Pinned Tweet
Pinning this thread of #CTI tips and lessons learned. I'll add to it at random times.
#threatintel
x.com/klrgrz/status/…
#threatintel
x.com/klrgrz/status/…
11
19
117
Sorry folks, we have a confirmed PHP compromise with post-exploit activity. Still not the widespread outbreak we all braced for, but it’s actively exploited in the wild. Updated threat brief:
unit42.paloaltonetworks.com/cve-2026-10961…
unit42.paloaltonetworks.com/cve-2026-10961…
22
107
354
76,053
Andy Piazza retweeted
#BSidesNoVA has a Happy Hour at GMU next Fri at 5PM for Fri or Sat conf attendees sponsored by @Altus_CC
We have fireside rants if you want to hear, costume contest if you want to dress up, free food and drink if you don't want those
Ticket for the conf eventbrite.com/e/bsidesnova-2…
We have fireside rants if you want to hear, costume contest if you want to dress up, free food and drink if you don't want those
Ticket for the conf eventbrite.com/e/bsidesnova-2…
0
1
2
319
Andy Piazza retweeted
This is all just a very aggressive Cybersecurity Awareness Month campaign
14
294
2,042
25,723
Andy Piazza retweeted
To teach a lesson,
After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again.
A big budget can buy a domain. It shouldn't buy someone else's research credit.
If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve.
Hack the planet. Credit the researchers.
After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again.
A big budget can buy a domain. It shouldn't buy someone else's research credit.
If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve.
Hack the planet. Credit the researchers.
51
265
1,926
172,491
Andy Piazza retweeted
Why is Wiz taking any credit for this? Their blog post words it like they discovered it.
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: x.com/lcfr_hax/statu…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
34
33
613
39,429
Andy Piazza retweeted
@4A4133 disclosing ANOTHER bug today is like proposing at someone else's wedding
3
28
585
26,416
This one has it all - directly from the threat actor's viewpoint. Take a look inside of AI-enabled attacks including credential theft and data exfil, VoIP fraud, Wi-Fi pw cracking, cryptocurrency reconnaissance, C2 operations.
unit42.paloaltonetworks.com/ai-assisted-cy…
unit42.paloaltonetworks.com/ai-assisted-cy…
0
0
9
701
Our #PHP threat brief is live. Update your systems ASAP as they become available, consider taking systems offline until they can be patched.
unit42.paloaltonetworks.com/cve-2026-10961…
unit42.paloaltonetworks.com/cve-2026-10961…
0
0
11
742
Andy Piazza retweeted
@klrgrz It's beginning to look a lot like B-Sides
Everywhere you post.
Take a look at the Keynote here
Tales of wins and fears
And so much else this year to learn and know . . .
Everywhere you post.
Take a look at the Keynote here
Tales of wins and fears
And so much else this year to learn and know . . .
0
1
1
57
Andy Piazza retweeted
This month's Meet & Greet moves to BSides NoVA. 🎃
Fri Oct 30, 5 PM: their 10th-anniversary Halloween Party at Mason Square, Arlington. Register for BSides, then RSVP with the community:
meetup.com/cover6communit…
#BSidesNoVA #Cover6Community
Fri Oct 30, 5 PM: their 10th-anniversary Halloween Party at Mason Square, Arlington. Register for BSides, then RSVP with the community:
meetup.com/cover6communit…
#BSidesNoVA #Cover6Community
0
1
2
123
I am MUCH EXCITE for this keynote!!!
@BSides_NoVA OCT 31st Keynote: @mubix
Stories from the Red Side
Creating tools, wielding donuts, walking on water, etc.
With 25 years of experience, Rob's been though crazy situations.
And we're gonna hear about it!
Info: bsidesnova-2026.sessionize.com/session/1357825
Tickets: eventbrite.com/e/bsidesnova-2…
1
0
3
292
Andy Piazza retweeted
There’s nothing wrong with saying; I like using an LLM coz they make this shit;
Easier, faster, more fun etc.
Pretending they change the entire game doesn’t make any sense.
Easier, faster, more fun etc.
Pretending they change the entire game doesn’t make any sense.
6
3
106
15,694
We shifted our hangout out to Friday night after workshops this year so folks are comfortable getting home for Halloween after the talks on Saturday.
We are hosting a Happy Hour for the @BSides_NoVA conference on Oct 30th, in the GMU Arlington Campus, room 118! Anyone attending the conference on Friday or Saturday can come, there will be free food, free drinks, free socializing, and a costume contest! Hope to see you there!
0
0
8
489
Andy Piazza retweeted
A huge thanks to @Altus_CC for being a BSidesNOVA Platinum sponsor and sponsoring our Friday happy hour!
For over 20 years Altus Consulting has provided customers in the government and commercial sectors with mission-focused IT and Cyber Security services. altuscc.com
For over 20 years Altus Consulting has provided customers in the government and commercial sectors with mission-focused IT and Cyber Security services. altuscc.com
0
2
5
296
Andy Piazza retweeted
Employers worldwide are pulling back on AI as they navigate a flood of errors and low-quality work that sap employee time, raise privacy and security risks, and drive up costs theguardian.com/technology/202…
117
2,805
10,160
780,122