Eric Geller

Eric Geller

@ericjgeller.com

Senior reporter at @CybersecurityDive.bsky.social covering all things digital security. I also co-host @hothtakes.bsky.social. | Send me tips: https://ericjgeller.com/contact.html

20.1K followers200 following5.6K posts

View full thread
Eric Geller
@ericjgeller.com

Second agency—EPA—gets back to me about PHP2Shell. Spokesperson: "EPA has completed its assessment of the recently disclosed PHP vulnerabilities across its websites and servers. EPA is continuing to monitor its environment and will address any identified risks in accordance with CISA directives."

View full thread
Eric Geller
@ericjgeller.com

🔥🔥 In a blog post about the process that led up to the disclosure of the PHP2Shell vulnerabilities, the PHP Foundation slams Chainguard for "unilaterally [breaking] the embargo." "This disregarded weeks of work by many parties toward a coordinated disclosure." thephp.foundation/blog/2026/10...

View full thread
Eric Geller
@ericjgeller.com

So far, the only major federal agency that has responded to my PHP inquiry is NASA. A spokesperson says "NASA assessing and patching website software as needed, in accordance with vendors’ release instructions." They directed me to CISA for more info (unlike HHS, which directed me to NSA).

Eric Geller
@ericjgeller.com

Well that escalated quickly! cyberscoop.com/emudhra-shut...

cyberscoop.comeMudhra kills its certificate business after researchers cracked its private keys in under a secondeMudhra is shutting down its SSL/TLS certificate business after researchers cracked its intermediate private keys in under a second, prompting global browser bans.
Eric Geller@ericjgeller.com

Busy day in cyber. www.cybersecuritydive.com/news/website...

cybersecuritydive.comWeak encryption certificates could have let hackers easily spoof websitesMajor web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
View full thread
Eric Geller
@ericjgeller.com

I've asked major agencies how they're dealing with the PHP vulnerabilities. No one has given me an answer. HHS referred me to NSA, which is strange, since CISA is supposed to be in charge of managing incidents like this.

Eric Geller
@ericjgeller.com

Amazon says its telemetry shows attempts to exploit the PHP vulnerabilities on Oct. 17, four days before they were disclosed. aws.amazon.com/blogs/securi...

aws.amazon.comAmazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | Amazon Web ServicesAmazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The expl...
Eric Geller
@ericjgeller.com

My takeaway from this is that Trump sees his national cyber director all the time!

Headquarters@headquartersnews.bsky.social

Trump: National cyber director Sean... Camin... chkro... Where are you Sean? Where da hell... I gotta get this name so perfeck. Cairncross.

Eric Geller
@ericjgeller.com

Microsoft says China-linked hackers used agentic AI tool in a hacking campaign against hundreds of organizations in multiple industries (gov, energy, military, IT...) that occasionally breached cloud environments. MSFT also pins ConnectWise campaign on same group. www.microsoft.com/en-us/securi...

Eric Geller
@ericjgeller.com

Deployment will be the crucial test of this partnership. Research has shown that many utilities can't use free cybersecurity services if they don't get help deploying them. www.cybersecuritydive.com/news/water-c... www.cybersecuritydive.com/news/water-c...

cybersecuritydive.comHow volunteer cyber experts are helping protect rural water systemsA first-in-the-nation program is yielding promising results as it charts a path for supporting the U.S.’s most vulnerable infrastructure.
View full thread
Eric Geller
@ericjgeller.com

White House statement: "This discovery demonstrates exactly why American leadership in [AI] is so critical. ... The Administration is tracking and coordinating with federal agencies and leading [AI] labs to expedite the release of the fix and protect American networks and critical infrastructure."

View full thread
View full thread
Eric Geller
@ericjgeller.com

OpenAI, whose model helped researchers discover the vulnerabilities: "Given the severity of these flaws and PHP’s widespread use, we consider this one of the most impactful security issues in recent memory." openai.com/index/coordi...

openai.comPatch the Planet: global response coordination as agents uncover critical vulnerabilitiesPatch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.
Eric Geller
@ericjgeller.com

Good roundup of CISA and election security during Trump 2.0 www.propublica.org/article/cisa... but regarding the lead, the "shocking" part is not asking CISA to hack a voting machine (they do pen-testing and red-teaming all the time) but asking it to violate standard vuln-disclosure processes.

Eric Geller
@ericjgeller.com

Have you listened to @hothtakes.bsky.social's new episode yet? We're talking about the news that Jon Watts is directing the first film in a new Skywalker trilogy. We've got lots of thoughts about how to make it good. hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

Whether you're excited for or dreading the new Skywalker film trilogy, you won't want to miss @hothtakes.bsky.social's new episode, where we consider what Disney will need to do to make it successful. hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

With a new Skywalker film trilogy apparently on the way, @gracesegers.bsky.social, @byrdinator.bsky.social, and I have thoughts on how to make it good, including ... big time gaps between films? Could it work? Listen to @hothtakes.bsky.social as we discuss... hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

Disney is apparently still pushing ahead with plans for a new Skywalker trilogy. We talk about that in a new episode of @hothtakes.bsky.social. Will John Boyega come back? When will the movies take place? Join us as we speculate... hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

There's apparently going to be a new Star Wars trilogy focusing on the Skywalker family. On today's new episode of @hothtakes.bsky.social, we dive into what that could mean and what lessons Disney should learn from the past. hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

Excited to reunite with @gracesegers.bsky.social and @byrdinator.bsky.social on @hothtakes.bsky.social to discuss the reported new Skywalker trilogy and whether Disney will learn from its mistakes with the sequels. hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…
Eric Geller
@ericjgeller.com

The @hothtakes.bsky.social crew returns to discuss the recent news that Jon Watts is directing the first film in a new Skywalker trilogy. Do we need this? Do we want it? We've got thoughts. hothtakes.wordpress.com/2026/10/16/h...

hothtakes.wordpress.comHoth Takes #74: What Was the Han Solo Movie Called?Recent news reports about Jon Watts directing the first movie in a new Skywalker saga trilogy have us thinking…do we really need more movies about this family? Eric, Grace, and Haley have strong fe…