secdude

Red Team Manager and TIBER Lead @NVISOsecurity. Red-Team enthusiast and author of Playing with the CTF-Teams @sqrts @sauercloud

[secdude @secdu_de]

WhupWhup🎉
If you are interested in #RedTeaming, #OffensiveSecurity or #CyberSecurity in general, let's meet at @defcon and exchange ideas💡

Myself and @MoritzLThomas will be presenting:
Volatile Vault-A tool for red teamers that facilitates #data #exfiltration during #redteams

[secdude @secdu_de]

@NVIDIAGeForce @007GameIOI #007FirstLightRTX

[Theo - t3.gg @theo]

Security things from the last few days:
- CopyFail (linux pwn'd)
- CopyFail 2/Dirty Frag
- 13 advisories in Next.js
- Over 70 CVEs addressed in MacOS 26.5
- ~50 CVEs addressed in iOS 26.5
- YellowKey (Windows Bitlocker pwn'd entirely)
- GreenPlasma (Windows privilege escalation)
- CVE-2026-21510 and CVE-2026-21513 confirmed to be used by Russia for Windows RCE
- CVE-2026-32202 separately confirmed to be used by Russia for sensitive document access
- Mini-Shai Hulud (over 300 JS and Python packages compromised via GitHub Action cache poisoning)
- Google confirms they have identified AI-powered exploitation of zero days in an unidentified "open-source, web-based system administration too"
- Canvas (popular LMS used in most schools) pwn'd entirely
- PAN-OS (palo alto networks) pwn'd with a 9.3 severity CVE-2026-0300

Are you scared yet?

[solst/ICE of Astarte @IceSolst]

- XZ utils backdoor: found by guy debugging 200ms latency

- LiteLLM hack: found by guy debugging oom issue

These could have been the most impactful compromises ever.

Forget security vendors, weaponize your engineers’ autism.

[Florian Roth ⚡️ @cyb3rops]

“The largest supply chain compromise in npm, Inc. history just happened, packages with a total of 2 billion weekly downloads just got turned malicious”

LinkedIn Post
https://t.co/dJ0tlPrSBJ

More info on hacker news
https://t.co/uncwjtFgxT

[secdude @secdu_de]

@BleepinComputer @serghei We have been using this for years, but I mean, we are simulating state-sponsored hackers..

[secdude @secdu_de]

@__invictus_ Every single time🫣

[secdude @secdu_de]

@NVIDIAGeForce #GeForceGreats

[secdude @secdu_de]

Excited to present at @sectorca in Toronto for the second year! Join me & @MoritzLThomas for "Volatile Vault: Data Exfiltration in 2024"

Discover how our platform evades DLP systems. Let's connect! #CyberSecurity #redteam @NVISO_Labs

[secdude @secdu_de]

@assassinscreed 🦅 will play on PC.

[BSidesFrankfurt @BSidesFRA]

Unofficial after event gathering at

https://t.co/ftTIhF2ynR

[BSidesFrankfurt @BSidesFRA]

We are thrilled to announce that the schedule for the event is now available online! Make sure you don't miss any of the amazing sessions. We can't wait to see you there! https://t.co/IDQHklcpcc

[secdude @secdu_de]

Let us know if you know how to get into the @RedTeamVillage_ party tonight :)

[secdude @secdu_de]

If you want to learn about #physicalsecurity the cool way! 🔥🚀
Break into the @NVISOsecurity #ARES #CovertAccessVault by:
- #lockpicking
- #Bypass #alarm
- Under the door tool
- #Shimming
- #CCTV jamming
- Safe cracking

[secdude @secdu_de]

Here is the direct link: https://t.co/ULWZvMoTv4

[secdude @secdu_de]

WhupWhup🎉
If you are interested in #RedTeaming, #OffensiveSecurity or #CyberSecurity in general, let's meet at @defcon and exchange ideas💡

Myself and @MoritzLThomas will be presenting:
Volatile Vault-A tool for red teamers that facilitates #data #exfiltration during #redteams

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-5655(CVSS 9.6): Run pipelines as any user
🔗Hunter Link: https://t.co/9pVvUtoQsJ
⚠This flaw allows attackers to trigger pipelines as another user under specific conditions, posing a significant security risk.
📊2.3M+ Services are found on https://t.co/g3tSyh1Boc
📰Refer:https://t.co/MX5tclql6I
👇Query
Hunter: /product.name="GitLab"
FOFA: app="GitLab"
SHODAN: http.component:"GitLab"
#GitLab #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[Gi7w0rm @Gi7w0rm]

⚠️0-click #RCE in Outlook⚠️

The #CVE-2024-30103 vulnerability leverages a flaw in how Microsoft Outlook handles specific types of email content. An attacker can embed malicious code within the body of an email, which gets executed as soon as the email is opened.

[secdude @secdu_de]

We truly enjoyed this year's @x33fcon.
Thank you for another wonderful conference 🔥
See you next year!

[/ˈziːf-kɒn/ @x33fcon]

Thank you very much @NVISOsecurity for being a Silver Sponsor of #x33fcon 2024! 🩷

[Hunter @HunterMapping]

🚨Alert🚨CVE-2024-30103: Microsoft Outlook Remote Code Execution Vulnerability
⚠This Microsoft Outlook vulnerability can be circulated from user to user and doesn’t require a click to execute. Rather, execution initiates when an affected email is opened.This is notably dangerous for accounts using Microsoft Outlook’s auto-open email feature.
📰Refer: https://t.co/QEiHf8iwtH
#Outlook #Microsoft #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[secdude @secdu_de]

Are there no local privilege escalations on you target maschine? We got you covered ;)

[NVISO @NVISOsecurity]

We've expanded our #RedTeam arsenal with a new awesome Windows LPE BOF for #CobaltStrike and #BruteRatel thanks to the original exploit author @varwara.

Get your copy here! https://t.co/ZYno3mbLz5