Andre Espirito Santo

Tech-savvy blogger wannabe. Architecture, Data, CyberSecurity & AI. .

[Andre Espirito Santo @aesanto]

@elonmusk ...

[FC Porto @FCPorto]

Supertaça ⚽️ FC Porto 🆚 Torreense

[Charly Wargnier @DataChaz]

🚨 someone just dropped a full 10-stage academic research pipeline for Claude Code.

It doesn’t write your paper for you, it hunts references, formats citations, verifies data, and even runs a "devil's advocate" agent to attack your own thesis.

Here's why it's a massive deal for academics:

→ Anti-AI Voice: Learns your specific writing style.
→Integrity Gates: Actively hunts down fabricated citations and statistical errors.
→Simulated Peer Review: Runs your draft through a 7-agent panel (including a Devil’s Advocate).
→Cheap: A full 15k-word paper costs ~$4–$6 in API credits.

Best part?

It's 100% free and open-source.

Install in 30s: `/plugin install academic-research-skills`

repo in 🧵↓

[Andre Espirito Santo @aesanto]

Já devemos estar a viver todos em marte por esta altura...

Nova via externa e soterramento da AEP: os projetos que prometem mudar o trânsito no Porto - SIC Notícias https://t.co/eCKMyEKjdG

[Gray Hats @the_yellow_fall]

Apache CloudStack patches important flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.

#CloudStack #ApacheCloudStack #CloudSecurity #InfoSec #CyberSecurity #KVM #Proxmox #DevOps
https://t.co/lGYXZofpkW

[FC Porto @FCPorto]

𝗙𝗨𝗧𝗘𝗕𝗢𝗟 𝗖𝗟𝗨𝗕𝗘 𝗗𝗢 𝗣𝗢𝗥𝗧𝗢. 𝗖𝗔𝗠𝗣𝗘𝗔̃𝗢 𝗘𝗨𝗥𝗢𝗣𝗘𝗨 𝗗𝗘 𝗛𝗢́𝗤𝗨𝗘𝗜 𝗘𝗠 𝗣𝗔𝗧𝗜𝗡𝗦 ⭐💙

#FCPortoHoquei

[Hunter @HunterMapping]

🚨Alert🚨 CVE-2026-23918 : Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.
📊 3.8K+ Services are found on the https://t.co/g3tSyh13yE yearly.
🔗Hunter
Link:https://t.co/o3OLfMCjPa
👇Query
HUNTER : https://t.co/yFFcJwdIUc="Apache HTTP Server"&&https://t.co/yFFcJwdIUc="HTTP/2"
📰Refer:https://t.co/7YHug75osO
https://t.co/vhMzwiEHao
#hunterhow #infosec #infosecurity #OSINT #Vulnerability

[Techjunkie Aman @Techjunkie_Aman]

This Docker container boots a full Android phone.

Not a simulator.

A real Android emulator running entirely inside Docker:

• KVM acceleration for near native emulator performance
• GPU acceleration support for smoother rendering and testing
• Google Play Store emulator images built in
• remote ADB access directly over the network
• scrcpy support for low latency remote control
• customizable Android API levels and device presets
• persistent AVD storage support between container restarts
• fully headless operation for CI/CD environments

How it works:

• build or pull the Docker image locally
• mount the host KVM device into the container
• expose port 5555 for remote ADB connectivity
• connect instantly using normal adb commands
• control the Android screen remotely with scrcpy

Supports:

• Android API 28 up to API 33+ builds
• Google APIs and full Play Store variants
• x86 and x86_64 Android emulator images
• Docker Compose setups for scalable deployments

Android phones are slowly becoming cloud infrastructure.

[Vivek | Cybersecurity @VivekIntel]

Palo Alto Networks warns of firewall RCE zero-day exploited in attacks https://t.co/YXbD7JzRFP

[Gray Hats @the_yellow_fall]

Palo Alto Networks confirms CVE-2026-0300 is being exploited in the wild. The 9.3 CVSS flaw allows unauthenticated root RCE. Secure your PAN-OS firewalls now!

#PaloAltoNetworks #PANOS #CVE #CyberSecurity #InfoSec #RCE #ActiveExploitation #Firewall
https://t.co/X1eaTwAxen

[BuBBliK @k1rallik]

do you understand what just happened to your computer..

Google Chrome secretly downloaded a 4GB AI model onto your device. Without asking.. Without telling you..

It's called weights.bin. It lives deep in your system folders. It powers Gemini Nano - Google's on-device AI.

And if you delete it? Chrome re-downloads it automatically. Like nothing happened.

Just Google deciding your hard drive is their storage unit.

At 1 billion Chrome users - that's 4 BILLION gigabytes of data pushed silently across the internet.

The carbon footprint alone equals tens of thousands of cars running for a year.

Check your disk right now:
📁 %LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel

To stop it: chrome://flags → disable Optimization Guide On Device Model → restart Chrome → delete the folder.

Reshare so people know what's sitting on their computers.

[Cyber Security News @The_Cyber_News]

🚨 Critical Palo Alto Firewalls Vulnerability Exploited in the Wild to Gain Root Access

Source: https://t.co/dYCJQ6Hi1o

Palo Alto Networks has disclosed a critical buffer overflow vulnerability in PAN-OS software, tracked as CVE-2026-0300, that is already being actively exploited in the wild.

The flaw carries a CVSS 4.0 score of 9.3 (CRITICAL) and allows unauthenticated attackers to execute arbitrary code with full root privileges on affected PA-Series and VM-Series firewalls, with no credentials, no user interaction, and no special conditions required.

The vulnerability resides in the User-ID™ Authentication Portal (also known as Captive Portal) service of PAN-OS. The vulnerability impacts multiple PAN-OS versions across PA-Series and VM-Series firewalls.

#cybersecuritynews #vulnerability

[Cyber Security News @The_Cyber_News]

🛡️ Critical Android Zero-Click Vulnerability Grants Remote Shell Access

Source: https://t.co/EUEZkh4CEa

Google has published the May 2026 Android Security Bulletin, alerting the ecosystem to a highly severe remote code execution (RCE) flaw. Tracked as CVE-2026-0073, this critical vulnerability resides deep within the core Android System component.

It allows an attacker to gain remote shell access without requiring a single tap, download, or click from the device owner. Threat actors can launch this zero-click attack proximally, meaning they only need to be on the same local network or in physical proximity to exploit a vulnerable mobile device.

#cybersecuritynews #Android

[Gray Hats @the_yellow_fall]

Public PoC exploit released for OPNsense! A critical root-level RCE and lockout bypass allow total firewall takeover. Upgrade to OPNsense 26.1.7 immediately.

#OPNsense #RootRCE #PoC #CyberSecurity #InfoSec #Firewall #Vulnerability #PatchAlert
https://t.co/jqDTQuuI5h

[Gray Hats @the_yellow_fall]

Apache releases v2.4.67 to fix an HTTP/2 Double Free RCE (CVE-2026-23918) and auth bypasses. Millions of servers are affected—upgrade your infrastructure now!

#Apache #RCE #CyberSecurity #InfoSec #WebServer #PatchAlert #SysAdmin #CVE202623918
https://t.co/oAuQTIL3W6

[Cyber Security News @The_Cyber_News]

⚠️ Critical Apache HTTP Server Flaw Exposes Millions of Servers to RCE Attacks

Source: https://t.co/nyaOOtouZa

The Apache Software Foundation has released a critical security update for Apache HTTP Server, patching five vulnerabilities, including a dangerous double-free flaw capable of enabling Remote Code Execution (RCE) in version 2.4.67, released on May 4, 2026.

All users running version 2.4.66 or earlier are strongly urged to upgrade immediately. The most severe of the five vulnerabilities is CVE-2026-23918, rated High with a CVSS base score of 8.8.

The flaw is a double-free memory corruption bug triggered within Apache's HTTP/2 protocol implementation during an "early stream reset" sequence.

#cybersecuritynews #vulnerability

[Vivek | Cybersecurity @VivekIntel]

🕸 𝗢𝗪𝗔𝗦𝗣 𝗡𝗲𝘁𝘁𝗮𝗰𝗸𝗲𝗿 — 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗙𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸

Automates recon + vulnerability assessment

• Port scanning, service detection, subdomain enum
• Multi-protocol (HTTP, FTP, SSH, SMB, etc.)
• Modular + multithreaded scanning
• Credential brute-force + fuzzing support
• Reports (HTML, JSON, CSV)
• CLI, REST API, Web UI
• Built-in DB + drift detection

Use only with proper authorization

https://t.co/WGkyuEUM6w

#Pentesting #BugBounty #CyberSecurity

[Co11ateral @co11ateral]

The Autonomous Penetration Testing Standard and its significance

https://t.co/c3ItpoU1cf

@three_cube @_aircorridor #ai

[FC Porto @FCPorto]

O CAMPEÃO VOLTOU! 💙