0ld Skoolz, Digital nomad and Father | IT & Compliance | Blockchain Infra Veteran | My tweets are my own. Doers at @luganodes , passed by Cardano & Stakefish
Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0.
nginx-rift has been patched, but our security agent Vega has found a new 0 day.
We will release the full technical writeup with ASLR bypass 30 days after the patch on https://t.co/LAhOC5UHrp.
⚠️ Critical Apache HTTP Server Flaw Exposes Millions of Servers to RCE Attacks
Source: https://t.co/nyaOOtouZa
The Apache Software Foundation has released a critical security update for Apache HTTP Server, patching five vulnerabilities, including a dangerous double-free flaw capable of enabling Remote Code Execution (RCE) in version 2.4.67, released on May 4, 2026.
All users running version 2.4.66 or earlier are strongly urged to upgrade immediately. The most severe of the five vulnerabilities is CVE-2026-23918, rated High with a CVSS base score of 8.8.
The flaw is a double-free memory corruption bug triggered within Apache's HTTP/2 protocol implementation during an "early stream reset" sequence.
#cybersecuritynews #vulnerability
Just finished a red team for a fintech that burned millions on Falcon + SentinelOne AI stacks. Got domain admin in under 15 mins from the guest WiFi.
Walked into the kitchen, saw the shiny Samsung “enterprise” smart fridge on the same VLAN as everything important. Still on old firmware.
Default creds on the admin panel.
Classic unauth RCE in the diagnostics endpoint.
Shell within minutes.
From there it had cached corp creds for SAP sync and outbound allowed.
Their EDR had the fridge IP whitelisted as “normal IoT behavior” because of the MQTT pings.
Dropped a Reynolds-style BYOVD (that NSecKrnl one everyone’s using now), killed the hooks on a DC, and exfil’d test data back out the fridge’s own channel.
SOC barely blinked.
CISO’s reaction when I showed him live: “It’s just a fridge though…”
Man, 2026 and we’re still getting wrecked by IoT crap facilities bought on Amazon. Same story as the 2014 Proofpoint fridge botnet or Target’s HVAC.
Nothing changes.
🚨 New Chrome Zero-Day Vulnerability Actively Exploited in Attacks — Patch Now
Source: https://t.co/8545tqtgul
Google has released an emergency security update for its Chrome browser, patching a zero-day vulnerability that is already being actively exploited in the wild.
The actively exploited vulnerability, tracked as CVE-2026-5281, is a use-after-free vulnerability in Dawn Chrome’s cross-platform GPU abstraction layer used to implement WebGPU.
Google has officially confirmed active exploitation, stating it “is aware that an exploit for CVE-2026-5281 exists in the wild.” The flaw was discovered and reported by an anonymous researcher on March 10, 2026.
#cybersecuritynews #Googlechrome
Approvata dalla Knesset la pena di morte. Solo per i palestinesi. Ben Gvir brinda: "presto li conteremo uno per uno".
Questa è la democrazia di #Israele.
Questa foto dovrebbe essere sulla prima pagina di ogni giornale del mondo. Se questa donna fosse occidentale, ci sarebbe indignazione in tutto il mondo. Questi terroristi sionisti sono le persone più spregevoli del mondo.
@montemagno Mi accollo, attualmente sto testando claude per un progetto complesso di engineering ed effettivamente è come lavorare con il mio team di ragazzi. Ricontrollo tutto, mi accorgo di scelte non ottimali, errori di utilizzo di documentazione, sorgenti di informazioni spesso outdated.
Just managed to run distributed inference clustering an NVIDIA gpu, a MacBook Pro and and iPhone 16 🔥 metal acceleration on the mobile node working like a charm. Cake (in rust) is now the only project that allows you to distribute your local inference on mobile, Mac and Linux.
Shannon: Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.
GitHub: https://t.co/ZqVM5xNr6P
Features:
▪️Fully Autonomous Operation
▪️Pentester-Grade Reports with Reproducible Exploits
▪️Critical OWASP Vulnerability Coverage
▪️Code-Aware Dynamic Testing
▪️Powered by Integrated Security Tools
▪️Parallel Processing for Faster Results