bletchley13(CK)

CyCraft/Cycarrier Researcher.
CTF Player.
Founder of BambooFox
Reviewbord of HITCON
Tweets are mine own

[HITCON @HacksInTaiwan]

HITCON 2026 – Call for Papers Website is Now Open!

The theme for HITCON this year is 'When AI Acts: Hacking the Age of Agentic Systems.' Our Call for Papers is now open—we look forward to your submissions!"
We’re accepting submissions in two categories this year.

Check out all the details and submit your talk here ⬇️
📪 Submission Website: https://t.co/jVGUEqK0u0

1. Lectures focusing on cutting-edge infosec research:
- 40 minute-session inc. Q & A
- focus on innovative technical deep-dive
- ranked by novelty, technical depth, and practicality

2. Tutorial sessions for cybersec beginners (Hacking 101):
- 80 minute-session inc. 10–20 minute break
- focus on educational aspects
- ranked by educational value, practicality, and ease of understanding

【Important Dates 📅】

- CFP starts: today
- CFP closes: May 3, 2026 (Anywhere on Earth)
- Notification to Submitters: May 17, 2026 (for those who agreed to AI Review Assistant); May 24, 2026 (all other submissions)
- Event date: August 21 - August 22, 2026
For any questions, please email [email protected].
We look forward to your brilliant presentations at HITCON 2026 🤩

#HITCON #HITCON2026 #CFP #CallForPapers #AI

[HITCON @HacksInTaiwan]

📣【2026 Hack the Tainan 全民參與・共築資安韌性】啟航記者會邀請

臺南市政府將於 4 月 15 日舉辦「Hack the Tainan」啟航記者會，攜手美國在臺協會高雄分處及國內外資安專家，共同展現資安韌性城市發展願景。

活動中也將正式宣布第二屆紅藍軍攻防資安競賽啟動，並透過專題演講與座談交流，分享國際資安趨勢及實務經驗，展現臺南持續深化資安防護、強化城市韌性的行動力。

誠摯邀請各界先進蒞臨參與，一同關注資安發展新里程 🔐

👉 報名網址
https://t.co/BGcnh4BHOZ

#HackTheTainan

[Josh Stroschein | The Cyber Yeti @jstrosch]

📢 The FLARE team has launched the FLARE Learning Hub - a free resource to hone your malware analysis and reverse engineering skills!

🛠️ https://t.co/PUHq3IQqV4

The initial launch brings with it:
- An in-depth introduction to time-travel debugging (TTD)
- A comprehensive Go language reference
- An assembly crash course

[Zellic @zellic_io]

For a deeper look into this zero-day vulnerability, including the full root-cause analysis, proof of concept, exploitation, and patch analysis, check out our newly published blog post: https://t.co/RAXSg0f1iv

[pilvar (Philippe Dourassov) @pilvar222]

And another finding for AI Pentest! This time on Astro (57.1k stars)

Host header injection → HTTP redirect → full-read SSRF, writeup by the GOAT @J0R1AN

CVE-2026-25545
advisory: https://t.co/H7XHlLvyf8
blog post: https://t.co/45lPcdZDk7

More to come 😉

[MalDev Academy @MalDevAcademy]

Malware Development course update 21 released!

https://t.co/67X8yADBsY

- Introduction To Windows Persistence

- Persistence Via The Windows Registry

- Persistence Via The File System

- Persistence Via Windows Services

- Persistence Via Windows Tasks

- Persistence Via WMI Abuse

- Persistence Via COM Object Hijacking

- Persistence Via Electron Applications

[AISecHub @AISecHub]

The State of AI Security
- https://t.co/L7Lh71fzRg

AI security report provides a comprehensive analysis of the latest developments across AI threat intelligence, global policy, standards, research, and more.

[Objective-See Foundation @objective_see]

Want to run your compiled Mach-O payloads directly from memory without worrying if they'll be detected or captured? 😈

🔥 New blog post:
"Reflective Code Loading on macOS (Part II)"
https://t.co/ZfOjG1Quvq

macOS 26? ✔️
Objective-C payloads? ✔️
Detection ideas (limited)? ✔️

[Speaker 25 @rodtrent]

From Hours to Seconds: Meet the Grok-Powered Automated IR Playbook Generator https://t.co/jKo0DwUN61

#AI #ResponsibleAI

[MigawariIV @strinsert1Na]

参加しようと思って頭から抜けていたので資料だけ読ませて勉強させてもらってる

Active Directory 勉強会 第 6 回目 Active Directory セキュリティについて学ぶ回
https://t.co/tYR45ADHGJ

[ESET Research @ESETresearch]

#ESETresearch discovered unique toolset, we named QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in anarchive, named spam_log.7z, to VirusTotal from Taiwan 🇹🇼. It contains Perl scripts, three stealthy passive backdoors, an argument runner, and miscellaneous files. 1/7

[L4ys @_L4ys]

I’ll be at CODE BLUE tomorrow. Check out our Cyber Range Exercise if you’re interested, and feel free to come say hi if you want to chat

https://t.co/PMyIoD16O0

[HITCON @HacksInTaiwan]

🔥技術精英同場競技！HITCON CTF 2025 精英交流賽熱血落幕 🎉

HITCON CTF 是由台灣駭客協會主辦的資安攻防競賽，被譽為「駭客們的武道大會」，今年集結台灣最頂尖的資安高手，展開為期兩天、48 小時的不眠對決。比賽採線上 Jeopardy 形式進行，題目橫跨 Web、Crypto、Reverse、Pwn、Misc 等多元領域，全面考驗參賽者的破解實力與臨場反應——這不只是駭客間的龍爭虎鬥，更是出題團隊與選手間的頂尖對決。

\\ 今年賽事首度導入 Belluminar × eSport 混合賽制 //
🎮 Belluminar 戰隊不只解題，還得親手出題互相挑戰，讓比賽更具策略性與互動火花。
🕹️ eSport 以電競式直播呈現紅隊攻防現場，讓全場觀眾零距離感受極限對決。
題目橫跨逆向工程、AI 模擬、密碼學、漏洞利用等領域，最終考驗的，是團隊默契與思考極限！

參賽隊伍由台灣新舊世代戰隊組成，包含學生戰隊與業界好手，幾乎涵蓋台灣現役的資安競賽精英。他們不僅活躍於國際 CTF 舞台，也積極參與 HITCON 年會、AIS3 教學課程與資安推廣活動，持續推動資安技術向外擴散、向下扎根。

🏆2025 HITCON CTF 精英交流賽結果出爐～
🥇第一名獎牌: 竹狐 — 技術與創意兼具的冠軍戰隊，來自新竹，已是新世代資安界代表勢力。
🥈第二名獎牌: 10F — 曾於 AIS3 EOF 並肩作戰，默契深厚、表現穩健。
🥉第三名獎牌: ICEDTEA — 起源於高中社團的學生戰隊，持續壯大並活躍於國際舞台。

HITCON 期盼透過 CTF 這個舞台，讓更多具潛力的年輕駭客能在健康、安全的環境中茁壯成長，也讓台灣的資安技術在國際舞台上持續發光發熱。

#HITCON #CTF #HITCONCTF2025

[TrendAI Zero Day Initiative @thezdi]

Boom! YingMuo (@YingMuo), HexRabbit (@h3xr4bb1t), LJP (@ljp_tw) from DEVCORE Research Team and nella17 (@nella17tw) from the DEVCORE Intern Program needed little time to exploit the QNAP TS-453E NAS device. They head off to the disclosure room to provide details. #Pwn2Own

[Alex Plaskett @alexjplaskett]

A great write-up of a VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-
20869) exploit by Alex Zaviyalov has just been published!

[Virus Bulletin @virusbtn]

Cisco Talos researcher Joey Chen discloses details of UAT-8099, a Chinese-speaking cybercrime group mainly involved in search engine optimization (SEO) fraud and theft of high-value credentials, configuration files, and certificate data. https://t.co/Hy8aN9yEyL

[Team Atlanta @TeamAtlanta24]

🚀 Today, we're excited to release #TeamAtlanta’s technical report on **ATLANTIS**!

Check out how ATLANTIS won 1st place at #DARPA AI Cyber Challenge (#AIxCC) at #DEFCON 33!

🌐 https://t.co/yNOnvFR7sM

#AICyberChallenge #Cybersecurity #LLM #GenAI #Agent #Fuzzing

[MigawariIV @strinsert1Na]

マルチクラウドセキュリティの教科書を購入したので残りの連休で読みたいと思いますまる(パラパラとめくった所感ですが情報の密度が濃すぎて3日では無理そうです)

[Hexacon @hexacon_fr]

📢 Déjà Vu in Linux io_uring: Breaking Memory Sharing Again After Generations of Fixes by Pumpkin (@u1f383)

[Wil Gibbs @cl4sm]

Checkout the Post-Mortem of our system ARTIPHISHELL (by @degrigis and I)! We look at a few issues that kept @shellphish from a top-3 spot in @DARPA’s AIxCC:

https://t.co/PO4mL2JPsX

Keep your eyes out for more ARTIPHISHELL content in the future!