Pentester | Work @VicOneAuto
Philippines
Joined December 2013
- Tweets1.6K
- Following588
- Followers1.1K
- Likes6.1K
Jerold Camacho retweeted
DEFCON 34: You can find our research here:
plugandpwn.com
You don't need a USB. You need to look like one.
Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen.
DEF CON 34 talk w/ @Qm9yamFN.
Link at the first comment.
Jerold Camacho retweeted
Two new logical flaws in Kerberos just dropped at Black Hat. Low-privileged user to full domain takeover, including domain admins.
If you're doing Active Directory pentesting, Kerberos attacks, red teaming, identity security, or detection engineering, read this.
KerberLoss (CVE-2026-25177) and ResetNightmare (CVE-2026-27912). Both are logical bugs, not memory corruption. Described as surprisingly easy to exploit.
semperis.com/blog/identity-c…
#Infosec #RedTeam #DetectionEngineering
Jerold Camacho retweeted
A robot doesn't need a broken motor to be unsafe. A poisoned model or exposed API is enough.
Physical AI Safety Stress Test. Digital-twin CTF at RHC, @defcon 34. 80 teams max.
#DEFCON34 #RoboticHackingCommunity
lab-r7.vicone.com/press-rele…
Jerold Camacho retweeted
I think this N-day research is potentially the biggest story of AI, vulnerability finding, and exploit development.
red.anthropic.com/2026/n-day…
1/6
Jerold Camacho retweeted
Robots are already in the world. we're here before the risks take place.
Robotic Hacking Community at DEF CON 34 is the first organized space for physical AI and robotics security. Las Vegas, August 6–9.
robotichackingcommunity.com
#DEFCON34 #PhysicalAI
Jerold Camacho retweeted
Real dog meets robot dog. 🤣 Curious with Julius The K9 dog reaction.
#Robotics #RobotDog #PhysicalAI #Computex
Jerold Camacho retweeted
Hacking your car’s dash cam in real time, remotely: tips, tricks, and lazy manufacturers. 🚘📹💉🏴☠👑
More details on:
LinkedIn: linkedin.com/posts/dlaskov_c…
Substack: it4sec.substack.com/p/hackin…
Jerold Camacho retweeted
🏴☠️ I can finally share a VMware 0day I discovered that led to CVE-2026-41702 (LPE as root). Funny enough, I found the bug in my hotel room after the second day of attending Csaba Fitzl (@theevilbit) & Gergely Kalman (@gergely_kalman) training at Zer0con.
therealcoiffeur.com/c111000.…
Jerold Camacho retweeted
That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
Jerold Camacho retweeted
I spoke about hacking meeting room hardware at the DEF CON Singapore C517 Village! Full blogpost: spaceraccoon.dev/discovering…
Jerold Camacho retweeted
I found a remote code execution on the latest TP-Link Tapo webcam models! The path to code execution wasn't direct and involved an interesting chain (3 CVEs). Check out my blogpost for more details!
spaceraccoon.dev/getting-she…
Jerold Camacho retweeted
Congratulations to Fuzzware.io, the Master of Pwn 2026, and to all researchers who turned innovation into impact. #P2OAuto #Pwn2OwnAutomotive2026
@ScepticCtf @diff_fusion @SeTcbPrivilege
Jerold Camacho retweeted
Big giveaway.
- (x3) Certified Red Team Expert (CRTE)
- (x3) Certified by Altered Security Red Team Professional for Azure (CARTP)
- (x10) Malware Analysis for Hedgehogs Bundle
CTRE and CARTP sponsored by @nikhil_mitt
Malware Analysis sponsored by @struppigel
Leave a comment below on what you'd like. Winners chosen in 24 hours.
Jerold Camacho retweeted
Breaking Into a Brother (MFC-J1010DW): Three Security Flaws in a Seemingly Innocent Printer by Nguyên Đăng Nguyên & Manzel Seet & Amos Ng
starlabs.sg/blog/2025/11-bre…
Jerold Camacho retweeted
At #Pwn2Own2025, our experts @Tek_7987 & @_Anyfun remotely compromised a Synology Beestation Plus via a pre-auth exploit, leading to full system takeover.
The vuln is now tracked as CVE-2025-12686 🔍
🔗 Full write-up: synacktiv.com/en/publication…
Jerold Camacho retweeted
Black Friday Giveaway & Exclusive Discounts
Win FREE access to:
• 1 CRTE seat
• 1 CETP seat
How to participate:
1️⃣ Like this post
2️⃣ Comment which course you’re interested in and why
3️⃣ Repost
Winners will be randomly selected and announced on December 2, 2025.
Those who’ve already availed the Black Friday offer are still eligible!
Black Friday Sale is LIVE:
• Up to 25% OFF Red Team Labs & Bootcamps
• Up to 15% OFF AltSecCON 2025 tickets
Grab your offer today: alteredsecurity.com/online-l…
#BlackFriday #Giveaway #RedTeam #CyberSecurity #CRTE #CETP #AlteredSecurity
ALT Altered Security Giveaway
Jerold Camacho retweeted
ALWAYS GET ASKED: How do I get started in IoT pentesting?
My main suggestion: pick a cheap device, open it up, and explore. You can just hack stuff!
I'm doing a FREE mini course on IoT pentesting basics.
First up: device teardowns & debug interface hunting
brownfinesecurity.com/blog/i…
Jerold Camacho retweeted
✅ #SPIRITCYBER25 has come to a successful close!
👏 Big shoutout to everyone who participated and congrats to our Top 6 teams once again - your findings have helped advanced Singapore’s cyber resilience.
1️⃣ zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
2️⃣ NullIoT: @bytehx343 @0xakm, @mgthura404
3️⃣ Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang, Azer
4️⃣ Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
5️⃣ saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat
6️⃣ Testalways: @testalways
Jerold Camacho retweeted
🇸🇬 Big week for @yeswehack at #SICW2025! The #SPIRITCYBER25 Hackathon will see 6 elite teams competing live on 22–23 Oct to strengthen Singapore’s critical #IoT systems.
🏆 From 30+ teams which participated in the 4-week qualifiers, these top hunters have earned their spot in the finals:
🔹zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
🔹Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang Ou-Yang, Azer WHR
🔹Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
🔹Testalways: @testalways
🔹NullIoT: @bytehx343 @0xakm, @mgthura404
🔹saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat
Jerold Camacho retweeted
Team "Peenoise" with @shipcod3 @jeroldcamacho
We just got a reward for a high vulnerability submitted on @yeswehack -- OS Command Injection (CWE-78). yeswehack.com/hunters/japzdi… #YesWeRHackers #SPIRITCYBER25 #CSA
