DaragonTech empowers AI to shape its own path, driving a new era of human-machine collaboration from our base in Lisbon 🇵🇹 🇪🇺
Lisbon
Joined April 2021
- Tweets1.6K
- Following1.1K
- Followers1.2K
- Likes4.6K
Pinned Tweet
Proud to have partnered with Syhunt in developing its next-generation on-device AI technologies, including proprietary AI models, a breakthrough Symbiotic AI security engine, and AI-powered vulnerability analysis
nitter.cf/syhunt/status/21097467…
🚀 Syhunt is bringing next-generation, on-device AI to application security!
Join us at Security Leaders Brazil 2026 for an exclusive preview of NX, our new AI-native and AI-augmented security product line.
📍 São Paulo | October 21–22
🔗 Learn more: syhunt.com/en/?n=News.2026-N…
DaragonTech retweeted
🚨 First PHP, now Ruby...
Memory corruption vulnerabilities in Ruby's regex engine (Onigmo) could lead to RCE in applications that compile regular expressions from untrusted user input.
Not just ReDoS. These flaws are also behind the recent GitLab RCE alerts. So... update Ruby!
ruby-lang.org/en/news/2026/1…
#ruby #rubylang #rails #rubyonrails #cybersecurity
DaragonTech retweeted
🚨 CONFIRMED: PHP has officially acknowledged another RCE vulnerability, CVE-2026-115560, affecting specific session configurations even after the October 21 patches.
A separate issue, not a bypass of the original fixes. A patch is planned.
We've updated our defensive toolkit:
github.com/syhunt/php2shell-…
#php #cybersecurity
DaragonTech retweeted
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches.
The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses.
Our earlier concerns about PHP session handling remain relevant.
We've updated php2shell-protection with additional hardening guidance.
#php #cybercurity
github.com/syhunt/php2shell-…
DaragonTech retweeted
As if PHP2Shell wasn't enough for one day... now GitLab. 😅
🚨 CRITICAL GITLAB ALERT (CVSS 10.0)
CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers.
⚠️ Potentially affects 12 years of releases, dating back to 2014.
Patches available. Update immediately!
docs.gitlab.com/releases/pat…
#gitlab #cybersecurity
DaragonTech retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
nitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability.
fedi.katze.sh/@elise/1174793…
DaragonTech retweeted
php2shell is the most consequential vulnerability I have ever helped discover. I am proud of how our team worked closely in coordination with the PHP Foundation to provide support and to harden the patch in preparation for this release.
Please read more about our approach:
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
DaragonTech retweeted
🚨 UPDATE: PHP's official advisory confirms the php2shell vulnerabilities and session upload-progress attack path, but not that multipart blocking provides complete protection.
We've updated our repo with official findings and additional hardening measures. Patching remains essential.
github.com/syhunt/php2shell-…
#php #Cybersecurity #php2shell
DaragonTech retweeted
We've released php2shell-protection, an emergency Apache mitigation and testing toolkit for CVE-2026-109618 / CVE-2026-109619.
⚠️ Not based on official vulnerability details. This is a precautionary measure based on information circulating in the security community and zero-day PoC material we've obtained and reviewed.
It blocks multipart POST requests before they reach PHP. Not a substitute for patching.
github.com/syhunt/php2shell-…
#php #Cybersecurity
Huge congratulations to the team behind Decision 3.0! 🚀
They just dropped a massive contribution to the community: open multimodal foundation decision models ranging from 0.6B to 27B parameters.
nitter.cf/XunzhuoLiu/status/2109…
Introducing Decision 3.0: towards open multimodal foundation decision models ⚡
Open and state-of-the-art from 0.6B to 27B: #1 on both Jev Decision Index boards in our evaluation, on a new Pareto frontier.
HF collection 🤗: huggingface.co/collections/v…
#OpenSource #Jev #LLM
So Mistral is dropping Mistral Large 4 (Le Chonk) open weights at the end of October. 🐈
1T parameters, forged in Europe, and absolutely massive.
nitter.cf/MistralAI/status/21074…
Meet Mistral Large 4, aka Le Chonk.
• 1T parameters, natively multimodal. 49B active.
It is the best open weights model from US or Europe on aggregated benchmarks.
• State-of-the-art on critical workloads, including cyber defense, manufacturing and finance and it surpasses closed frontier models on visual grounding.
• Forged in Europe end-to-end and is deployable from Europe via our own Mistral Cloud infrastructure.
• Available to all via API today. Working with cybersecurity partners privately.
Open weights release end of October.
DaragonTech retweeted
DaragonTech started out as Syhunt's AI research division and is now an independent company.
Proud to see what it's shipping.
github.com/DaragonTech/LibLa… #OpenSource
DaragonTech retweeted
welcome LibLayaX ✨🚀
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
AI decisions in a few lines of Lua.
LLaya answers yes/no, choice and score questions about a text and returns a Lua table. It runs inside your program on LibLayaX: no server, no API bill, CPU or GPU
Lua 5.1 to 5.4, test kits included
github.com/DaragonTech/LLaya
#Lua #LuaLang #AI
AI decisions without an API bill
LibLayaX is an opensource alternative to the Jev API: a shared library that runs the Laya typed-decision model inside your application. Your data never leaves the machine
Win11, Linux, macOS. CPU or GPU
github.com/DaragonTech/LibLa…
#OpenSource #Jev
LibLayaX 1.0.15 is out: an open-source alternative to the Jev API. It runs Laya decision models locally, from any language, on CPU or GPU.
New:
- a model in one .tar file
- GPU under Wine, Apple Silicon included
github.com/DaragonTech/LibLa…
#OpenSource #AI #ML #LocalAI #Jev
Europe just dropped a new open-weight MoE model. 🇪🇺🔥
Kolibri-1 by Aleph Alpha
nitter.cf/Aleph__Alpha/status/21…
