@mycert

MyCERT is Malaysia Computer Emergency Response Team. MyCERT is a department of CyberSecurity Malaysia (https://xitter.cf/t.co/GO9BfE1lcc). Email: [email protected]

 Cyberjaya, Malaysia
mycert.org.my/
Joined July 2009
  • Tweets3.2K
  • Following0
  • Followers1.9K
2Media
MA-1490.102026: MyCERT Alert - New Critical PHP Vulnerability (CVE-2026-115560) and Analysis on PHP2Shell Active Exploitation Script #php2shell mycert.org.my/portal/details…
1
113
🚨 CONFIRMED: PHP has officially acknowledged another RCE vulnerability, CVE-2026-115560, affecting specific session configurations even after the October 21 patches. A separate issue, not a bypass of the original fixes. A patch is planned. We've updated our defensive toolkit: github.com/syhunt/php2shell-… #php #cybersecurity

GitHub - syhunt/php2shell-protection: Emergency Apache mitigation and testing toolkit for php2shell...

Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures. - syhun...

github.com
15
84
16
348
36,178
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details → thehackernews.com/2026/10/ur…
224
2,233
790
7,318
1,437,896
MA-1484.102026: MyCERT Advisory - Critical PHP2Shell Vulnerabilities in PHP Allowing Unauthenticated Remote Code Execution #php2shell mycert.org.my/portal/details…
23
7
42
5,255
MA-695.012018: MyCERT Alert – Fake Bank Negara Malicious APK – New Variant. mycert.org.my/en/services/ad…
1
7
7
Mobile beasts and where to find them #MobileSecurity by @kaspersky Part 1: kaspersky.co.uk/blog/mobile-… Part 2: kaspersky.co.uk/blog/mobile-…
4
6
Fake banking apps on Google Play leak stolen credit card data #MobileSecurity #AndroidSecurity by @LukasStefanko and @welivesecurity welivesecurity.com/2018/07/2…
1
12
1
16
MyCERT retweeted
lc4m@luc4m12 Jul 2018
Interesting attack chain: enrol to a malicious #MDM server, replace and #backdoor messaging apps. #CyberEspionage #socialengineering #apt #BOptions #india blog.talosintelligence.com/2… @avman1995
2
4
1
10
New Virus Decides If Your Computer Good for Mining or Ransomware. thehackernews.com/2018/07/cr… via @TheHackersNews
2
3
Replying to @rafi0t
As an ex-Mycert I’m happy to learn about your observation. Check out a recent @apnic post on the founder and first head of @mycert (est. 1997) blog.apnic.net/2018/06/27/wo…

Women in ICT: Curious about cybersecurity | APNIC Blog

Raja Azrina reflects on her 20 plus years working in the ICT/Network Security industry in Malaysia and discusses the potential for more females to choose careers in cybersecurity.

blog.apnic.net
1
4
1
8
Probable ioc's of RedDawn NK Android APT 24be606a3d946b2d4ee01399e6fe89593125eb7fd848e37767e7f5aeb28c734a, c07ba1f6aefb11dcfc9871b2bf1028cabfe7bf3f2b1b084f0be58c6ac352282f, 1710c994e54006d512047e1716350053c35a63e3cac244af7365abc39fbb531c securingtomorrow.mcafee.com/…

Cybersecurity News and Insights to Stay Safe Online | McAfee Blog

Welcome to the McAfee Blog, where we share posts about security solutions and products to keep you and your connected family safe online.

mcafee.com
4
4
Proof-of-Concept Code for Memcached DDoS Attacks Published Online.... fb.me/1VtxM7ffy

Proof-of-Concept Code for Memcached DDoS Attacks Published Online

Proof-of-concept code to run massive DDoS attacks using unsecured Memcached servers has been published online this week, along with a ready-made list of over 17,000 IP addresses belonging to vulner...

bleepingcomputer.com
4
3
How hidden mining threatens your business. kaspersky.com/blog/miners-th… fb.me/8r1JRv7jW
2
1
1
SMBv3 Null Pointer Dereference vulnerability (CVE-2018-0833).... fb.me/1HKYMkhJ0
1
APT37 (Reaper): The Overlooked North Korean Actor.... fb.me/79PXYDzgx

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
3
2
Zero-day vulnerability in Telegram. securelist.com/zero-day-vuln… fb.me/F8K3PRTn

Zero-day vulnerability in Telegram

In October 2017, we learned of a vulnerability in Telegram Messenger’s Windows client that was being exploited in the wild. It involves the use of a classic right-to-left override attack when a user...

securelist.com
5
1
World Police Take Down "Infraud" Carding Operation.... fb.me/1w7jgSXHy

World Police Take Down "Infraud" Carding Operation

The US Department of Justice (DOJ) has charged 36 suspects for their role in Infraud, a cyber-criminal organization that has been involved in the acquisition, sale, and dissemination of stolen...

bleepingcomputer.com
1
1
2
UDPoS - Exfiltrating Credit Card Data via DNS.... fb.me/11ZFXGTjb
2
ReelPhish: A Real-Time Two-Factor Phishing Tool.... fb.me/OM4K1lzO

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
Cyber Espionage Group Targets Asian Countries With Bitcoin Mining Malware.... fb.me/QvnR5610
1
Load more