moton (@moton) header
moton (@moton) profile picture

moton

@moton

a.k.a Matt has been the director of hacker events at https://nitter.cf/t.co/3vdsrhrFtr since 2006. https://nitter.cf/t.co/3znz9NUcCa

Joined October 2007
  • Tweets26.5K
  • Following603
  • Followers757
181Media
Photo by moton (@moton)Photo by moton (@moton)Photo by moton (@moton)Photo by moton (@moton)Photo by moton (@moton)
Hackers Exploit PHP2Shell RCE Vulnerabilities to Gain Root Access on Palo Alto Firewalls - gbhackers.com/hackers-exploi…
Hackers Exploit PHP2Shell RCE Vulnerabilities to Gain Root Access on Palo Alto Firewalls

Hackers Exploit PHP2Shell RCE Vulnerabilities to Gain Root Access on Palo Alto Firewalls

Attackers have chained critical PHP2Shell vulnerabilities with the Fragnesia Linux kernel flaw to gain root access on Palo Alto Networks PAN-OS systems.

gbhackers.com
41
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.

cisa.gov
1
19
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours - thehackernews.com/2026/10/wo…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

Attackers target a WordPress Core RCE flaw during upgrades, with Wordfence blocking 62,969 attempts in 24 hours. Patch available in 7.1.4.

thehackernews.com
40
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials - gbhackers.com/hackers-exploi…
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal...

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal...

Hackers exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances, allowing them to execute commands with root access, steal credentials, and probe internal networks.

gbhackers.com
32
Drupal warns of critical Commerce Core flaw exploited in attacks - bleepingcomputer.com/news/se…
Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.

bleepingcomputer.com
23
Binance links $6.3 billion crypto theft to compromised DevOps laptop - bleepingcomputer.com/news/se…
Binance links $6.3 billion crypto theft to compromised DevOps laptop

Binance links $6.3 billion crypto theft to compromised DevOps laptop

Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop.

bleepingcomputer.com
19
NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes safeguards - industrialcyber.co/nist/nist…
NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes...

NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes...

NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposing safeguards to limit AI agent access risks.

industrialcyber.co
29
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

cisa.gov
27
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware - bleepingcomputer.com/news/se…
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a...

bleepingcomputer.com
30
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks - bleepingcomputer.com/news/se…
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell...

bleepingcomputer.com
38
New Cisco firewall zero-day exploited to crash SSL VPN devices - bleepingcomputer.com/news/se…
New Cisco firewall zero-day exploited to crash SSL VPN devices

New Cisco firewall zero-day exploited to crash SSL VPN devices

Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable...

bleepingcomputer.com
35
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks - gbhackers.com/zero-days-expl…
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks

Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks

Chinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms.

gbhackers.com
32
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox - cybersecuritynews.com/micros…
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox

Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox

Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

cybersecuritynews.com
33
CISA Warns of VMWare ESX Logging Vulnerability Exploited in Attacks - cybersecuritynews.com/vmware…
Chinese Hackers Exploit VMware ESXi 0-Day to Hide Malicious Activity on Compromised Servers

Chinese Hackers Exploit VMware ESXi 0-Day to Hide Malicious Activity on Compromised Servers

CISA added actively exploited CVE-2026-41709, a VMware ESX flaw, to its Known Exploited Vulnerabilities catalog.

cybersecuritynews.com
31
Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices - cybersecuritynews.com/cisco-…
Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices

Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices

Cisco patched an actively exploited ASA and FTD flaw allowing unauthenticated attackers to restart devices and disrupt remote access.

cybersecuritynews.com
35
Kerio Connect Vulnerability: Stored XSS Exploited in Wild - securityonline.info/kerio-co…
Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes

Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes

TL;DR Attackers have exploited CVE-2026-112353, a stored XSS flaw in GFI KerioConnect Webmail, to steal user credentials and mailbox contents. According to the CVE record published by VulnCheck, &…

securityonline.info
43
FreeSWITCH Vulnerability Exploited via SIP MESSAGE - securityonline.info/freeswit…
FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands

FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands

TL;DR Attackers have exploited CVE-2026-116779, a critical FreeSWITCH vulnerability that lets a single SIP message run server commands. The flaw scores 9.8 on CVSS v3.1. SignalWire’s FreeSWI…

securityonline.info
48
Jackson-Databind Vulnerability PoC Exploit Out, CVSS 9.8 - securityonline.info/jackson-…
Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8)

Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8)

TL;DR FasterXML has published full details and a proof-of-concept exploit for CVE-2026-110879, a critical jackson-databind vulnerability. The flaw scores 9.8 on CVSS v3.1. It bypasses the fix for …

securityonline.info
1
90
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

cisa.gov
28
CISA warns of hackers now exploiting critical Node2Shell flaw - bleepingcomputer.com/news/se…
CISA warns of hackers now exploiting critical Node2Shell flaw

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and...

bleepingcomputer.com
32
Load more