Web Application Security Consultant. Two sons' proud dad! https://xitter.cf/t.co/uEjJ0UQkhV

Online
Joined May 2009
Marius Avram retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST. Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using: 🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…) 🟧 Bambda scan checks (github.com/PortSwigger/bambd…) 🟧 BChecks (github.com/PortSwigger/bchec…) Start scanning for the vulnerability now → portswigger.net/bappstore/31…
7
226
13
1,054
61,780
Marius Avram retweeted
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
63
546
89
2,975
448,114
Marius Avram retweeted
Wild story from @briankrebs: 1) Dubrovsky, the arrested ransomware negotiator, knew ShinyHunters stole FBI data but never told FBI; 2) an exec from another large US negotiating firm played an active role operating ShinyHunters' victim extortion website krebsonsecurity.com/2026/10/…
2
35
136
10,900
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 18
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers. Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began. A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
97
333
64
3,653
472,664
Marius Avram retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
728
1,476
1,225
11,610
2,904,354
Marius Avram retweeted
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
138
395
217
2,274
786,593
Marius Avram retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number. More: 404media.co/heres-what-teleg…
490
889
148
4,182
943,224
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 16
🚨 BREAKING: Suspected Chinese spies hacked BeyondTrust Remote Support servers with a zero-day, CVE-2026-102764. One was hosted by BeyondTrust itself, and they were alerted instantly, but their automated 3rd party triage tool closed the alerts as false positives.
12
94
9
446
30,116
Marius Avram retweeted
Apple calls the iPad a computer. So I built Linux for it. I built LinPad OS - Linux for iPad. - Desktop windows + a real terminal - No jailbreak. No VM. Free & open source (pre-release). What is your iPad missing? linpados.com #Linux #iPad #OpenSource
64
184
17
1,679
122,577
Marius Avram retweeted
profdeibert@RonDeibertOct 15
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. 45 devices at @AJEnglish confirmed infected citizenlab.ca/research/how-d…
20
788
61
1,352
104,834
Marius Avram retweeted
Curl has one high cve from very long time leading to possible RCE, and you now what @pruvadev did? reproduced. CVE-2026-92392: curl HTTP/2 upload Use-After-Free RST STREAM HTTP 1 1 REQUIRED/REFUSED STREAM leading to potential RCE pruva.dev/reproductions/REPR…
9
38
2,350
Marius Avram retweeted
🚨 PoC RELEASED — Splunk Enterprise RCE, no login needed CVE-2026-76268 | CVSS 9.8 (Splunk) Anyone who can reach the Patroni API on a search head cluster member can run OS commands. A public repo now claims a PoC. ⚠️ Affected: 10.2.0–10.2.6 • 10.4.0–10.4.2 ✅ Fixed: 10.2.7 • 10.4.3 Workaround: disable the PostgreSQL sidecar (unless you use Edge Processor, OpAmp, SPL2). • Not in CISA KEV • No known exploitation • PoC not run or verified by ThreatWire Patch today, and keep Patroni off untrusted networks. Full breakdown 👇 threatwire.tech/news/splunk-… #Splunk #CVE #Poc #threatWaire
9
47
2,238
🚨 CVE-2026-104935 🚨 Ivanti Connect Secure authentication bypass (CVSS 10.0). Discover every Ivanti VPN you run and see which ones are exploitable. Run directly with Neo: go.projectdiscovery.io/CVE-2…
1
8
42
2,797
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 14
‼️BREAKING: Hackers are planting webshells on Nextcloud servers through a critical Collabora flaw. CVE-2026-110447 in the built-in CODE Server app lets anyone run commands without logging in. Collabora says update to 26.4.303 or delete it.
11
167
12
1,030
69,125
Marius Avram retweeted
OpenAI Newsroom
@OpenAINewsroomOct 13
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,171
6,089
5,730
77,620
26,055,605
Marius Avram retweeted
International Cyber Digest
@IntCyberDigestOct 13
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code. They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
135
811
138
4,729
278,240
Marius Avram retweeted
We are currently rapidly reacting to CVE-2026-104935, an authentication bypass vulnerability enabling unauthenticated remote command execution on Ivanti Connect Secure appliances. Active watchTowr Platform clients have been made aware of their exposure. Reach out for support.
4
17
1
71
6,692
Marius Avram retweeted
Very excited to share details on the bugs used in our full chain Chrome exploit! We used three bugs (V8 corruption, V8 sandbox escape, and renderer sandbox escape via Crashpad). The third bug is my favorite!
Replying to @Xbow
7/ Read more on the blog: xbow.com/labs/research/zero-…
15
55
2
254
16,681