barnus @barnussec

barnus.dev Joined September 2026

Tweets

9
Followers

2
Following

106
Likes

11

The PHP Foundation @ThePHPF

15 hours ago

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc

43 813 3K 314K 1K

View Details

Node.js @nodejs

2 days ago

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 nodejs.org/en/blog/vulner… #NodeJS #Security

131 3K 13K 1.2M 4K

View Details

Cyber Security News @The_Cyber_News

23 hours ago

⚠️ Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List Details: cybersecuritynews.com/linux-kernel-f… Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), include two critical flaws rated CVSS 9.0 that could let a remote attacker run code on systems using the Linux kernel’s KSMBD file server. Other reports describe local privilege-escalation and information-disclosure risks. The reports appeared on public lists, and Linux kernel maintainer Greg Kroah-Hartman questioned why some submissions were sent there without patches. #cybersecuritynews

15 267 948 54K 221

View Details

barnus @barnussec

16 hours ago

Worst week of cybersecurity.

0 0 0 2 0

View Details

Cyber Security News @The_Cyber_News

18 hours ago

‼️ BREAKING: Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability Details: cybersecuritynews.com/emergency-java… Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle Java SE and GraalVM. The update blocks affected intermediate certificate authority certificates linked to eMudhra. According to Oracle’s security advisory, the issue affects the Java Secure Socket Extension, or JSSE, component. Oracle rates exploitation as low complexity, with no authentication or user interaction required. Successful attacks can expose or change sensitive data, although the risk matrix lists no availability impact. #cybersecuritynews #vulnerability

96 1K 5K 493K 1K

View Details

International Cyber Digest @IntCyberDigest

22 hours ago

‼️ After PHP2Shell comes Node2Shell, a critical bug found by OpenAI's Codex Security that can let attackers run code in Node.js apps. It was successfuly demonstrated on the official Node.js 24.22.0 image. Node 20, 23 and 25 (all EoL) get no fix.

68 444 4K 272K 1K

View Details

SinSinology @SinSinology

2 days ago

To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.

52 265 2K 171K 327

View Details

php-net @php_net

2 days ago

PHP 8.5.12 released - 90 fixes in 29 components, including security fixes (CVE-2026-109618, CVE-2026-109619). Changelog + downloads: php-net.pro/news/php-8-5-1…

42 3K 5K 718K 727

View Details

Cyber Security News @The_Cyber_News

4 weeks ago

⚠️ Pentagon Data Breach - Hackers Reportedly Accessed 3 Million People's Sensitive Data Details: cybersecuritynews.com/pentagon-data-… The Pentagon has confirmed a major data breach involving a Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information belonging to more than three million people. The incident affected 2.76 million living individuals and approximately 294,000 deceased people, placing one of the Department of Defense’s most important personnel repositories under renewed scrutiny. A small number of unauthorized users accessed the DMDC system between October 2025 and July 2026. The intrusion was linked to a security vulnerability in a file-sharing system, which allowed outsiders to reach files stored on an affected server. #cybersecuritynews