Can’t be patched (/S lulz)
Panda🐼
@realcyberpandaOct 24
New 0day inbound, wsl2shell 🚨 Can compromise any Windows laptop running VS Code. Potentially 99% of developers affected. PoC: wsl -d Ubuntu Can be removed 👀
21
24
1
250
19,628
Nikki Webb 🖤 retweeted
C360RED@C360RedOct 24
Once a year pen test = 11 months of guessing 🫠 Continuous, human-assured testing from £250/mo #cybersecurity #pentesting #infosec #techtok #smallbusinessuk
1
1
32
ALERT: Match at Wokingham is kicking off earlier. Get down there in plenty of time for a 2.45pm k.o.
Wokingham Town FC
@WokinghamTownFCOct 24
Due to the weather, the officials and both teams have agreed that it makes sense to have an earlier kickoff, so the game will now kick off at 2:45 PM
2
5
1,017
Nikki Webb 🖤 retweeted
mRr3b00t
@UK_Daniel_CardOct 23
Really important: 'Look for X-Powered-By: PHP/.... Fast inventory check; hidden PHP deployments can be missed, and version banners don’t confirm vulnerability.' Backporting is a thing..... there's a lot of claims this week: > PoCs that are nonsense > Identification of things that is very questionable So just a heads up! No one has an all knowing, all seeing view! (that doesn't mean you should fall to FUD)
Florian Roth ⚡️
@cyb3ropsOct 21
Two very useful posts on monitoring and hardening PHP services, plus an Nmap command to help find them in your environment: 1. Discovery with Nmap Common and alternative web ports; HTTP headers that may expose PHP versions: nmap -sT -sV --version-light -T4 --max-retries 1 --open -p 80,81,443,8000-8010,8080-8090,8181,8443,8880,8888,9000,9001,9080,9090,9443 --script http-headers --script-timeout 10s --script-args 'http-headers.path=/index.php,http-headers.useget=true' <target> Look for X-Powered-By: PHP/.... Fast inventory check; hidden PHP deployments can be missed, and version banners don’t confirm vulnerability. 2. Huntress: Monitoring and detection • Confirmed facts and remaining questions • Suspicious PHP child processes, shells and downloaders • Webshells and other post-exploitation activity • My process-watcher for Linux process visibility huntress.com/blog/php2shell-… 3. Vincent Schmalbach: Hardening and patching • Temporary nginx/Apache filters and upload-progress settings • WAF/origin bypass checks • Package and backport verification • PHP-FPM/worker restarts, container rebuilds • Side effects and checks for compromise vincentschmalbach.com/cve-20… Temporary measures are stopgaps. Prepare to apply the official fixes as soon as available.
2
5
2
28
2,925
Nikki Webb 🖤 retweeted
Andrew Thompson
@ImposeCostOct 23
"The previous update (October 22 16:18 UTC) reported that Sophos observed successful exploitation of PHP2Shell in customer environments. Upon further analysis, we are correcting that assessment as Sophos customer telemetry shows scanning and a small number of failed exploitation attempts. As of this update, there is no evidence of a successful compromise due to these vulnerabilities." sophos.com/en-us/blog/proof-…

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

The vulnerabilities have been identified as critical (CVSS score of 9.2)

sophos.com
24
2
86
8,355
Morning, is it safe to come out yet?👀
3
7
247
Nikki Webb 🖤 retweeted
Scott Piper
@0xdabbad00Oct 22
Things keep happening this week, so just so we're all clear on the rules, no one is allowed to disclose vulns or breaches after Friday morning, until Monday. Them's the rules.
5
13
3
114
4,686
Nikki Webb 🖤 retweeted
spencer
@techspenceOct 22
The cybersecurity industry has a serious problem with over complicating literally everything.
68
25
9
700
25,614
Nikki Webb 🖤 retweeted
Tib3rius
@0xTib3riusOct 21
T-shirt choice was on point today.
3
1
66
2,416
Nikki Webb 🖤 retweeted
Phillip Wylie
@PhillipWylieOct 22
2
5
1
29
1,099
Thursday feels like a month, anyone else ?
8
160
Nikki Webb 🖤 retweeted
mRr3b00t
@UK_Daniel_CardOct 22
I wrote this yesterday looking at how likely mass exploitation is for #PHP2SHELL.... pwndefend.com/2026/10/21/how…
2
9
34
4,619
Nikki Webb 🖤 retweeted
Daniel W.
@ghostinthecableOct 21
Waiting on today's PHP patches? While you wait, check your Apache logs for crashes and known PHP attack patterns. Small read-only Python script, no dependencies: github.com/ghostinthecable/p…

GitHub - ghostinthecable/php-hunting: Read-only Apache log hunter for PHP exploitation attempts

Read-only Apache log hunter for PHP exploitation attempts - ghostinthecable/php-hunting

github.com
7
21
2,336
Nikki Webb 🖤 retweeted
BSides London@BSidesLondonOct 21
Emails from our #BSIdesLDN2026 CFP reviewers are going out in batches this week. With 436 proposal, we cannot respond to individual messages and emails about specific submissions and their acceptance state. Please continue to check your emails this week, and you spam folders.
3
5
539
Nikki Webb 🖤 retweeted
JFrog Security
@JFrogSecurityOct 21
🚨 JFrog Security Research has identified a supply-chain attack involving malicious code in the LiteLLM 1.107.0 PyPI release. Avoid this version and investigate environments where it was installed or executed. More details will be shared soon in our blog post.
32
162
102
1,368
439,797
Nikki Webb 🖤 retweeted
Wokingham Town FC
@WokinghamTownFCOct 19
Tuesday night action at Lowther awaits ➡️ 📌 Lowther Road, RG41 1JD ⏰ 19:45 🆚 @wandcfc
4
14
952
Nikki Webb 🖤 retweeted
Cyber House Party@HouseCyberOct 19
Tomorrow’s the day! 🎉 We’ll be out in full force at the Security Serious Unsung Heroes Awards, cheering on the people who go above and beyond for our community. Congratulations to every nominee. We can’t wait to celebrate with you! 💙 #UnsungSecHeroes26 #SecuritySerious
1
1
92
Nikki Webb 🖤 retweeted
mRr3b00t
@UK_Daniel_CardOct 19
This should be any public transport! Any!
BBC News (UK)
@BBCNewsOct 19
People playing loud music on buses could face £100 fine bbc.in/4yR9HFa

People playing loud music on buses could face £100 fine

Antisocial behaviour on buses in England could lead to fines while a new campaign is also being launched for trains. A national campaign asking rail passengers "share the carriage, not the noise" is...

bbc.com
13
3
67
3,084
Nikki Webb 🖤 retweeted
Custodian360@Custodian360Oct 19
Building an in-house 24/7 SOC is a significant investment. Our SOC-as-a-Service provides enterprise-grade security with predictable costs, tailored for UK SMEs.
1
1
43
On any public transport would be grand, just no need for it or speaking on loud speaker
BBC News (UK)
@BBCNewsOct 19
People playing loud music on buses could face £100 fine bbc.in/4yR9HFa

People playing loud music on buses could face £100 fine

Antisocial behaviour on buses in England could lead to fines while a new campaign is also being launched for trains. A national campaign asking rail passengers "share the carriage, not the noise" is...

bbc.com
8
325
Load more