jsantarsieri

Hacker, Entrepreneur, Founder @VicxerSecurity. I protect SAP & Siebel systems around the world. Antiquarian and lover of old books.

[Matt Austin @mattaustin]

@KN0X55 It’s returning false instead 0 means it errors on pcre.backtrack_limit … but I assume most people just wrap it in an “if” statement with would handle that 0 case and the error. I’m a little surprised PHP does not throw

[KNOXSS @KN0X55]

PHP Regex XSS Bypass

Just pad your HTML vector with a million characters before the event handler! 🤯

<Svg [1000000 A's] OnLoad=alert(1)>

[Black Hat @BlackHatEvents]

What’s New at Black Hat USA 2026? 🚀 #BHUSA returns to Las Vegas this August 1-6 with exciting updates designed to help you experience more:

🕘 New Business Hall hours (now open Tuesday evening)
🎟️ New Bundle Passes — Experience more, save more
🚀 First-Timer Program for new attendees
🎬 Midnight in the War Room documentary world premiere
📚 New one-day Training courses for flexible learning

Don’t miss what’s new—start planning your experience today👇
🔗 https://t.co/ObN6BHHzqo

[jsantarsieri @jsantarsieri]

Vicxer will be teaching a training at @BlackHatEvents USA 2026 !

Join us at Black Hat USA 2026 to explore real world SAP attack vectors, offensive techniques, and practical defense strategies from an attacker’s perspective

https://t.co/UzPthgZvQc

#SAP #Vicxer #BHUSA #sapsec

[Black Hat @BlackHatEvents]

🚨FOUR DAYS LEFT: Secure the Early Registration Rate for Black Hat USA 🚨
Time is almost up! Join the world’s leading cybersecurity experts, researchers, and innovators for cutting-edge briefings, hands-on trainings, and unmatched networking opportunities. Whether you're looking to sharpen your skills or stay ahead of emerging threats, Black Hat USA is the place to be.

Lock in Early Registration savings for Black Hat USA by May 22 for the biggest savings - https://t.co/dWjCeSfIPk

[Black Hat @BlackHatEvents]

Check out everything #BHUSA has to offer 🗓️ From Trainings to Briefings, Summits, Arsenal, and more 👉 https://t.co/TurjwoxDkj

[Black Hat @BlackHatEvents]

Security doesn’t stand still—and neither can you. At Black Hat USA, uncover the latest research, tools, and attacker methodologies that will shape the threat landscape in the year ahead. From zero‑day discoveries to advanced defensive strategies, this is where the security community looks first. This is where the industry’s most critical insights surface first.

Experience Black Hat USA, August 1–6 in Las Vegas. Register by MAY 22 to save with early rates. ⏳ Don't risk falling behind. Secure your spot today 👉 https://t.co/MYgZ1ClKiM

[jsantarsieri @jsantarsieri]

🎟️ Early Bird registration ends on May 22 — attendees can save $600.

#BlackHatUSA #BlackHat2026 #SAPSecurity #CyberSecurity #SAP #EnterpriseSecurity #InfoSec #RedTeam #BlueTeam #Vicxer

[jsantarsieri @jsantarsieri]

Vicxer will be teaching a training at @BlackHatEvents USA 2026 !

Join us at Black Hat USA 2026 to explore real world SAP attack vectors, offensive techniques, and practical defense strategies from an attacker’s perspective

https://t.co/UzPthgZvQc

#SAP #Vicxer #BHUSA #sapsec

[Halvar Flake @halvarflake]

The UX that cloud providers have for getting *anything* done is terrible -- the UIs are laggy, confusing, and unnecessarily complex, and the CLI tools full of illogical experiences -- so this is really where LLMs shine.

[Black Hat @BlackHatEvents]

Calling cybersecurity startups! 🚀 Apply for the Black Hat USA 2026 Startup Spotlight by May 27. Pitch your innovation, exhibit on the show floor, and get in front of top industry leaders. Think you’ve got what it takes? Time is running out, don't miss the opportunity to win it all onsite at Black Hat USA this August in Las Vegas.

Apply now. 🔐https://t.co/37Z0GT1zjN

[Nicolas Krassas @Dinosn]

1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom https://t.co/E4X6pP1OFz

[jsantarsieri @jsantarsieri]

Are you migrating to SAP Rise and your team forgot your secrets ? Well, now you have an alternative https://t.co/FNeyaYQYHr

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovered Remote Code Execution on https://t.co/SvN2lGsnbO with a single git push

The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

[Nicolas Krassas @Dinosn]

Offensive security knowledge base — 50+ docs covering web exploitation, bug bounty, privilege escalation, CTF writeups, APT emulation, and forensics. Real payloads, real workflows, built from the field. https://t.co/F3tPSDpIPI

[NetworkChuck @NetworkChuck]

Axios supply chain attack....this one is big.

https://t.co/5VjrYFEUFb

[Nicolas Krassas @Dinosn]

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account https://t.co/t8t7ms2mTk

[jsantarsieri @jsantarsieri]

Surpriseeeee!

[Black Hat @BlackHatEvents]

Enterprise SAP systems are a goldmine for attackers—but are you seeing them the way hackers do?🧑‍💻 Join #BHUSA Trainings “The Hacker’s View of SAP: Breaking, Securing & Protecting” to explore real-world attack techniques, common misconfigurations, and proven defense strategies for modern SAP landscapes.

✅ Hands-on, attacker-focused perspective
✅ Learn how SAP systems are actually exploited
✅ Actionable guidance to secure and harden your environment
If you manage, secure, or rely on SAP, this is training you don’t want to miss.

🔗 Learn more & register: https://t.co/v0yZFI5W16

[Black Hat @BlackHatEvents]

Enterprise SAP systems are a goldmine for attackers—but are you seeing them the way hackers do?🧑‍💻 Join #BHUSA Trainings “The Hacker’s View of SAP: Breaking, Securing & Protecting” to explore real-world attack techniques, common misconfigurations, and proven defense strategies for modern SAP landscapes.

✅ Hands-on, attacker-focused perspective
✅ Learn how SAP systems are actually exploited
✅ Actionable guidance to secure and harden your environment
If you manage, secure, or rely on SAP, this is training you don’t want to miss.

🔗 Learn more & register: https://t.co/v0yZFI5W16