Simone Margaritelli

Co-founder & CTO @ @usemilgram • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things.

[Ian Carroll @iangcarroll]

For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!

[pirate.moo @apiratemoo]

Damn mfr's pillaged my meme faster than mfr's pillaged those RCE's on announcement.

[@_@ @dysinger]

@meowkoteeq

[Justin Mast @justinmast]

1/ Today we’re unveiling Bombadil, @electricplantco's foundation model that reads the electrical signals of living plants and turns them into a continuous view of their physiology.

Trained on 7M+ hours of plant electrical signal across 125+ species. That makes Bombadil the most species-diverse model of directly recorded electrical biosignals in existence. The animal equivalent would be one model that reads the brainwaves of blue whales, horseshoe crabs and fruit flies.

[Simone Margaritelli @evilsocket]

@justinmast @electricplantco Thanks for making this possible https://t.co/Guve9vb8Od

[Simone Margaritelli @evilsocket]

my dream project is connecting a plant or fungus with electrodes as inputs of an artificial neural network, the outputs would activate wheels to move the thing around. given enough NN complexity and proper model, would the thing start showing behaviours?

https://t.co/a72DZE9LyO

[Izzatologist @IzzatStatus]

More private keys by the Indian certificate authority have been discovered. These are all small numbers.

People are suspecting that they interpreted 384 bit keys to mean that they should pick numbers from 1-384 to use as their private keys.

[anna @meowkoteeq]

just mitm'd TLS on an iPod Touch 4 without installing a CA cert on it

this thing is never getting a security update! just like many IoT devices (if they ship with any global root cas at all...)

[Mati @0xCordeiro]

In the last 24 hours:

1. iPhone 11 through 16 are apparently vulnerable to remote attacks.

2. SSL certificates are broken until browsers remove eMudhra CA.

3. PHP >9 vulnerability CVE published (tomorrow).

The world is about to witness things that have never been seen before.

[solst/ICE of Astarte @IceSolst]

I don’t understand? How

[H4x0r.DZ @h4x0r_dz]

if this affects the default installation of PHP
We are fucked up

CVE-2026-109618
CVE-2026-109619
PHP RCEs with a CVSS score of 10.0 ☠️

https://t.co/kr47MzTvIj

[Nicolas Krassas @Dinosn]

WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators https://t.co/P3AnNQgQBU

[The Hacker News @TheHackersNews]

‼️ BREAKING: Go has issued an URGENT security update blocking 8 certificate authority keys over undisclosed security concerns.

It will reject certificate chains using these keys, potentially breaking connections for rebuilt applications.

The filter cannot be disabled.

Here's what we know: https://t.co/X0uIVXrlp1

[SumitM @SumitM_X]

WHAT ??

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: OVHcloud's official CLI was hijacked in a supply chain attack.

A hacker used a developer's GitHub account to plant a binary built to grab secrets in versions v0.11.0 to v0.15.0.

[jamie @gnuman1979]

Ouch.

[Alex @aleshu_ber]

META’S HEAD OF AI SLAMS AI BENCHMARKS

"it’s some PhD student who made these benchmarks"

"you’re kind of outsourcing all of your product thinking to this viral benchmark"

"so clearly that’s wrong"

I think there is something to this. the whole industry developed so rapidly that there was hardly any time to establish proper benchmarking. companies used what was available, competitors then had to catch up on the same benchmarks, and some of them eventually became industry standards

apparently there is quite a lot of randomness and chance in how we are measuring AI progress today

[solst/ICE of Astarte @IceSolst]

Full content from our security engineering workshop @BSidesNYC is at https://t.co/P8srgT5oDx

[Wokecrates @GhostOfSocrates]

"We gave you DHH, RoR, and Omarchy."

uhhh take them back?

[F. Andy Seidl @faseidl]

Ukraine is moving Russian data to the cloud.