@hackplayers

Hacking ético e in-seguridad informática: it's time to play!

 Spain
hackplayers.com
Joined July 2010
  • Tweets50.5K
  • Following1.3K
  • Followers54.7K
3.3KMedia
hackplayers retweeted
h-c0n@h_c0nSep 15
🚨 ¿Tienes algo que contarle a la comunidad hacker? El CFP de #hc0n2027 YA ESTÁ ABIERTO. 🟢 Comparte tu investigación, técnica, herramienta, experiencia o investigación con la comunidad. 📅 5 y 6 de febrero de 2027 📍 Madrid 👉 Envía tu propuesta: forms.gle/D1kKESiBND3Xtiu6A
1
23
2
36
3,216
🪟 Windows 0-day: ALPC → SYSTEM CVE-2026-85880 es un heap overflow en Windows ALPC que permite elevar privilegios localmente. Microsoft la corrigió en septiembre y CISA la marca como explotada. 🔗 github.com/advisories/GHSA-9…

CVE-2026-85880 - GitHub Advisory Database

Heap-based buffer overflow in Windows ALPC allows an...

github.com
1
6
1,664
🚨 Next.js: SVG → RCE CVE-2026-94545 afecta a next/og ImageResponse. Si valores controlados por el atacante llegan al SVG generado, puede terminar en ejecución de código en el servidor. Afecta a Next.js 16.2.x → 16.3.5. 🔗 github.com/vercel/next.js/se…

Remote Code Execution in next/og ImageResponse

## Impact The Node.js `ImageResponse` implementation from `next/og` is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-contr...

github.com
1
3
1,887
GitSpawn: RCE en agentes de coding con IA. Un .git/config malicioso puede convertirse en ejecución de comandos en agentes como Claude Code, Codex, Cursor o Qwen Code. Supply chain + AI agents. Mala combinación. 🔗 shattered.io/gitspawn-ai-cod…

GitSpawn Flaw Hits 7 AI Coding Agents, 4 Unpatched

GitSpawn lets malicious .git configs run code in Claude Code, Codex, Cursor and 4 more AI coding agents. See which are patched and which are not.

shattered.io
1
1
5
1,381
hackplayers retweeted
h-c0n@h_c0nJul 13
🤖#hc0n2027 @h_c0n CTF badge: a fighting Tamagotchi 📷Kill other players' pets over the air. Steal their flags. Dig through 10k lines of firmware for the secrets @therealdreg buried... and A DEADBUG PART! 🎬youtu.be/aNJi0mxBR7Q

HC0N 2027 CTF badge: a fighting Tamagotchi 💩Kill other players' pets over the air. Steal their...

HC0N 2027 CTF badge: a fighting Tamagotchi 💩Kill other players' pe...

youtube.com
4
4
1,191
hackplayers retweeted
Dreg@therealdregJun 30
We’re getting started... @hackplayers @h_c0n h-c0n.com/
2
4
633
🎉 airgeddon 12.0 released! The 10th Anniversary Edition is here 👽 ✅ Partial 6GHz support ✅ Evil Twin improvements ✅ Multiple fixes & hardening & more Thanks to everyone supporting the project over the last 10 years ❤️ Sponsor: github.com/sponsors/v1s1t0r1… #wifi #linux #hacking
1
11
16
1,228
Microsoft fixes Entra ID flaw enabling privilege escalation securityaffairs.com/191414/s…

Microsoft fixes Entra ID flaw enabling privilege escalation

Microsoft fixed a Microsoft Entra ID flaw where the Agent ID Administrator role could enable privilege escalation and account takeover.

securityaffairs.com
2
890
New Android spyware Morpheus linked to Italian surveillance firm securityaffairs.com/191398/m…

New Android spyware Morpheus linked to Italian surveillance firm

Osservatorio Nessuno uncovered Morpheus spyware spreading via fake Android apps to steal data, highlighting rising covert surveillance tools.

securityaffairs.com
1
3
809
NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links securityaffairs.com/191408/s…

NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links

NCSC’s SilentGlass blocks malicious HDMI/DisplayPort links, protecting monitors from hardware attacks. Now commercialized for global use.

securityaffairs.com
1
2
655
Lo que se vende de IA en la Dark Web (III) — el mercado negro de datasets hackplayers.com/2026/04/lo-q…

Lo que se vende de IA en la Dark Web (III) — el mercado negro de datasets

Durante los dos artículos anteriores hemos hablado de herramientas como los LLMs sin censura o los deepfakes como servicio. Pero hay algo má...

hackplayers.com
1
2
661
Medtronic discloses security incident after ShinyHunters claimed theft of 9M+ records securityaffairs.com/191391/c…

Medtronic discloses security incident after ShinyHunters claimed theft of 9M+ records

Medtronic confirmed a breach of its IT systems after ShinyHunters claimed the theft of over 9 million records.

securityaffairs.com
1
2
647
LINKEDIN BROWSERGATE securityaffairs.com/191383/s…

LINKEDIN BROWSERGATE

BrowserGate claims LinkedIn secretly fingerprints users via extensions and device data, sending encrypted results to third parties for tracking.

securityaffairs.com
475
Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software securityaffairs.com/191347/i…

Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software

A Chinese national posed as a U.S. researcher, tricking NASA staff in a phishing campaign to steal sensitive data tied to defense software.

securityaffairs.com
1
3
535
Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting securityaffairs.com/191374/s…

Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting

CVE-2026-6770 let attackers fingerprint Firefox and Tor users, even in Private mode. Firefox 150 and Tor Browser 15.0.10 fixed it.

securityaffairs.com
2
2
601
Italy moves to extradite Chinese national to the U.S. over hacking charges securityaffairs.com/191368/a…

Italy moves to extradite Chinese national to the U.S. over hacking charges

Italy plans to extradite Xu Zewei to the U.S. over alleged hacks on COVID-19 research tied to state-backed operations.

securityaffairs.com
2
471
Fast16: Pre-Stuxnet malware that targeted precision engineering software securityaffairs.com/191325/m…

Fast16: Pre-Stuxnet malware that targeted precision engineering software

Fast16 is a pre-Stuxnet malware that tampered with precision software and spread itself. Evidence suggests links to U.S. operations.

securityaffairs.com
417
U.S. utility giant Itron discloses a security breach securityaffairs.com/191360/d…

U.S. utility giant Itron discloses a security breach

Itron detected unauthorized access to part of its IT environment on April 13, 2026, and launched incident response and notified authorities.

securityaffairs.com
378
Critical bug in CrowdStrike LogScale let attackers access files securityaffairs.com/191343/h…

Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed

CrowdStrike fixed CVE-2026-40050 in LogScale self-hosted, a critical flaw allowing unauthenticated file access via path traversal.

securityaffairs.com
1
2
613
GopherWhisper: new China-linked APT targets Mongolia with Go-based malware securityaffairs.com/191318/a…

GopherWhisper: new China-linked APT targets Mongolia with Go-based malware

ESET found a new China-linked APT, GopherWhisper, targeting Mongolia using Go-based malware, loaders, and backdoors.

securityaffairs.com
409
Load more