To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.

🆕 Nuevo artículo en RootedCON Newsletter De Valencia a Madrid: la comunidad continúa. Repasamos lo que nos dejó #RootedVLC, las próximas jornadas #STIC2026 y lo que viene en RootedCON Madrid 2027. Y también os contamos cómo podéis compartir vuestras investigaciones con la comunidad 👇 rootedcon.ghost.io/de-valenc…

Want to take the stage at #RootedCON Madrid 2027? Our Call for Papers is OPEN! We're looking for original research, real-world hacking, tools, PoCs, and technical knowledge. Go for it! 📩 cfp.rootedcon.com/ #RootedCON2027 #CFP

PSA the ledger incident isn't limited to Asia This is a device purchased in store from an official reseller in Europe (a legitimate device doesn't have any of these cables as can be seen in picture 2) This even seems to be an old version of the 'spy implant' even though the device was purchased a couple of weeks ago. The newer versions usually hide the implant by the screen so it's easier to miss What's interesting is that this compromised ledger never transfered funds to an exploiter. Either the device didn't work or they were waiting for a more widespread usage of the comprised devices? If you own a ledger that didn't directly come from the ledger online store make sure to not just rely on the software genuinely check by ledger but to actually open up the ledger yourself to make sure its original, again there are reported cases in Asia, south America and now Europe as well. @MagicalTux made some useful videos on how to open the ledger and what to look for.

Hack in Hire will be at #Slush 2026 in Helsinki, 18 and 19 November. We're raising our first funding round. We got here bootstrapping, working with clients like ING Hubs Spain, Zynap and Zerolynx, because we wanted to test the model before asking anyone to bet on it. It works, and clients are renewing. Now it needs to move faster. We'll be showing the product and meeting investors focused on technology, cybersecurity, hiring or European B2B. If that's you, we'd like to talk before Helsinki, not just there. This one happens thanks to Minc. Being part of the Malmö startup community has put us in rooms we wouldn't have reached alone.

The terms for this sucks, and you agree to them by just applying. - §2.4 Anthropic "may develop similar or competitive technology" - §2.4 permits reuse, for any purpose, of general ideas, know-how and techniques remembered by personnel looking at your data - §D.4 prohibits accessing their services to build competing products or services - §F.1 allows them to retain and perform safety reviews, superseding ZDR (whats the point of ZDR then?) and it could get worse later! - §6 permits changes to the addendum at any time without notice or liability @jason you advising your start ups to apply for this? [1] anthropic.com/startup-progra… [2] anthropic.com/legal/startup-…

ICEYE does satellites. @nokia does communications. Today we announced that together we do sovereign satellite communications. Read more: hubs.li/Q04ySlhY0