𝕜𝕒𝕣𝕕𝕖𝕔.

being no one, going nowhere :)

[𝕜𝕒𝕣𝕕𝕖𝕔. @kaardeco]

“Eu vi chover, eu vi relampear
Mas mesmo assim o céu estava azul”

[Hakai Offsec @HakaiOffsec]

Teams. Outlook.
Half your enterprise software. They're all quietly shipping a Chromium browser inside them called WebView2.
Murilo Caixeta shows how to turn that trusted, signed process into a genuine red team asset.

Red Team Village @theredteamvillage
SUNDAY, AUGUST 9, 2026 - 11:00 AM

DEFCON 2026 https://t.co/d8nUeAfPbh

[Hakai Offsec @HakaiOffsec]

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI).

Read the full analysis on our blog: https://t.co/GmlNKUPCdI

[𝕜𝕒𝕣𝕕𝕖𝕔. @kaardeco]

@biazzo_miguel Alignment, 999999999, Sven e Mace Plex

[Hakai Offsec @HakaiOffsec]

A pesquisa no Node-RED 4.0.9 apresenta uma falha crítica no Function Node que permite execução remota de código (RCE). Explorando limitações do módulo vm do Node.js, foi possível burlar a sandbox através da manipulação de construtores JavaScript, acessar o objeto process e carregar o módulo child_process para executar comandos no sistema operacional host.
Os testes realizados comprovam a existência de uma vulnerabilidade que burla o isolamento implementado no ambientes possibilitando acesso a dados sensíveis, exigindo controles rigorosos de acesso e isolamento em nível de infraestrutura como mitigação.

Confira o arquivo:

PT-BR: https://t.co/vgyp3Zfdxx

EN: https://t.co/uox9j8zpA5

[Frank @jedisct1]

LibrePods unlocks Apple's exclusive AirPods features on non-Apple devices. Get access to noise control modes, adaptive transparency, ear detection, hearing aid, customized transparency mode, battery status, and more https://t.co/Q24myttuCz

[𝕜𝕒𝕣𝕕𝕖𝕔. @kaardeco]

@juligaioso @fsbrasileiro @r0nycosta As cyber entidades vão trabalhar pra que esse fone seja meu🤓

[GitHub Projects Community @GithubProjects]

Run a full virtual desktop inside a Docker container, accessible via WebRTC, right from your browser.

[offensivecon @offensive_con]

"Parser Differentials: When Interpretation Becomes a Vulnerability" by @joernchen !

[RedTeamVillage @RedTeamVillage_]

Huge thanks to one of our Silver Sponsors for DEF CON 33 — @HakaiOffsec! 🥈⚔️ Your support helps power the chaos, creativity, and community of Red Team Village. See you in Vegas! 🔥

[Maria Carolina Gontijo @DuquesaDetax]

Todo brasileiro tem obrigação moral de ser contra a zona franca de Manaus.

[RedTeamVillage @RedTeamVillage_]

A huge shoutout to our incredible diamond sponsor, @hakaioffsec, for supporting us at @h2hconference! 🎉💎 We’re beyond thrilled to have your amazing support—let’s make this event unforgettable together! 🚀✨ #H2HConference

[ᵐᵃ @marigisboring]

SE ISSO É ESTAR NA MAO DO PALHAÇO A PALHAÇA SE CHAMA CHARLOTTE DE WITTE

[soli @solisolsoli]

Lilith by Andrei Posea

[soli @solisolsoli]

The Shiver of the Vampires by Jean Rollin

[soli @solisolsoli]

in flames by Ilaria Ratti

[wand @owand_]

Sou muito grato à Insider, à Manual, à Alura, à EBAC e ao Surfshark por manter meus produtores de conteúdo financeiramente sustentáveis sem se renderem às bets.

[𝕜𝕒𝕣𝕕𝕖𝕔. @kaardeco]

@iuryraielly Essa é exótica msm…