Oliver Sild

@OliverSild

Nerding out on cyber security, community building, and open source software | CEO of @patchstackapp | 🇪🇪 Pärnu

Pärnu, Estonia

oliversild.com

Joined August 2010

865 Following

1,609 Followers

Replies Reposts Media

Pinned
Oliver Sild
@OliverSild
Jan 16, 2023
In 2016, I made a post to Reddit that #WordPress (and other CMSs) need a proper vulnerability management tool and an effective way to prevent attacks against vulnerabilities in plugins. Here's what happened 🧵1/6
9
Oliver Sild
@OliverSild
Oct 25
Different security companies now reporting #PHP2Shell weaponised attacks with matching IOCs
PHP2Shell (CVE-2026-109618, CVE-2026-109619): briefing, exploitation and mitigations | Vulnocalypse
From vulnocalypse.com
1
Oliver Sild
@OliverSild
Oct 23
Remember the Plague Inc game? Why not track vulnerabilities the same way? Enjoy 😅 vulnocalypse.com
5
Oliver Sild
@OliverSild
Oct 21
⚡️Active exploitation attempts of PHP2Shell confirmed by Cloudflare and by multiple web hosting partners of @patchstackapp (has been going on for hours already).
Dane Knecht 🦭
@dok2001
Oct 21
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show
Quote
The PHP Foundation
@ThePHPF
Oct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
2
Oliver Sild
@OliverSild
Oct 21
You know it'll be "fun" when PHP Core Developer considers the best mitigation to be "turning off a server for a day". 🙃
25