SudoSec Research

To err is human...
to really screw up requires the root password

[SudoSec Research @SudoSec]

@thede_plandude This is pretty cool.

[SudoSec Research @SudoSec]

@Tristanrhee3 Knowing what you are using it for.

[SudoSec Research @SudoSec]

@ronisarkar_exe "C. Supporting the users after they finally show up."

Supporting them is where your will to live goes to die.

[SudoSec Research @SudoSec]

CVE-2026-9875: Out of bounds read in WebGL
Critical. Memory corruption risk leading to info disclosure or further exploits via malicious web content.

[SudoSec Research @SudoSec]

CVE-2026-9874: Use after free in Dawn
Critical. Potential sandbox escape/RCE via crafted content. (Reported anonymously). Part of 22 critical fixes in this 151-vuln update.

[SudoSec Research @SudoSec]

CVE-2026-9873: Use after free in Network
Critical. Remote attacker can execute arbitrary code inside sandbox with malicious page. Reported by cinzinga. $43k bounty. High risk for drive-by attacks.

[SudoSec Research @SudoSec]

In case you didn't notice last week...
CVE-2026-9872: Out-of-bounds write in GPU
Critical. Allows potential sandbox escape via crafted HTML page. Reported by cinzinga. $43k bounty. Update immediately to prevent RCE/sandbox bypass.

[SudoSec Research @SudoSec]

Brazilian tech company BC3 Tecnologia, specializing in software development, ERP systems, IT consulting & digital transformation, was hit by Nova ransomware group. Breach discovered ~May 30/June 1, 2026. Data accessed; group plans to publish if no contact.

[SudoSec Research @SudoSec]

Anandji Haridas & Co. Pvt. Ltd. (AHCPL) — specialists in cold forming, sheet metal & automotive parts — was hit by TheGentlemen ransomware group. Breach discovered June 1, 2026. Data accessed; leak volume undisclosed.

[SudoSec Research @SudoSec]

Good to know that this is the thing people are using to vibe code production systems, and also using this to check for security vulnerabilities before it gets promoted to production. 👍

[Alfin @AlfinCodes]

Claude Opus 4.8 is insane.

Nothing will be the same after this model.

Anthropic should not have released something this dangerous.

[SudoSec Research @SudoSec]

Indonesian government agency Badan Pangan Nasional, responsible for food security, supply & reserves, was hit by Nova ransomware group. Breach discovered ~May 29/June 1, 2026. ~8GB data accessed.

[SudoSec Research @SudoSec]

"To err is human...
to really screw up requires the root password"

[Son Luong @sluongng]

Codex just found a “workaround” of not having sudo on my pc…

[SudoSec Research @SudoSec]

I'm back!

[Prof. Feynman @ProfFeynman]

It’s Okay to say “I don’t know.”

[SudoSec Research @SudoSec]

National Public Data Published Its Own Passwords
https://t.co/wdU6TOCr8p

[Ryan Holiday @RyanHoliday]

"I'm not upset that you lied to me, I'm upset that from now on I can't believe you." – Friedrich Nietzsche

[Paul Asadoorian @[email protected] @securityweekly]

LOL - Love this

[SudoSec Research @SudoSec]

Just found a cool site today for looking up IP info... https://t.co/WgfvYsMHCI.

[SudoSec Research @SudoSec]

Back to work after a holiday weekend be like...
https://t.co/t8sOyXuy34
I'll have to remember to brush my teeth with a screw driver tomorrow though.

Thanks, @ Michael Hickox

[SudoSec Research @SudoSec]

Time to say hallo again.

[SudoSec Research @SudoSec]

Woohoo back on Twitter!