tsune retweeted
I have successfully recreated & lab/field tested CVE-2026-109618 / CVE-2026-109619
> Two heap use-after-free primitives in PHP's `session.upload_progress` handler
(`php_session_rfc1867_callback`, ext/session/session.c)...
#CyberSecurity #infosec #php #C4b1NKr3W #php2shell
Jinzhu Li – Stage 2 – 17th Henryk Wieniawski International Violin Compet... youtu.be/bhJHTycP3U4?si=QTGV… via @YouTube
tsune retweeted
🛡️ Real-world defense builds real cyber resilience! The HITCON Cyber Range 2026 results are in!
Taiwan's annual enterprise-grade cyber defense competition, the HITCON Cyber Range 2026 International Online Competition, successfully concluded on October 2!
This year, more than 40 elite teams from Taiwan, South Korea, Japan, Mongolia, Vietnam, Hong Kong, and beyond went head-to-head in two divisions: the Cybersecurity Industry Division and the Non-Cybersecurity Industry Division ✨ Teams in the Non-Cybersecurity Industry Division represented 10 key sectors, including information technology, finance and insurance, transportation, manufacturing and construction, semiconductors, and government, underscoring how seriously organizations across industries now take cyber defense.
Over 7 hours of nonstop, high-intensity competition, every team demonstrated solid defensive skills and strong teamwork under pressure. Thank you to all participants for your passion and dedication. Let's give a big round of applause to the competitors for their outstanding performance 👏👏
🏆 Final Results
🔹 Non-Cybersecurity Industry Division
🥇 1st Place: HD Hyundai(HD Korea Shipbuilding & Offshore Engineering Co., Ltd.)
🥈 2nd Place: 隊名叫做什麼 XDXD (Moxa)
🥉 3rd Place: 街友 (JKOPAY)
🔹 Cybersecurity Industry Division
🥇 1st Place: GMO Ierae (GMO Cybersecurity by Ierae)
🥈 2nd Place: *an*啊 (CoreCloud Tech)
🥉 3rd Place: 安全守護,永不當機 (National Institute of Cyber Security)
Through this enterprise blue team competition, Hackers In Taiwan (HIT) aims to develop more cybersecurity talent with a holistic defensive perspective, help enterprises and public-sector organizations continuously strengthen their incident response, cyber exercises, and security governance, and deepen exchange and collaboration across the international blue team community.
✨ Special thanks to the Administration for Digital Industries of the Ministry of Digital Affairs (moda), TRAPA Security, and the Industrial Technology Research Institute (ITRI) for their generous support in building a premier stage for real-world cyber defense!
🔗 Official website: hitcon.org/2026/CyberRangexC…
#HITCON #CyberRange #HITCONCyberRange2026
Team Calif is hitting the stage in four cities before the end of October: Zurich, Paris, Tokyo, and San Francisco.
* @YouTube Security Summit in Zurich: @XorNinja will share what's new in mobile security.
* @hexacon_fr in Paris: @brucedang and @XorNinja will deliver the opening keynote, while Lukas Maar will show how to root Samsung phones.
* @offensive_con in Tokyo: Quang L will demonstrate a Chromium sandbox escape, and @blacktop__ will present an escape from Apple's Virtualization framework—the second public MTE bypass.
* [un]prompted in San Francisco: @brucedang and @pwnlambda will discuss zero-click remote exploits.
Come say hi if you're there!
tsune retweeted
いつもi☆Risを応援いただき、
誠にありがとうございます。
i☆Risより皆様へ
大切なお知らせがございます。
下記よりご確認をお願いいたします。
【大切なお知らせ】
iris.dive2ent.com/news/detai…
#i_Ris
tsune retweeted
IERAE CTF 2026 - FINAL for Humans Round 1 (Web) has started!
alpacahack.com/ctfs/ierae-fi…
【NHKニュース速報】
ノーベル化学賞に東京理科大名誉教授 硤合憲三さん(18:56)
#nhk_news news.web.nhk/newsweb
tsune retweeted
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization.
2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
tsune retweeted
IERAE CTF 2026 — FINAL for Humans #1
One Web challenge. A vanilla AI agent couldn't solve it in testing. AI is welcome.
October 10 · 09:00 JST
alpacahack.com/ctfs/ierae-fi…




















