911Cyber (@911Cyber_) header
911Cyber (@911Cyber_) profile picture

Get help from cybersecurity first responders at https://nitter.cf/t.co/RcPZzDTPtL

New York
Joined August 2022
Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)Photo by 911Cyber (@911Cyber_)
911Cyber retweeted
Today's Cyber Briefing: Nov 05, 2026 A June patch. A different bug. 996 hacked switches. Zyxel GS1900 owners: install 2.90 Patch 3 now (CVE-2026-107441). 📉 China-linked activity down 41.4% 🔑 Northflank, WorkOS, Trigger.dev breached ☁️ Apple to check public iCloud links cybermaterial.com/ #CyberBriefing
1
2
144
Today's Cyber Briefing: Nov 05, 2026 A June patch. A different bug. 996 hacked switches. Zyxel GS1900 owners: install 2.90 Patch 3 now (CVE-2026-107441). 📉 China-linked activity down 41.4% 🔑 Northflank, WorkOS, Trigger.dev breached ☁️ Apple to check public iCloud links cybermaterial.com/ #CyberBriefing
1
2
144
Today's Cyber Briefing: 2026.11.04 The update is the attack window. WordPress CVE-2026-119977 hits sites mid-upgrade. It's in CISA KEV and feds must patch by Fri. Update to 7.1.4. 🌐 Chrome 157 fixes 213 bugs, 7 critical 💳 Revolve: 179K+ customers' cards taken cybermaterial.com/ #CyberBriefing
2
145
911Cyber retweeted
If your Linux server accepts TCP, it runs this code. CVE-2026-98432: 9.8, remote, no login. Install the fixed kernel and reboot. 🧊 Fridges hit 50°C in hacked stores 🇺🇦 Gorbag exploits WinRAR 📈 Gartner: open models to run 90% of agent steps cybermaterial.com/ #CyberBriefing
1
1
101
If your Linux server accepts TCP, it runs this code. CVE-2026-98432: 9.8, remote, no login. Install the fixed kernel and reboot. 🧊 Fridges hit 50°C in hacked stores 🇺🇦 Gorbag exploits WinRAR 📈 Gartner: open models to run 90% of agent steps cybermaterial.com/ #CyberBriefing
1
1
101
No tap. No alert. Call dropped. 📵 An 8-byte “SMS of Death” crashes Android calls, emergency ones too. Install the Oct 2026 update. 🧩 Tainted Claude Code ext hit up to 5,000 Cursor users 🚨 122 fake alerts flooded Ukraine’s Air Alert app Read More: cybermaterial.com/ #CyberBriefing
1
1
37
Today's Cyber Briefing: 2026.10.30 Patched VPN. Signed installer. Stock WordPress. All beaten. - Brotli CVE-2026-111497 (CVSS 9.2) is in CISA KEV. Patch libbrotli, restart PHP. -🔓 Ivanti: 3rd flaw unpatched -💰 Binance: $6.3B heist -💸 LVHN: $800K HIPAA fine Read More cybermaterial.com/ #CyberBriefing #Binance #WordPress
2
113
Today's Cyber Briefing: 2026.10.29 Trust, revoked. 7⃣ compromised eMudhra certs are out of Windows trust. Offline PCs: install the Oct 26 update, then audit certs chaining to eMudhra G3 roots. 🔌 GMO: 26,739 servers at risk 🤖 OWASP: AI lowers the attack bar More stories: cybermaterial.com/ #CyberBriefing
1
200
Today's Cyber Briefing: 2026.10.28 No password. No login. Just a path to your backup server. 🔑Veeam CVE-2026-108142 scores 9.1. Update to 13.1.2 or 13.0.3 today. 🔥 24 firewalls rooted via PHP2Shell + Fragnesia 🇯🇵 54,401 email passwords leaked at So-net cybermaterial.com/ #CyberBriefing
1
44
Today's Cyber Briefing: 2026.10.27 iOS 27: not affected. Older iPhones: targeted. Apple's exploited CoreGraphics fix now reaches iOS 18.7.11, and 27.2 fixes 286 bugs. Update today. ☁️ Pod-to-root cloud escape 🔑 DreamHost password resets 🛡️ CISA 2030 lands cybermaterial.com/ #CyberBriefing #Cybersecurity #Infosec #Cyber #Tech
1
321
911Cyber retweeted
Today's Cyber Briefing: 2026.10.26 216 servers. One target list. Suspected DPRK operators are probing unpatched PHP hosts. Upgrade PHP and restart every worker. 🔓 497 stolen M365 sign-ins, 79 orgs 🤖 AI-assisted ring took 8.2M records ⚠️ New PHP flaw, no patch yet Read More : cybermaterial.com/ #CyberBriefing #PHP #M265 #Microsoft
1
1
23
Today's Cyber Briefing: 2026.10.26 216 servers. One target list. Suspected DPRK operators are probing unpatched PHP hosts. Upgrade PHP and restart every worker. 🔓 497 stolen M365 sign-ins, 79 orgs 🤖 AI-assisted ring took 8.2M records ⚠️ New PHP flaw, no patch yet Read More : cybermaterial.com/ #CyberBriefing #PHP #M265 #Microsoft
1
1
23
🕵️ This Saturday: Iran's Prince of Persia. Twenty years of Iranian espionage, a takedown they survived, and a command server hiding on US soil. Full threat actor profile drops Saturday. cybermaterial.com/s/threats Stay tuned! 👀 #Iran #PrinceOfPersia #Cybersecurity
35
911Cyber retweeted
Today's Cyber Briefing - October 23, 2026 MFA didn’t stop it. Passwords weren’t needed. - 497 Microsoft 365 sign-ins at 79 orgs, all with stolen tokens. - Plus: Python Pillow 9.2 flaw (upgrade to 13.0.0), AI agent wallet drain, Capcom 11.77M records. Read More: cybermaterial.com/ #CyberBriefing #Passwords #MFA #Python
1
1
37
Today's Cyber Briefing - October 23, 2026 MFA didn’t stop it. Passwords weren’t needed. - 497 Microsoft 365 sign-ins at 79 orgs, all with stolen tokens. - Plus: Python Pillow 9.2 flaw (upgrade to 13.0.0), AI agent wallet drain, Capcom 11.77M records. Read More: cybermaterial.com/ #CyberBriefing #Passwords #MFA #Python
1
1
37
Cyber Briefing: October 22, 2026 22.6 million exposed PHP servers. Two flaws. Zero login needed. CVSS 9.2. Exploit attempts already spotted. Security agencies say: patch today or take your site offline. Fix → 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 Patched yet? Read More Headlines: cybermaterial.com👇 #CyberBriefing #Cyber #PHP #Tech
1
116
911Cyber retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,290
10,809
2,843
70,115
12,664,875
911Cyber retweeted
Signal RingRTC CVE-2026-113380 (CVSS 9.3) can keep call audio on after hang-up, so update every device. Also: 333 Tor exits hijacked to steal SSH passwords Oct 1–5, and AI models plan workable OT attacks ~90% of the time. cybermaterial.com/ #CyberBriefing #CyberSecurity
1
2
94
Signal RingRTC CVE-2026-113380 (CVSS 9.3) can keep call audio on after hang-up, so update every device. Also: 333 Tor exits hijacked to steal SSH passwords Oct 1–5, and AI models plan workable OT attacks ~90% of the time. cybermaterial.com/ #CyberBriefing #CyberSecurity
1
2
94
Today's October 20, 2026 - #CyberBriefing 👇 🩹 3 critical NGINX flaws (CVSS 9.2): upgrade to 1.30.6/1.31.7 ⚡ OVHcloud CLI backdoored Oct 19: rotate secrets keys ⚡ INC/Gentlemen AI ops exposed: 46 encryptors, $23,920 AI spend 🚨 Nikkei leaks 1.83M records... Full stories: cybermaterial.com/
1
2
32