CSIRT Manager somewhere in the Nordics, interested in passwords security, member of Zenk-Security. https://xitter.cf/t.co/PjUstFMAAc
Joined May 2009
- Tweets10K
- Following2.1K
- Followers1.9K
- Likes6.5K
Pinned Tweet
Following my talks at #PasswordsCon and #UYBHYS2019 , I'm proud to announce the open sourcing of @KindredGroup 's password reuse checking tool to protect our customers against password reuse attacks: github.com/kindredgroup/paf-…
Hydraze / @[email protected] retweeted
hashcat v8.0.0 released!
The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards.
Release notes: github.com/hashcat/hashcat/b…
Download: hashcat.net/hashcat/
Hydraze / @[email protected] retweeted
1/ EZ Tools 2026.10 is out, all on .NET 10 (LTS)
✅ More accurate: 331K more event log records, hive logs replayed as Windows does, every test hive loads
⚡ Faster: up to 9x; EvtxECmd and Registry 2x
📉 Less memory: up to 82% less
Update with Get-ZimmermanTools 🧵 #DFIR
Hydraze / @[email protected] retweeted
Quad9: Farewell, France quad9.net/news/blog/au-revoi…
Hydraze / @[email protected] retweeted
🚨 High-severity Node.js flaw could allow remote code execution; CVE-2026-111497
Node.js has patched an out-of-bounds write vulnerability in its bundled Brotli decoder.
⠀
An attacker able to supply malicious Brotli-compressed data to an application could potentially corrupt memory and execute code on the underlying server.
⠀
Affected:
• Node.js 22.x
• Node.js 24.x
• Node.js 26.x
Fixed:
• Node.js 22.23.4
• Node.js 24.22.1
• Node.js 26.12.1
⠀
End-of-life Node.js versions may also be vulnerable and will not receive upstream security updates.
Administrators should upgrade and restart affected services.
Source:
nodejs.org/en/blog/vulnerabi…
Hydraze / @[email protected] retweeted
CLAUDE FOUND THE SEEDS
anthropic.com/research/ecdsa…
Hydraze / @[email protected] retweeted
Based on what Dr. Google says the left hemisphere controls…that’s a fact and not a rumor.
Hydraze / @[email protected] retweeted
The long awaited and rumored KVM guest->host escape exploit finally dropped!
Hydraze / @[email protected] retweeted
👀 La cyberattaque ayant privé de systèmes de réfrigération @CooperativeU et @intermarche était-elle une attaque ciblée sur la France ?
💥 Sur plus de 6 000 instances @Danfoss exposées, près de 50% sont situées en France.
👉 Notre analyse complète :
blog.onyphe.io/frigo-dimport…
Hydraze / @[email protected] retweeted
Meet Mistral Large 4, aka Le Chonk.
• 1T parameters, natively multimodal. 49B active.
It is the best open weights model from US or Europe on aggregated benchmarks.
• State-of-the-art on critical workloads, including cyber defense, manufacturing and finance and it surpasses closed frontier models on visual grounding.
• Forged in Europe end-to-end and is deployable from Europe via our own Mistral Cloud infrastructure.
• Available to all via API today. Working with cybersecurity partners privately.
Open weights release end of October.
🤖 Made with AI
Hydraze / @[email protected] retweeted
Heads up, there is a 1-day full MikroTik RCE chain against SSH being used in the wild. Patch was released yesterday, so if you have a MikroTik router with ssh open on the internet, it may already be compromised. Detection guidance and IOCs courtesy of @CERT_Polska_en cert.pl/en/posts/2026/09/vul…
Hydraze / @[email protected] retweeted
アロマデュフューザーにスプレー缶で色をつけてみました。なかなかいい感じになったと思う。 – at Yokkaichi-shi, Mie
Hydraze / @[email protected] retweeted
WE ARE SO BACK
contest-2026.korelogic.com/
Hydraze / @[email protected] retweeted
Microsoft Defender now monitors RPC activity techcommunity.microsoft.com/…
Hydraze / @[email protected] retweeted
For those who don’t know: quantamagazine.org/sci-fi-wr…
Hydraze / @[email protected] retweeted
🚨 NGINX Rift CVE-2026-42945 PoC upgraded — full ASLR bypass now public.
New chain: heap overflow + same-host LFI / arbitrary file read → leaks runtime state from /proc/<worker>/mem, derives heap targets + system() address on the fly.
No hardcoded addresses. No ASLR disable. Unauthenticated RCE on rewrite + set directive setups.
Patch now:
• OSS: 1.30.1 / 1.31.0
• Plus: R36 P4, R35 P2, R32 P6
⚡ An 18-year-old flaw in NGINX can let unauthenticated attackers run code or crash servers using crafted HTTP requests.
Tracked as CVE-2026-42945 and named NGINX Rift, the bug affects NGINX Plus and Open Source.
Patch details and mitigation steps: thehackernews.com/2026/05/18…
Hydraze / @[email protected] retweeted
Full LPE chain for the FreeBSD 14.x kernel via a setcred(2) stack buffer overflow. SMAP and SMEP bypassed.
Write-up + exploits: fatgid.io/
Hydraze / @[email protected] retweeted
Patch your Linux boxes!
Copy.Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms.
Found by the teams at @theori_io and @xint_official
More details below
xint.io/blog/copy-fail-linux…
Hydraze / @[email protected] retweeted
holy shit
codeberg.org/hails/wsl9x
Hydraze / @[email protected] retweeted
gopacket is live! Check it out, it is intended to be a full reimplementation of Impacket in Go (it is in beta please send me bug reports) github.com/mandiant/gopacket…
Hydraze / @[email protected] retweeted
Every once in a while an improvement is so remarkable it leaves you completely flabbergasted.
Antiklesys asked the hashcat team for help with iCLASS legacy key recovery.
Chick3nman delivered.
Before on CPU: 40 hours.
Now: 6 minutes.
Before on GPU: not supported.
Now: 6 seconds.
That is not an incremental improvement.
That is a different world.
Big thank you to Antiklesys and the whole hashcat team.
#iClass #RFID #Proxmark3 #Hashcat #KeyRecovery #OpenSource #PhysicalSecurity
