Latest activity

That depends. An attacker with privileges on the web server could 1. install a password logger and take over user accounts (also on other services if you reuse passwords) 2. deploy code that uses a vulnerability in your browser to attack you.

Looks like Ubuntu has released backported fixes to php 5/7.0/7.2/7.4/8.1, and Red Hat has to 7.4 https://ubuntu.com/security/CVE-2026-109618#status https://ubuntu.com/security/CVE-2026-109619#status...

Also interesting that in the past, he/BFRO and other groups have promoted photos and videos that look worse or are lower quality than the "creature" in the new film, as being real. For example (quoting a now deleted tweet from Moneymaker)...

That depends. An attacker with privileges on the web server could 1. install a password logger and take over user accounts (also on other services if you reuse passwords) 2. deploy code that uses a vulnerability in your browser to attack you.

21 Oct 2026 Security advisory: Critical remote code execution vulnerabilities, update now PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly...

Looks like Ubuntu has released backported fixes to php 5/7.0/7.2/7.4/8.1, and Red Hat has to 7.4 https://ubuntu.com/security/CVE-2026-109618#status https://ubuntu.com/security/CVE-2026-109619#status...

It does have analyzers but the PHP runtime is written in C and both of these CVEs are memory management bugs in that C code. It can be hard to identify these bugs because the scenarios they arise in can be complex and the language itself allows...

Them not putting out official patches or binary/container builds for anything prior to 8.2 is going to be a problem for years. Sure the release schedule says they only officially support back to 8.2 and this will motivate orgs to upgrade faster...

This is going to be quite a big deal. Executive Summary Wiz Research uncovered multiple critical vulnerabilities in core PHP, a popular general-purpose scripting language that powers 70% of all websites in the world. Successful exploitation...

21 Oct 2026 Security advisory: Critical remote code execution vulnerabilities, update now PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly...

Also interesting that in the past, he/BFRO and other groups have promoted photos and videos that look worse or are lower quality than the "creature" in the new film, as being real. For example (quoting a now deleted tweet from Moneymaker)...

It's interesting to see some of the expected reactions. Matt Moneymaker of the BigFoot Research Organization (BFRO) appear to have hand waved it away as possible AI, when he was first told about the new footage last spring: Matt Moneymaker of...

And sometimes, if the budget was low enough, you just had to take your laugh on the chin and move on. Not having a monster suit that could withstand closeups without getting a laugh was not always a barrier to getting your low budget film...

But no one could create a realistic ape man in 1967/ Bull Montana in The Lost World 1925

Never go to dinner with Bigfoot, he's a big eater and when the check comes he'll always say he forgot his wallet in his other suit and that he'll pay you back the next time you find him.