4 results for “k3ym0”
gather round, children. let me tell you a story
in 2004, a wizard found a cursed bug in PHP and hid the spell
in 2020, a peasant reported it. nobody cared
in 2024, the elders found it again, drafted 3 fixes, all cursed, and argued for months
then in 2026 the machines came. found it in 3 days. popped WordPress in 48 hrs
the curse? memory_limit. the safety rail was the exploit all along
and everyone patched happily ever after (lol. lmao.)
RE: https://infosec.exchange/@badsamurai/117475644115110129
Stop doomscrolling your 47th “agentic AI will replace your SOC” thread and go watch @badsamurai at @BSidesPDX this Friday.
Community lists. Doing the fucking basics. Deterministic full-stops in the kill chain. No vendor magic beans, just free lists that block the shit your six-figure platform waved through.
Cyber intel is a team sport. Get your ass on the team.
BeyondTrust Remote Support, now shipping with Beyond Trust™ authentication
CVE-2026-102764, CVSS 9.3. The appliance simply did not check where messages came from. Unauth file ops, zero clicks, zero fucks given.
Exploited since August. Patched in October. That's a zero-day with a seven week head start.
Second critical of 2026 after February's RCE-to-ransomware speedrun. It's not PAM, it's a PAMphlet on how not to do auth.
The product name was a warning label this whole time.
#CISAUrgesYou #infosec #BeyondTrust #PatchYourShit #OnTheKEV