DarkOperator

Andrez LAMOUROUX

[Reuters @Reuters]

Some government websites in Europe and elsewhere went offline after vulnerabilities in PHP, a widely used programming language, were uncovered using AI. Cybersecurity Reporter Raphael Satter explains why https://t.co/5Z2k5mTOnH

[HD Moore @hdmoore]

If you're looking for the most detailed AND *entertaining* way to read about the php2shell bugs, the Calif post is epic: https://t.co/9bg670ujNc

[The Hacker News @TheHackersNews]

⚠️ OpenAI's GPT-6 agents disabled security alerts and removed safety monitoring while carrying out routine coding tasks.

In one case, an agent falsely denied removing monitoring functionality.

OpenAI is now investigating why its agents weakened safeguards meant to oversee their behavior.

Read - https://t.co/I7WHqZYiaG

[sagitz @sagitz_]

Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP

WordPress pre-auth RCE: ✅
Drupal pre-auth RCE: ✅
Joomla pre-auth RCE: ✅
Remote memory disclosure of any PHP application: ✅

Read more ⬇️🧵

[SOCRadar® @socradar]

PHP2shell: 2 RCEs in PHP itself (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 each). PHP 8.1 and older get no official fix.

→ Free checker reads the PHP version your site exposes
→ Passive: no exploit attempts, no signup

Check Exposure: https://t.co/hilRX8ZkmJ
#PHP #VulnerabilityManagement #ThreatIntelligence

[DarkOperator @DarkOperator]

PHP2Shell: Critical PHP RCE Vulnerabilities Explained
https://t.co/RwhQNJ45Wx

[DarkOperator @DarkOperator]

@hyperconectado
PHPocalypse Tracker
Sites that went offline because of PHP2Shell, the October 2026 PHP remote code execution flaws CVE-2026-109618 and CVE-2026-109619, and when they came back.
https://t.co/C51nhNWorZ

[The Hacker News @TheHackersNews]

‼️ BREAKING - PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.

The flaws can enable unauthenticated code execution and expose server memory.

👉 PATCH NOW (CVE-2026-109618, CVE-2026-109619)

Details ➜ https://t.co/jJT7p6lala

[Unit 42 @Unit42_Intel]

CVE-2026-109618 and CVE-2026-109619 are two Critical RCE vulnerabilities in PHP with CVSS scores of 9.2. We advise organizations to assess web servers and patch immediately. Read our latest Threat Brief for mitigations: https://t.co/T2mqSXV4mm

[BleepingComputer @BleepinComputer]

PHP ships emergency patches for critical PHP2Shell flaws
https://t.co/QTZxrNIDgM

https://t.co/QTZxrNIDgM

[Reuters @Reuters]

Cyber agency warns websites may go dark as PHP prepares critical fix https://t.co/FKruHiwdWW https://t.co/FKruHiwdWW

[The Hacker News @TheHackersNews]

🔥 Google Chrome is rolling out new protections against #ClickFix attacks that trick users into running malicious commands.

These attacks bypass browser download protections. Chrome now detects suspicious copied commands and warns Enhanced Protection users before execution.

Read more: https://t.co/tcw4mA8cru

[WordPress @WordPress]

The PHP project has released fixes for 2 critical vulnerabilities affecting servers that host PHP applications. Site owners and technical teams should confirm their hosting provider’s update plan and update PHP immediately. Versions before PHP 8.2 no longer receive security updates. These issues are not specific to WordPress, and no WordPress update is required. https://t.co/2Bgok9Vdcq

[BleepingComputer @BleepinComputer]

Revolut discloses data breach exposing financial info, passports
https://t.co/8kJumX8kML

https://t.co/8kJumX8kML

[Cybernews @Cybernews]

See what he found ➡️ https://t.co/tUvkAX9sdy

[DarkOperator @DarkOperator]

@crsanchezx @Abraham_Bruce_ Si y la marca en Colombia no responde por las garantías. Después de 4 meses de comprada una Cupra Terramar, la marca no responde por la garantía del Sunroof roto. Fue necesario instaurar demanda ante la SIC (Superintendencia de Industria y Comercio)

[DarkOperator @DarkOperator]

@GMejiaPinto @lafm @LaMega Cuidado con esta marca. Después de 4 meses de comprada una Cupra Terramar, la marca no responde por la garantía del Sunroof roto. Fue necesario instaurar demanda ante la SIC.

[DarkOperator @DarkOperator]

@RevistaMotor Cuidado con esta marca. Después de 4 meses de comprada una Cupra Terramar, la marca no responde por la garantía del Sunroof roto. Fue necesario instaurar demanda ante la SIC.

[DarkOperator @DarkOperator]

@Autosdeprimera Cuidado con esta marca. Después de 4 meses de comprada una Cupra Terramar, la marca no responde por la garantía del Sunroof roto. Fue necesario instaurar demanda ante la SIC.