
MyCERT is Malaysia Computer Emergency Response Team. MyCERT is a department of CyberSecurity Malaysia (https://nitter.cf/t.co/GO9BfE1lcc). Email: [email protected]
Cyberjaya, Malaysia
Joined July 2009
- Tweets3.2K
- Following0
- Followers1.9K
- Likes13
MyCERT retweeted
🚨 CRITICAL: 9.8/10 LINUX KERNEL VULNERABILITY EXPOSES SERVERS TO REMOTE ATTACKS
A serious vulnerability has been discovered in the Linux kernel's TCP networking code, potentially allowing unauthenticated attackers to crash vulnerable servers remotely.
CVE-2026-98432 is a use-after-free vulnerability triggered by specially timed network requests.
⚠️ Here's what makes this concerning:
No authentication required.
Remote attacks against exposed TCP services.
Potential kernel memory corruption and server crashes.
Multiple Linux distributions affected, including Ubuntu, Red Hat, and Amazon Linux.
Ubuntu confirms that versions 22.04, 24.04, 26.04, and 26.10 remain vulnerable, with security fixes still in progress.
The immediate demonstrated concern is denial of service. Remote system takeover has not been established, despite the critical 9.8 CVSS rating.
Linux administrators should review affected kernels and apply vendor security updates as soon as they're available.
🔒 Get a free security assessment at lucidsecurity.si
Source: ubuntu.com/security/CVE-2026…
🤖 Made with AI
MA-1490.102026: MyCERT Alert - New Critical PHP Vulnerability (CVE-2026-115560) and Analysis on PHP2Shell Active Exploitation Script
#php2shell
mycert.org.my/portal/details…
MyCERT retweeted
🚨 CONFIRMED: PHP has officially acknowledged another RCE vulnerability, CVE-2026-115560, affecting specific session configurations even after the October 21 patches.
A separate issue, not a bypass of the original fixes. A patch is planned.
We've updated our defensive toolkit:
github.com/syhunt/php2shell-…
#php #cybersecurity
MyCERT retweeted
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
MA-1484.102026: MyCERT Advisory - Critical PHP2Shell Vulnerabilities in PHP Allowing Unauthenticated Remote Code Execution
#php2shell
mycert.org.my/portal/details…
MA-695.012018: MyCERT Alert – Fake Bank Negara Malicious APK – New Variant.
mycert.org.my/en/services/ad…
MyCERT retweeted
Mobile beasts and where to find them
#MobileSecurity by @kaspersky
Part 1: kaspersky.co.uk/blog/mobile-…
Part 2: kaspersky.co.uk/blog/mobile-…
MyCERT retweeted
Fake banking apps on Google Play leak stolen credit card data
#MobileSecurity #AndroidSecurity by @LukasStefanko and @welivesecurity
welivesecurity.com/2018/07/2…
MyCERT retweeted
Interesting attack chain: enrol to a malicious #MDM server, replace and #backdoor messaging apps. #CyberEspionage #socialengineering #apt #BOptions #india blog.talosintelligence.com/2…
@avman1995
New Virus Decides If Your Computer Good for Mining or Ransomware. thehackernews.com/2018/07/cr… via @TheHackersNews
MyCERT retweeted
Replying to @rafi0t
As an ex-Mycert I’m happy to learn about your observation. Check out a recent @apnic post on the founder and first head of @mycert (est. 1997) blog.apnic.net/2018/06/27/wo…
MyCERT retweeted
Probable ioc's of RedDawn NK Android APT 24be606a3d946b2d4ee01399e6fe89593125eb7fd848e37767e7f5aeb28c734a, c07ba1f6aefb11dcfc9871b2bf1028cabfe7bf3f2b1b084f0be58c6ac352282f, 1710c994e54006d512047e1716350053c35a63e3cac244af7365abc39fbb531c securingtomorrow.mcafee.com/…
Proof-of-Concept Code for Memcached DDoS Attacks Published Online.... fb.me/1VtxM7ffy
How hidden mining threatens your business. kaspersky.com/blog/miners-th… fb.me/8r1JRv7jW
SMBv3 Null Pointer Dereference vulnerability (CVE-2018-0833).... fb.me/1HKYMkhJ0
Zero-day vulnerability in Telegram. securelist.com/zero-day-vuln… fb.me/F8K3PRTn
World Police Take Down "Infraud" Carding Operation.... fb.me/1w7jgSXHy










