Pinned Tweet
I just spent two days at MIT with the Advanced AI Society, NANDA, enterprises, and startups.
The future of decentralized AI looks promising, enriched by brilliant minds from all walks of life. I'm grateful for the opportunity to contribute to this open-source ecosystem 🧵
The future of decentralized AI looks promising, enriched by brilliant minds from all walks of life. I'm grateful for the opportunity to contribute to this open-source ecosystem 🧵
9
17
113
6,714
Kantorcodes | ℏol/acc retweeted
The AI bots are relentless. 10K+ requests in the last 30 minutes from AI Agents.
This is traffic to the HOL Plugins Index alone. Despite our ToS banning commercial scraping of data, this is still what we have to deal with.
This is traffic to the HOL Plugins Index alone. Despite our ToS banning commercial scraping of data, this is still what we have to deal with.
2
5
9
466
Kantorcodes | ℏol/acc retweeted
The last 48 hours have been one of the worst security events in the modern internet and it was massively accelerated by AI.
At HOL, we’re building solutions to protect you. If you’re interested in learning how you can work with us or support our organization, reach out.
At HOL, we’re building solutions to protect you. If you’re interested in learning how you can work with us or support our organization, reach out.
3
8
18
2,215
The AI bots are relentless. 10K+ requests in the last 30 minutes from AI Agents.
This is traffic to the HOL Plugins Index alone. Despite our ToS banning commercial scraping of data, this is still what we have to deal with.
This is traffic to the HOL Plugins Index alone. Despite our ToS banning commercial scraping of data, this is still what we have to deal with.
2
5
9
466
body-parser is under every Express JSON route. One compressed POST with trailing junk kills the process. Patch today.
One gzipped POST crashes every Express app still on body-parser below 1.20.9 or 2.4.0. CVE-2026-111181 needs no login and runs before routing.
Upgrade body-parser. Or set inflate: false until you redeploy.
hol.org/blog/cve-2026-…
0
0
1
295
The last 48 hours have been one of the worst security events in the modern internet and it was massively accelerated by AI.
At HOL, we’re building solutions to protect you. If you’re interested in learning how you can work with us or support our organization, reach out.
At HOL, we’re building solutions to protect you. If you’re interested in learning how you can work with us or support our organization, reach out.
3
8
18
2,215
The step people skip: a GitHub token you pasted into Railway as a registry credential still works on GitHub after Railway removes it. Revoke it at github.com/settings/tokens. Same with AI keys: revoke at the provider before you redeploy, not after.
Kept API keys or wallet keys in Railway? An intruder got into Railway's store of customer environment variables, and wallets with keys there were drained of about $371K before the notice.
Rotate every Railway variable. Move funds off old wallet keys.
hol.org/blog/railway-b…
0
0
0
324
Before you trust node -v on your laptop, run this inside the image you ship: node -p "require('zlib').constants.BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH". -17 means patched. undefined means the Brotli fix is missing. Bumping undici or axios won't change that.
A stranger's server corrupts memory inside your Node.js app with one malformed compressed reply to fetch(). CVE-2026-111497 hits every supported Node.js line. Express 5 uploads reach the same Brotli bug.
Update to 22.23.4, 24.22.1 or 26.12.1.
hol.org/blog/cve-2026-…
0
0
0
336
Kantorcodes | ℏol/acc retweeted
When you contribute to HOL Guard, you’ll appear on the HOL Contributors page.
There are over 100 GitHub contributors on this list, ranked by commits and growing every day.
Come climb the ranks.
hol.org/guard/contribu…
There are over 100 GitHub contributors on this list, ranked by commits and growing every day.
Come climb the ranks.
hol.org/guard/contribu…
0
4
6
380
The Oct 12 GitLab patch does not cover this one. 19.4.2 is still exposed, and the entry point moved from CI config to .org file rendering. Before upgrading, grep exceptions_json.log for OtherMarkup timeouts on .org files. Five from one IP in 30 minutes is GitLab's alert line.
Patched GitLab on Oct 12? A crafted Org-mode file lets a stranger run code on your server without an account. CVE-2026-110264 hits self-managed GitLab CE/EE back to 7.0, and Oct 12 builds are still exposed.
Upgrade to 19.5.1, 19.4.3 or 19.3.6 today.
hol.org/blog/cve-2026-…
0
0
0
301
Kantorcodes | ℏol/acc retweeted
HOL Guard 3.50.0 landed today.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
1
5
7
454
Installing Go 1.26.10 on your laptop fixes nothing in production. The eMudhra denylist is compiled into each binary, so run go version on the binaries you actually deploy. Same for certifi and Node: check the container, not your machine.
Anyone can rebuild eight eMudhra CA keys from public certs and forge trusted HTTPS for any site. Browsers block them. Go's crypto/x509 before 1.26.10 doesn't (CVE-2026-111943), nor do old certifi, Node.js or Java.
Rebuild Go apps with 1.27.3 or 1.26.10.
hol.org/blog/cve-2026-…
0
0
1
271
If your LiteLLM proxy runs from :latest, it pulled this. Pin v1.106.2 by digest, not by tag, and rotate the provider keys in the proxy database first. Those are what the stealer goes after when DATABASE_URL is set.
Pulled LiteLLM from PyPI or Docker this morning? Version 1.107.0 ships a stealer that sends out your cloud keys, SSH keys and the AI provider keys your proxy stores. Docker's latest tag still pointed at it at 9:44 AM ET.
Pin 1.106.2, rotate keys.
hol.org/blog/litellm-1…
0
0
0
298
Check what your web server runs, not just php -v. The CLI and Apache or FPM can be different builds, and a package upgrade without a restart leaves the vulnerable PHP serving traffic. Our PHP2Shell write-up has a one-liner to catch workers still on the old binary.
Crafted upload requests let strangers run code on PHP web servers before WordPress or Laravel even loads. PHP2Shell (CVE-2026-109618) is a bug in PHP itself, and hosts are reporting attacks.
Upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart it.
hol.org/blog/cve-2026-…
0
1
1
531
Kantorcodes | ℏol/acc retweeted
Is a stranger mining crypto on your Plex Media Server? Old servers are being hijacked with no login. CISA put CVE-2026-96652 and three linked bugs on its exploited list today.
Update to 1.43.3.10861, then check the Codecs folder for files you didn't add.
hol.org/blog/cve-2026-…
Update to 1.43.3.10861, then check the Codecs folder for files you didn't add.
hol.org/blog/cve-2026-…
0
4
8
1,043
When you contribute to HOL Guard, you’ll appear on the HOL Contributors page.
There are over 100 GitHub contributors on this list, ranked by commits and growing every day.
Come climb the ranks.
hol.org/guard/contribu…
There are over 100 GitHub contributors on this list, ranked by commits and growing every day.
Come climb the ranks.
hol.org/guard/contribu…
0
4
6
380
The Plex bug chain on KEV today is worth an hour of your homelab time. Updating to 1.43.3.10861 closes it, but it won't remove a miner or proxy that's already running. Check Preferences.xml for a dump-yuv transcoder option you never set.
Is a stranger mining crypto on your Plex Media Server? Old servers are being hijacked with no login. CISA put CVE-2026-96652 and three linked bugs on its exploited list today.
Update to 1.43.3.10861, then check the Codecs folder for files you didn't add.
hol.org/blog/cve-2026-…
2
0
2
354
HOL Guard 3.50.0 landed today.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
1
5
7
454
