Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen is a hacker with a hacker mindset that is focused on the right way to do wrong things to get the right result.…
Month: October 2026
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports Pierluigi Paganini October 22, 2026 AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting…
![[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards](https://image.cybernoz.com/wp-content/uploads/2026/09/tldr-sec-346-Can-AI-Do-Novel-Security-Research-600x340.png)
[tl;dr sec] #351 – PHP2Shell, Autopatching Skills, AWS Pathrunner
PHP2Shell This week PHP2Shell became public: an unauthenticated remote code execution vulnerability affecting the past 13 years of PHP. I’ve been a part of a…
Singapore pushes for quick action on PHP security flaws as hackers prowl
The flaws in PHP, which powers many websites and online services, could allow attackers to take control of web servers, steal data or disrupt services…
LiteLLM release pipeline hacked to distribute credential-stealing malware
According to cybersecurity firm Aikido, files bundled with the compromised package executed automatically when Python started, even if an application did not import LiteLLM. The…
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled,…
Black Kite debuts Quantum Readiness controls to assess post-quantum security across vendor ecosystems
Black Kite, provider of third-party cyber risk management solutions, announced the release of Quantum Readiness, a new set of controls within the SSL/TLS Strength category…
SafePay ransomware compromised 600 critical organizations worldwide; urge patching and network defenses
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the U.S. Secret Service (USSS), and international partners warned that SafePay,…
Microsoft April 2023 Patch Tuesday Highlights: everything you need to know
Among the 97 vulnerabilities patched by Microsoft this Patch Tuesday, two vulnerabilities caught our attention. Learn how to detect and mitigate CVE-2023-28252, an elevation of…
To octopi, or not to octopi.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and…
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. This security…
North Korean Hackers Use Post-Quantum Encryption to Hide New Malware From Security Tools
North Korean-linked Lazarus hackers are using post-quantum cryptography in a malware delivery chain designed to conceal later-stage payloads from security tools. The technique appeared in…