English

Posts with #PatchAlert

#PatchAlert

Public posts on X that use #PatchAlert.

Related hashtags

  1. National CERT/CC@CERT_UG
    #PatchAlert: wp2shell is being actively exploited. Pre-auth RCE in WordPress Core, no plugins, no login needed. Update to 7.0.2 or 6.9.5 immediately. Full breakdown by Elastic Security Labs below. #CyberSafeUG #wp2shell #WordPress
    Elastic Security Labs @elasticseclabs
    wp2shell PoCs went public within hours of disclosure, and we are seeing active exploitation. Pre-auth RCE in WordPress Core. No plugins required. CVE-2026-63030 and CVE-2026-60137. We ran the Icex0 PoC end-to-end with Elastic Defend. On the host, every run ends the same way. The web server writes PHP under wp-content/plugins/, then spawns a shell. 4 rules caught it: - Payload Execution by Web Server: EDR, kills the shell on launch - PHP File Creation in WordPress Plugin Directory: catches the drop before execution - Suspicious Command Execution via Web Server: flags discovery commands from the web parent - Unusual Command Execution via Web Server: alerts on command lines the host has never run The PoC self-cleans after running. A missing plugin folder doesn't mean a clean host. Patch to 7.0.2 or 6.9.5. Hunt the IOCs while tooling is still stock. Full rule walkthrough, process lineage, and Attack Discovery correlation:
    035234
  2. Elastic Security Labs✓@elasticseclabs
    wp2shell PoCs went public within hours of disclosure, and we are seeing active exploitation. Pre-auth RCE in WordPress Core. No plugins required. CVE-2026-63030 and CVE-2026-60137. We ran the Icex0 PoC end-to-end with Elastic Defend. On the host, every run ends the same way. The web server writes PHP under wp-content/plugins/, then spawns a shell. 4 rules caught it: - Payload Execution by Web Server: EDR, kills the shell on launch - PHP File Creation in WordPress Plugin Directory: catches the drop before execution - Suspicious Command Execution via Web Server: flags discovery commands from the web parent - Unusual Command Execution via Web Server: alerts on command lines the host has never run The PoC self-cleans after running. A missing plugin folder doesn't mean a clean host. Patch to 7.0.2 or 6.9.5. Hunt the IOCs while tooling is still stock. Full rule walkthrough, process lineage, and Attack Discovery correlation:
    Download
    121714.9K
  10. National CERT/CC@CERT_UG
    #PatchAlert - Drupal has released security updates to fix third-party library vulnerabilities. Web administrators are advised to upgrade versions of drupal to the latest versions -
    Download
    022
  14. National CERT/CC@CERT_UG
    #PatchAlert Be more secure in 2020 -> support for Windows 7 is ending on 14 January 2020. Microsoft strongly recommends you upgrade to Windows 10 -
    146
  15. National CERT/CC@CERT_UG
    #PatchAlert: Oracle Releases the January 2019 Patch Update for multiple security vulnerabilities. Details via -
    013
  16. National CERT/CC@CERT_UG
    #PatchAlert - @JuniperSIRT released several security updates for various Juniper products. We strongly advise network administrators to review and implement remedial measures via
    065
  23. Candice Curtis@skipaway2000
    🚨🚨 #PatchAlert!!!
    Horse Racing Nation @HR_Nation
    He's back! 👀 The one-eyed fan favorite Patch has a new trainer, and he'll try a different surface Saturday in his 2019 debut:
    013
  24. Horse Racing Nation✓@HR_Nation
    He's back! 👀 The one-eyed fan favorite Patch has a new trainer, and he'll try a different surface Saturday in his 2019 debut:
    Download
    51073
  27. $ta$h@lilredd211
    #PatchAlert why don't these NBA video games have the ability to influence trades in career mode?
    001
  28. Show more posts