Pinned Tweet
Me encanta esta frase xitter.cf/Sorlak_15/status/69470…
Anibal Ardid retweeted
Trending repository of the day 📈
security-audit-skill
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
Last 24h: 2,874 ⭐
Total: 45,815 ⭐️
github.com/cloudflare/securi…
Anibal Ardid retweeted
Esto no le va a gustar nada a Nintendo...
Este proyecto de código abierto permite ejecutar juegos de Switch en iPhone, iPad y Mac, convirtiendo tus juegos en apps nativas de Apple.
Permite incluso jugar a algunos títulos a 60 FPS:
→ github.com/seedds/nxnative
Anibal Ardid retweeted
💥 BREAKING: Electrum patches critical flaw exploited in the wild
> Version 4.8.3 fixes a flaw letting malicious servers swap a payment for one paying an attacker
> The trap triggers when a user bumps the fee, signing the attacker's transaction
> Two users reported attacks, one lost funds, the fake address matched the real one's last four characters
> Every version before 4.8.3 is affected, upgrade and check addresses before signing
@ElectrumWallet
Anibal Ardid retweeted
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
Say "oh my" to Hermes.
Full omh TUI on Hermes Agent. One goal becomes a graph of subagents across model families, with lanes running live under your composer.
github.com/rlaope/oh-my-herm…
Anibal Ardid retweeted
🚨 JUST IN: Hardware wallet maker Keystone says hackers got into its website and walked off with customer names, contact details, home addresses and order info.
Seed phrases and keys weren't touched, but expect a wave of fake "Keystone support" scams.
Anibal Ardid retweeted
BRO 😭💀
The internals of the iPhone Duo Folio Case look better than the internals of the Galaxy Z Fold 8 itself.
Anibal Ardid retweeted
🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build.
Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime.
Here's how the exploit works: thehackernews.com/2026/10/re…
Anibal Ardid retweeted
Php2shell-scanner
Herramienta para escanear php2shell con 3 métodos: vía URL, localhost, SSH
github.com/aancw/php2shell-s…
Anibal Ardid retweeted
Apple really put a fully functional iPod emulator on its 404 page to celebrate the iPod’s 25th anniversary 👀
music.apple.com/us/MichiMods…
Anibal Ardid retweeted
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
github.com/assetnote/php2she…
Anibal Ardid retweeted







































