Gabriele Digregorio

CTF @mhackeroni and @TowerofHanoi | PhD @PoliMi | Security Research Intern @IBM

[mhackeroni @mhackeroni]

mhackeroni is going to Vegas!

We qualified for the eighth time to the DEF CON CTF Finals - top 12 in the world.
We're putting together our 2026 sponsors: backing Italy's leading ethical hacking team is a unique opportunity.

Want in? Let's talk: [email protected]

#infosec #CTF

[Gabriele Digregorio @Io_no__]

Finally, through a survey of machine learning practitioners, we show that security claims in framework and hub documentation can create misplaced trust. For example, over 90% of non-security ML practitioners perceived no risk of arbitrary code execution when safe_mode=True. (5/5)

[Gabriele Digregorio @Io_no__]

📣 Our paper “On the (In)Security of Loading Machine Learning Models” has been accepted at IEEE S&P 2026 (13% acceptance rate this cycle) (1/5)

👇Preprint: https://t.co/YTJsBUw460

#ieeesp #ieeesp26 #ieee #softwaresecurity #aisecurity #cybersecurity #machinelearning #ml #zeroday

[Gabriele Digregorio @Io_no__]

We also show that Hugging Face’s integrated scanners do not always provide an effective additional line of defense against framework-level exploits. (4/5)

[Tower of Hanoi @towerofhanoi]

Another day, another victory. Last November we got first place in WP CTF 2025 in Bolzano.

[Gabriele Digregorio @Io_no__]

Huge GG to the winners, Superflat!🔥

[Gabriele Digregorio @Io_no__]

We brought ethical hacking back into space 🚀
Ctrl+Space CTF 2025 Finals with real in-orbit satellites 🛰️ has come to an end.
@mhackeroni @esa @D_Orbit

[Gabriele Digregorio @Io_no__]

Cleaning up the shell(f)s (quote @Frank01001)
@towerofhanoi @mhackeroni

[Gabriele Digregorio @Io_no__]

@VegasMorph Thanks. The issue was awarded $2,250 by the Google Mobile VRP

[Gabriele Digregorio @Io_no__]

In March I found an exposed intent in Google Messages for Wear OS that allowed sending messages without permissions or user confirmation (CVE-2025-12080). Full details in the wup.

https://t.co/8NSsuUf1YS

[Mobile Hacker @androidmalware2]

Vulnerability in Google Messages for Wear OS resulted in invoking intents to send messages without permission (CVE-2025-12080) discovered by @Io_no__ and awarded $2,250.00 by Google
Blog: https://t.co/YlpilfkxyY
PoC: https://t.co/4NGHF3w7cI

[mhackeroni @mhackeroni]

🚀 Mission Control here.

The qualifying round of Ctrl+Space 2025 has come to an end! GG to all participants:

* 599 crews showed up, with nearly 659 solves.
* The top 5 eligible teams will soon be back in orbit🛰️

Finals at ESTEC 🇳🇱, Nov 4–6. We´ll see you at launch!

[Marco Bonelli @mebeim]

Somebody come pwn my pypy challenge with a single bit flip come on! https://t.co/yiO3iF9UUZ

[mhackeroni @mhackeroni]

> You mistakenly pressed the button to eject the instruction manual & this ship is infamous across the stars for a labyrinth of controls no sane mind can master.
> Returning home will demand more than luck.

Come rev this and more at https://t.co/RR6O9BQ2KT ! GAME IS LIVE 🚩🍝

[mhackeroni @mhackeroni]

🚀 Ctrl+Space Quals have already kicked off on Voyager 1 🛰️!
Due to light-speed delay, for us on Earth, the round officially starts in ~24h only

Sept 20, 09:00 UTC. Don’t miss it… You might just reach the stars ✨

https://t.co/wUc726qEh0

[mhackeroni @mhackeroni]

The orbital pasta is almost ready 🍝🛰️
Registration for Ctrl+Space CTF Quals is open 👉 https://t.co/wUc726rc6y

⚡ 24h of space hacking kicks off THIS SATURDAY 20th, 9:00 UTC
🌌 Secure your spot at the @esa 3S Conference finals in November & bring your exploit to orbit! 🚀

[mhackeroni @mhackeroni]

Still hacking with your feet on the ground? Not anymore, we cooked 🍝

Join Ctrl+Space CTF Quals (20–21 Sep) to be one of the 5 finalist teams to play in-orbit challenges running on @D_Orbit ION Satellite Carrier 🛰️ at @esa 3S conference 🇳🇱 (4–6 Nov)!

https://t.co/cvS1NKTvZF

[Tower of Hanoi @towerofhanoi]

Get ready for ToH CTF 2025. We have cooked some amazing challenges. The event starts in just 2 days.

📆 July 19, 2025 - 04:00 PM UTC (18:00 CEST)

Registration is now open!
https://t.co/0oHKrwzcAf