Schomer — Principal Security Solutions Architect & Founder
framework engine. I just locked in the architecture showcase for the Build With AI Hackathon. Built completely from scratch as a solo backend developer on a non-rooted Android device running Termux, the ETBV gateway engine achieves absolute logic assurance. The Metrics: • Valid…
A critical flaw affecting 70% of all websites has the cybersecurity world panicked Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take ov…
I'm happy to share that I've been working through the OWASP Top 10 on TryHackMe, building my understanding of common web application security risks through hands-on practicals. During this learning journey, I've explored topics including: - Injection— understanding how unsafe in…
Schomer — Principal Security Solutions Architect & Founder
🚀 [PROJECT MILESTONE] Secure Agentic Commerce is Here: Introducing ETB PayShield for the PayPal AI Hackathon High-volume digital checkouts and autonomous AI commerce flows face an overlooked vulnerability vector: traditional application security configurations run too high up t…
AI is getting better at finding vulnerabilities. That means “we'll fix security later” is becoming an increasingly expensive strategy. For years, security teams have had to search through enormous codebases looking for weaknesses. Now AI can help automate parts of that process.…
https://youtu.be/jxJujICo9xc في الفيديو ده من مجتمع Information Security Tutorials هنتكلم عن ثغرات PHP2Shell اللي ظهرت في أكتوبر 2026، وليه الثغرات اللي بتصيب الـ PHP Runtime ممكن تمثل خطورة كبيرة على خوادم الويب والتطبيقات اللي بتعتمد عليه. هنناقش الثغرتين CVE-2026-109618 وCVE-…
Schomer — Principal Security Solutions Architect & Founder
AI found the bug. Humans took the blame. Meanwhile, the internet went dark. The current global PHP crisis (php2shell) forced entire government and healthcare networks in Europe to literally pull the plug and go offline. Why? Because an AI discovered a remote code execution (RCE)…
I've been working on a personal project called Foxscan 🦊, and I wanted to share it with the cybersecurity community and get some feedback. The idea came from a problem I kept running into: different news outlets covering the same cybersecurity incident, each reporting different…
Schomer — Principal Security Solutions Architect & Founder
🔒 Announcing ETB PayShield: Layer-Zero Security for Agentic Commerce Traditional application security models operate post-execution, leaving automated transaction nodes and AI agents exposed to severe injection vectors and zero-click exploits. As the founder of ETBV, I engineer…
I’ve completed the Using the Metasploit Framework module on HTB Academy. During this module, I gained hands-on experience with Metasploit, including searching for exploits, configuring payloads, managing sessions, and using Meterpreter to investigate compromised systems. I also…
Schomer — Principal Security Solutions Architect & Founder
Chained Memory Exploits vs. Authentication Spoofing: Why the Application Plane is Failing Under Fire The simultaneous exploitation of BeyondTrust (CVE-2026-102764) and the PHP2Shell memory chain (CVE-2026-109618/19) exposes the complete collapse of application-level trust bounda…
Beyond the Leak Site: What the Azazel Case Reveals About Ransomware Attribution Independent Threat Research | 12 October 2026 Introduction Ransomware data leak sites are a valuable source of threat intelligence. They provide visibility into victim claims, extortion activity, and…
Schomer — Principal Security Solutions Architect & Founder
Moving Validation Before Allocation: Securing Agentic Commerce at Layer Zero As automated transaction networks and autonomous AI agents take over global checkout paths, application security interfaces are facing a catastrophic engineering gap: traditional Web Application Firewal…
AI is no longer just a cybersecurity tool. It is becoming part of the attack itself. That changes the game. We're used to thinking about AI as something defenders use to: → Detect anomalies → Analyze logs → Find vulnerabilities → Automate investigations → Respond to incidents Bu…
What if the code running your website can become the doorway into your server? That's exactly why the latest PHP security incident deserves attention. PHP has released emergency security updates for two critical vulnerabilities: CVE-2026-109618 CVE-2026-109619 Both are rated CVS…
🚨 Something is taking shape behind the scenes… I’ve been quietly working on a my own independent cybersecurity project that’s evolving well beyond what I originally imagined. It started with a simple question: What if I could build my own environment to observe, investigate and…
Schomer — Principal Security Solutions Architect & Founder
Deconstructing Parser Breaches: How Structural Anomaly Constraints Prevent Memory Leakage and RCE Introduction Many severe remote code execution (RCE) flaws and authentication bypasses are actually parser consistency bugs. When a low-level service (like an SSH daemon, an API pro…
🐍Learning Python through a cybersecurity lens. In this article, we explore another fundamental yet often-overlooked aspect of building useful security tools: console input and output. https://jjeuribe.github.io/posts/python-for-cybersecurity-console-input-and-output/
Aspiring Cybersecurity / SOC Analyst transitioning into the industry following intensive cybersecurity training and hands-on practical study. Developing skills in threat detection, incident investigation, SIEM, networking, log analysis and security monitoring, with practical exp…
Schomer — Principal Security Solutions Architect & Founder
🚀 MILESTONE UPDATE: DECOUPLING RUNTIME ENFORCEMENT FROM THREAT ANALYTICS A core structural flaw in traditional defensive security is the coupling of packet filtration with sluggish application-layer telemetry stacks. Real-time visualization is a vanity metric if your dashboard…
🐍 Learning Python through a cybersecurity lens. Now that you know how to interact with Python through the console, it's time to learn how to make your output more readable and organized to create cleaner, more visually appealing reports. https://jjeuribe.github.io/posts/python-…
Schomer — Principal Security Solutions Architect & Founder
Critical Perimeter Alert: The Reality of Chained Zero-Clicks Today's CISA KEV expansion highlights a massive reality check for enterprise defense. Look at the Ivanti Connect Secure chain (CVE-2026-104935): 1. Auth bypass via an edge script (welcome.cgi) 2. Arbitrary file-write v…
Schomer — Principal Security Solutions Architect & Founder
Breaking the Symmetrical Asymmetry with Real-Time STIX 2.1 Pipeline Mapping If you’re still trying to secure critical infrastructure by manually grepping firewall syslog entries after an incident occurs, you’ve already lost the execution race. When threat actors execute automate…
Every week someone sends us a version of the same message: I've applied to forty roles and I can't get past the first filter. Okeeey.. 28.5% of cybersecurity job postings now ask for AI skills. Last year it was 14.2%. Doubled in twelve months. Same titles: Security Engineer, SOC…