English

Posts with #patchalert

#patchalert

Public posts on X that use #patchalert.

Related hashtags

  1. National CERT/CC@CERT_UG
    #PatchAlert: wp2shell is being actively exploited. Pre-auth RCE in WordPress Core, no plugins, no login needed. Update to 7.0.2 or 6.9.5 immediately. Full breakdown by Elastic Security Labs below. #CyberSafeUG #wp2shell #WordPress
    Elastic Security Labs @elasticseclabs
    wp2shell PoCs went public within hours of disclosure, and we are seeing active exploitation. Pre-auth RCE in WordPress Core. No plugins required. CVE-2026-63030 and CVE-2026-60137. We ran the Icex0 PoC end-to-end with Elastic Defend. On the host, every run ends the same way. The web server writes PHP under wp-content/plugins/, then spawns a shell. 4 rules caught it: - Payload Execution by Web Server: EDR, kills the shell on launch - PHP File Creation in WordPress Plugin Directory: catches the drop before execution - Suspicious Command Execution via Web Server: flags discovery commands from the web parent - Unusual Command Execution via Web Server: alerts on command lines the host has never run The PoC self-cleans after running. A missing plugin folder doesn't mean a clean host. Patch to 7.0.2 or 6.9.5. Hunt the IOCs while tooling is still stock. Full rule walkthrough, process lineage, and Attack Discovery correlation:
    035234
  2. Elastic Security Labs✓@elasticseclabs
    wp2shell PoCs went public within hours of disclosure, and we are seeing active exploitation. Pre-auth RCE in WordPress Core. No plugins required. CVE-2026-63030 and CVE-2026-60137. We ran the Icex0 PoC end-to-end with Elastic Defend. On the host, every run ends the same way. The web server writes PHP under wp-content/plugins/, then spawns a shell. 4 rules caught it: - Payload Execution by Web Server: EDR, kills the shell on launch - PHP File Creation in WordPress Plugin Directory: catches the drop before execution - Suspicious Command Execution via Web Server: flags discovery commands from the web parent - Unusual Command Execution via Web Server: alerts on command lines the host has never run The PoC self-cleans after running. A missing plugin folder doesn't mean a clean host. Patch to 7.0.2 or 6.9.5. Hunt the IOCs while tooling is still stock. Full rule walkthrough, process lineage, and Attack Discovery correlation:
    Download
    121714.9K
  5. National CERT/CC@CERT_UG
    #PatchAlert: GitLab team released security updates that address a critical security vulnerability >
    033
  8. $ta$h@lilredd211
    #PatchAlert why don't these NBA video games have the ability to influence trades in career mode?
    001
  10. National CERT/CC@CERT_UG
    #PatchAlert - Drupal has released security updates to fix third-party library vulnerabilities. Web administrators are advised to upgrade versions of drupal to the latest versions -
    Download
    022
  12. 🐕👮‍♀️Barbi@chloesmom28
    Here's a FANtastic #Patchalert 📺📀👊👍🐴
    Jeremy Balan @jeremybalan
    The one-eyed horse leads the Belmont preview in between periods on NBC.
    002
  13. Jeremy Balan@jeremybalan
    The one-eyed horse leads the Belmont preview in between periods on NBC.
    3234
  14. National CERT/CC@CERT_UG
    #PatchAlert Be more secure in 2020 -> support for Windows 7 is ending on 14 January 2020. Microsoft strongly recommends you upgrade to Windows 10 -
    146
  20. National CERT/CC@CERT_UG
    #PatchAlert: Oracle released a critical patch (cumulative) update that addresses multiple vulnerabilities >
    073
  21. Candice Curtis@skipaway2000
    🚨🚨 #PatchAlert!!!
    Horse Racing Nation @HR_Nation
    He's back! 👀 The one-eyed fan favorite Patch has a new trainer, and he'll try a different surface Saturday in his 2019 debut:
    013
  22. Horse Racing Nation✓@HR_Nation
    He's back! 👀 The one-eyed fan favorite Patch has a new trainer, and he'll try a different surface Saturday in his 2019 debut:
    Download
    51073
  26. Show more posts