President @HashgraphOnline Creating a secure, private and distributed agentic Internet.
- Tweets 11,577
- Following 659
- Followers 10,792
- Likes 13,993
Pinned Tweet
I just spent two days at MIT with the Advanced AI Society, NANDA, enterprises, and startups.
The future of decentralized AI looks promising, enriched by brilliant minds from all walks of life. I'm grateful for the opportunity to contribute to this open-source ecosystem 🧵
9
17
113
6,555
Kantorcodes | ℏol/acc retweeted
When you contribute to HOL Guard, you’ll appear on the HOL Contributors page.
There are over 100 GitHub contributors on this list, ranked by commits and growing every day.
Come climb the ranks.
hol.org/guard/contributors
ALT Highlighting contributors of HOL Guard, showcasing verified accounts, accepted works, and published releases.
2
2
222
Kantorcodes | ℏol/acc retweeted
HOL Guard 3.50.0 landed today.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
ALT The interface shows a security alert with 1,462 actions needing review, detailing paused requests from the app "Oh My Pi."
1
4
4
299
Kantorcodes | ℏol/acc retweeted
Is a stranger mining crypto on your Plex Media Server? Old servers are being hijacked with no login. CISA put CVE-2026-96652 and three linked bugs on its exploited list today.
Update to 1.43.3.10861, then check the Codecs folder for files you didn't add.
hol.org/blog/cve-2026-96652-…
4
5
658
The Plex bug chain on KEV today is worth an hour of your homelab time. Updating to 1.43.3.10861 closes it, but it won't remove a miner or proxy that's already running. Check Preferences.xml for a dump-yuv transcoder option you never set.
Is a stranger mining crypto on your Plex Media Server? Old servers are being hijacked with no login. CISA put CVE-2026-96652 and three linked bugs on its exploited list today.
Update to 1.43.3.10861, then check the Codecs folder for files you didn't add.
hol.org/blog/cve-2026-96652-…
2
2
266
HOL Guard 3.50.0 landed today.
Free, open-source runtime security for you and your AI friends. No sandbox or cloud needed.
Don't let venture-backed AI fool you into paying for more compute and egress.
Your laptop is good enough. 2.5m+ downloads agree.
ALT The interface shows a security alert with 1,462 actions needing review, detailing paused requests from the app "Oh My Pi."
1
4
4
299
Opencode was hacked.
Every major company in the world will probably be hacked in the next 6 months.
We're being told AI is unsafe and we should move to the cloud.
The clouds will be hacked too. Sandboxes as well.
Instead we need to harden our machines and tools.
9
3
13
1,146
If you paid $2K+ for your machine, you should be able to use your machine, not have to rent someone elses.
That is a large part of the thesis behind the development of HOL Guard.
HOL.org/guard
129
Kantorcodes | ℏol/acc retweeted
This is a great chart for HOL Guard
ALT Chart depicting the growth of GitHub stars for "hashgraph-online/hol-guard," showing a rise from April to October.
1
2
15
929
The part of the BeyondTrust bug that's easy to miss: patching doesn't evict anyone who got in before. The attackers wiped the logs on the appliance, so look at your proxy or WAF logs instead.
Attackers broke into self-hosted BeyondTrust Remote Support appliances without logging in, planted web shells, and went after the stored passwords. CISA put CVE-2026-102764 on its exploited list today.
Install the BT26-05-RS patch, then check proxy logs.
hol.org/blog/cve-2026-102764…
344
Kantorcodes | ℏol/acc retweeted
Obsidian MCP limits agent access with vault-path and permission checks.
The article covers path isolation, read-only scopes, bearer-token checks, and a setting that disables destructive tools, plus the limits of those controls.
hol.org/blog/introducing-obs…
4
9
884
If you run Jira or Confluence with Crowd SSO, the upgrade is step one. Step two is checking for crowd.properties under WEB-INF/classes. If it's there and you were exposed, rotate that app password.
Strangers are reading files off self-hosted Jira and Confluence servers without logging in. CISA added CVE-2026-21589 in Atlassian Jira, Confluence and Bitbucket Data Center to its exploited list today.
Upgrade every node to Atlassian's Oct 5 release.
hol.org/blog/cve-2026-21589-…
ALT HOL Guard cover: Run Jira or Confluence yourself? Patch today
1
2
389
Kantorcodes | ℏol/acc retweeted
HOL is seeing unprecedented open-source adoption.
We recently surpassed 3M+ total downloads (~2.5M from HOL Guard alone) and 5.5K+ GitHub stars.
To support this growth, we've opened sponsorships for Logo Placements and Links. Help us secure AI and keep baseline security free.
ALT Metrics showcase open-source growth: 5,683 GitHub stars, 5,400 merged PRs, 329.1k downloads in 30 days, 3M all-time downloads.
1
4
7
435
If you run Next.js yourself, do the sharp check. On 15.x, updating Next.js does not guarantee the image library moved, and that is where one of today's code execution bugs lives.
Vercel just shipped a Next.js fix for two bugs that can let a stranger run code on your server. No login needed.
Self-host on Linux? Upgrade to 16.4.1 or 15.5.28 tonight. On 15.x, check sharp is 0.35.5. The upgrade alone can leave the old one in place.
hol.org/blog/cve-2026-96889-…
ALT Next.js October 2026 security update — check sharp too
323
If your Cisco email gateway runs AMP File Reputation, patch Content Scanner Tools tonight. One crafted attachment is enough for root on the box, and it is already being exploited.
Your Cisco email gateway can be turned into a root shell by one crafted attachment. Already exploited. CISA put it on the known-exploited list today with a three-day deadline.
If AMP File Reputation is on, update Content Scanner Tools tonight.
hol.org/blog/cve-2026-76519-…
ALT HOL Guard cover: Run Cisco email gateway? Patch AMP today
2
331
If your Palo Alto firewall's admin page answers from the internet, close that today. This bug needs a real admin login, so it is not a worm, but firewall passwords leak all the time and this turns one into root. Patch Panorama first.
Anyone with one admin password for a Palo Alto firewall and a way to reach its admin page can take over the box as root. Already exploited. CISA gave agencies three days.
PAN-OS hotfixes are out. Lock the admin page to inside IPs tonight.
hol.org/blog/cve-2026-0322-p…
ALT HOL Guard cover: Run a Palo Alto firewall? Lock down the admin page. A terminal shows PAN-OS 11.2.10-h12 with an admin logged in from an outside address, and a card says the firewall needs a hotfix to 11.2.10-h15.
1
360
