President @HashgraphOnline Creating a secure, private and distributed agentic Internet.
Joined January 2022
- Tweets11.8K
- Following659
- Followers10.8K
- Likes14K
Pinned Tweet
I just spent two days at MIT with the Advanced AI Society, NANDA, enterprises, and startups.
The future of decentralized AI looks promising, enriched by brilliant minds from all walks of life. I'm grateful for the opportunity to contribute to this open-source ecosystem 🧵
Kantorcodes | ℏol/acc retweeted
This is pretty crazy.
hol.org/plugins has processed ~6m+ requests today.
ALT Dashboard showing active users over time, with 4,629 users in the last 30 minutes and a bar graph of user activity per minute.
The detail in Cisco's advisory most teams will miss: turning off the VPN group list does nothing if DefaultWEBVPNGroup still has a secondary auth server. Check that group first. It crashes the firewall, it does not hand it over, but it can keep crashing it.
Cisco firewall rebooting on its own? Attackers crash ASA and FTD boxes with one crafted request to the SSL VPN login, no password needed. CVE-2026-76418 joined CISA's exploited list today.
Check VPN profiles for secondary auth, then patch.
hol.org/blog/cve-2026-76418-…
The line in Alpine's write-up every self-hosted GitLab admin should read: they upgraded to 19.3.6 and were still exposed, because GitLab's fix ships as a patch to its bundled Ruby. If you built GitLab on your own Ruby, check ruby -v, not just the GitLab version.
An attacker spent two days firing crafted CI configs at Alpine Linux's GitLab, and the GitLab upgrade did not close the hole. CVE-2026-97229 hit CISA's exploited list today.
On your own Ruby? Update it to 3.3.13, 3.4.12 or 4.0.9 too.
hol.org/blog/cve-2026-97229-…
HOL x AI: Episode 10
nitter.cf/i/broadcasts/1pJdRDqyZ…
The part that will bite people: 1.13.0 turns auto-login off, so a 1.12 box upgraded in place won't start until you set LANGFLOW_SUPERUSER_PASSWORD. If it ran on auto-login, the old langflow account keeps its generated password. Read the recovery steps first.
Running Langflow where others can reach it? Every release through 1.12.8 lets a stranger skip the login or run code on the server. One of the bugs, CVE-2026-93680, already has a Metasploit module.
Upgrade to 1.13.0. Set a superuser password first.
hol.org/blog/cve-2026-93680-…
This is pretty crazy.
hol.org/plugins has processed ~6m+ requests today.
ALT Dashboard showing active users over time, with 4,629 users in the last 30 minutes and a bar graph of user activity per minute.
A 2.7 CVSS bug on KEV is the tell here. It needs admin, so it doesn't get anyone in. What it bought WARP PANDA was ESXi commands with no log line. If your hosts don't forward syslog, fix that today along with the patch.
China-linked hackers ran commands on VMware ESXi hosts that never reached the logs, using a zero-day. CISA added the bug, CVE-2026-41709 in VMware ESX, to its exploited list today.
Patch to 8.0 U3j or later and forward ESXi logs off the host.
hol.org/blog/cve-2026-41709-…
The detail I'd act on: Fragnesia's change lives in memory, not on disk. Reboot first and the backdoor and the evidence vanish together. Copy /etc/pam.d/su and compare a normal read with dd iflag=direct before you restart anything.
Got Linux appliances online? Attackers turned web shells into root on 25 of them and reached a US government network. The bug: CVE-2026-46300 in the Linux kernel (Fragnesia), now on CISA's exploited list.
Check /etc/pam.d/su before rebooting, then patch.
hol.org/blog/cve-2026-46300-…
The part I'd act on: the old upgrader is what unpacks the 7.1.4 package, so today's update runs the vulnerable folder logic one last time. Add the deny rule for wp-content/upgrade/ in your server config before you click Update.
Anyone who requests the right URL while a WordPress site is updating can reach the unpacked copy's installer and plant their own config. WordPress 7.1.4 closes that window. Auto-updates open it too.
Update, then block web access to wp-content/upgrade/.
hol.org/blog/wordpress-7-1-4…
Kantorcodes | ℏol/acc retweeted
We just launched HOL Blue & Gold: hol.org/checkmark
You don't just get a shiny badge. You also get access to heaps of perks if you've built an AI Plugin, MCP Server or Skill before.
Here's what's included:
ALT The image displays a membership plan for HOL Registry, featuring options for Blue and Gold checkmarks with pricing details and benefits.
The 1.104.4 fix doesn't tighten the path check. It stops tailscaled doing socket forwarding as root, which is how OpenSSH has always worked. If you lean on Tailscale SSH check mode for prod, it doesn't cover this. Forwarding runs inside the approved session.
Run Tailscale SSH? One hacked laptop on your tailnet can forward a socket and get root on every server its SSH rules reach. Tailworm (TS-2026-014) is fixed in Tailscale 1.104.4.
Upgrade every SSH node, or set TS_SSH_DISABLE_FORWARDING=1 until you can.
hol.org/blog/tailscale-tailw…
Adobe's July bulletin for this bug still says it isn't aware of any exploits. Sansec watched 471 Magento stores get hit in one hour back in March. Patch, then go look for the files.
Strangers are dropping webshells into Magento stores via the guest cart, no account needed. CISA added PolyShell (CVE-2026-48356) in Adobe Commerce and Magento Open Source to its exploited list.
Patch with APSB26-73, then hunt for files you didn't add.
hol.org/blog/cve-2026-48356-…
The release notes for this fix say "No action needed to upgrade." If your LiteLLM proxy has an Enterprise license, ignore that line. Upgrade tonight and rotate the master key.
Paying for LiteLLM Enterprise? A request with no API key can make your proxy send its master key and every model provider key to an attacker's server.
Upgrade to 1.106.5 (or 1.105.6/1.104.8/1.103.10) and rotate that key. Open source installs are safe.
hol.org/blog/litellm-enterpr…
The first in-the-wild Brotli exploit failed: ELLIO's replay crashed Node 24.22.0 fifty times without a shell. The working chain is public, though. Run node -v inside every image you deploy today.
Attackers are sending booby-trapped compressed uploads at Node.js 24.22.0 servers to get a shell. CISA added the Brotli bug, CVE-2026-111497, to its exploited list today.
Upgrade Node.js to 22.23.4, 24.22.1 or 26.12.1 and rebuild your images.
hol.org/blog/cve-2026-111497…
We just launched HOL Blue & Gold: hol.org/checkmark
You don't just get a shiny badge. You also get access to heaps of perks if you've built an AI Plugin, MCP Server or Skill before.
Here's what's included:
ALT The image displays a membership plan for HOL Registry, featuring options for Blue and Gold checkmarks with pricing details and benefits.
You also get faster rescans on the HOL Plugins Index.
Blue: within an hour of a new release.
Gold: scans start within 30 mins of a release tag with our GitHub App.
This is great for SEO and distribution, especially if you're pushing updates regularly.
We've also added Analytics & Insights.
See where visitors come from, which install links people click, and how your plugins are being discovered.
Gold includes analytics across all your verified listings.
Blue: $4.99/mo
Gold: $29/mo
hol.org/checkmark
PHP2Shell made CISA's KEV list today. The step most teams will skip: save the logs and ps output before restarting PHP. The restart wipes the one record that shows whether someone already had a shell on the box.
Run PHP web servers? Attackers are opening shells on unpatched ones with PHP2Shell, and CISA just added CVE-2026-109618 to its exploited list, due Oct 29.
Save logs and the process list, then upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart.
hol.org/blog/cve-2026-109618…
ALT Terminal mock of a PHP web server on 8.4.26 marked Not fixed, with a shell running under Apache, next to a card reading CISA KEV added Oct 26, federal patch deadline Oct 29 plus forensic triage, and a fix card: save logs and the process list, then upgrade PHP.