Was reading a threat analysis report by @K7CyberSecurity and it motivated me to create a video about building an ISO to deliver a payload. Fun exercise leveraging techniques I learned from @_RastaMouse
youtu.be/s4TfC9Yz-lM
youtu.be/s4TfC9Yz-lM
Rey Bango
Verified account This account is verified. Learn more@reybango
AI & Security | I hack into things sometimes. Opinions are mine. Fortis fortuna adiuvat. Nostalgia is not a strategy. It's a good time to cause a little chaos.
5.6K Following 22K Followers 65K Posts
Latest posts 5
php2shell is no joke and is being compared to log4shell in terms of severity. CVE-2026-109618 and CVE-2026-109619 are critical (CVSS 9.2) vulnerabilities in PHP that can allow unauthenticated remote code execution.
It’s also reported that these are under active exploitation!!
The best solution is to upgrade to PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12, or install distribution or LTS vendor packages containing the fixes. Please do this ASAP and stay safe!
You can read the Horizon3.ai advisory here: horizon3.ai/attack-researc…
It’s also reported that these are under active exploitation!!
The best solution is to upgrade to PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12, or install distribution or LTS vendor packages containing the fixes. Please do this ASAP and stay safe!
You can read the Horizon3.ai advisory here: horizon3.ai/attack-researc…
1:59
Clever use of common area for promoting security. Never seen this before. Well done @_GuidePointSec 👍👍
#gpsec
#gpsec
@_JohnHammond has built a solid training platform that not only provides excellent training materials but keeps it at an affordable price. Definitely check it out.
Learn cybersecurity from John Hammond and 30+ All-Stars. Courses cover red team, blue team, beginner, advanced, coding, AI... Lots of FREE & NameYourPrice options, too! Get practical experience in provided web-based virtual labs. Don't just watch, DO! Your dream job awaits.View quoted post on X
