Suggestions
Daniel Cid
Founder at CleanBrowsing and NOC.org. Previously Founder/CTO at Sucuri, VP Engineering at GoDaddy and founder of OSSEC.
Daniel Cid is a prominent figure in the cybersecurity industry and a serial entrepreneur. He is the founder of several companies, including NOC.org, which he started in April 2020.1 NOC.org is a networking platform for businesses that host and build websites, offering services like Authoritative DNS, Content Delivery Network (CDN), Web Application Firewall (WAF), and Performance Monitoring.1
In addition to NOC.org, Cid has founded other notable companies:
- Trunc: A cloud-based logging and security company focused on log analysis, storage, and management (founded January 2022).1
- CleanBrowsing: A DNS-based content filter (founded January 2018).1
- Sucuri: A website security company (founded January 2012, acquired by GoDaddy in 2017).13
- OSSEC: An open-source host-based intrusion detection system (founded January 2003).14
Cid has also held significant positions in other companies, including Vice President of Engineering at GoDaddy (2017-2020) and Principal Researcher at Trend Micro (2009-2011).1 He is known for his expertise in intrusion detection, log analysis, and web security.2
Daniel Cid holds certifications such as CISSP and GCIH.1 He is active on social media platforms, particularly Mastodon (noc.social/@dcid), and maintains a personal website at dcid.me.2
Highlights
Pretty much every site on our network has been scanned and attempted to be exploited so far.
If you didn't patch over the weekend, it might be safe to consider it compromised.
First attempt I see on the logs was on:
2025-12-03 21:00:24 18.182.x.z 403 "POST /_next/static/chunks/react-flight HTTP/1.1" "-" "Mozilla/5.0 (CVE-2025-55182 PoC)"
Before most people were even aware of it.
One of the best explanations for CVE-2025-55182 / React2Shell. Recommended reading.