VR @Synacktiv | CTF with @RMUBYGG, @Hexagonctf, @ECSC_TeamFrance 20/21/22/23/24
France
Joined August 2018
- Tweets757
- Following1K
- Followers2K
- Likes10.3K
We've open-sourced the Hexacon 2026 Speedrun CTF challenges ! Congratulations to all the players👏See you next year 🍾
The Hexacon 2026 Speedrun challenges are now open to everyone! How fast can you solve them? Train now for the next edition 🏆
github.com/hexacon-fr/speedr…
voydstack retweeted
i jailbroke the nintendo switch 2
so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive
now watch my friends and i get cooked by bots
learn more and get the exploit pepsipu.com/blog/2026-10-swi…
voydstack retweeted
Andy Nguyen (@theflow0) presents at #TheSAS2026 on how he hacked the PS5 hypervisor (twice, with two amazing bugs!) and got Linux running on the console, with Steam games playable on it!!! 🤯
voydstack retweeted
We've released all information from the
@BSidesCbr
2026 Speedrun CTF! Congrats to stackotter for winning, and to jamie who was runner up.
All challenge files, solutions, and info can be found here github.com/toasterpwn/BSides…
Thanks everyone who watched, see you next year! 🚩⏱️
voydstack retweeted
Congratulations to InfoSect’s Rami on second place in @hexacon_fr’s speedrun CTF! He topped qualifying and took the final to a tiebreaker pwn challenge. A fantastic performance, we’re very proud.
Congrats to abiondo on the win, and thanks to the organisers!
voydstack retweeted
Here at @hexacon_fr Orange Tsai just showed us how to pop calc from Edge with only logic bugs... and then how to pop Edge from calc ☠️ LMAO
voydstack retweeted
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors.
CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
voydstack retweeted
Galaxy S26 Ultra: untrusted_app → root.
Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems.
Their impact spans Linux server LPE, container escape, and Android LPE.
Details: github.com/V4bel/InfinityCor…
voydstack retweeted
J-1 before @hexacon_fr!
We’ll be at the Palais Brongniart tomorrow.
Looking forward to seeing you there 🚀
voydstack retweeted
🥊 #Rikugan vs #Frontkick: who wins the agentic AI showdown?
Rikugan is open-source and making waves on IDA. Frontkick is built for Binary Ninja.
ToolAgent or CodeAct? Aiglematth breaks down the contenders.
Read the article ⬇️
synacktiv.com/en/publication…
voydstack retweeted
In 2023, @Synacktiv researchers identified an authentication bypass in #Danfoss SM800 and SC255/SC355 controllers. The same vulnerability, reported again in 2025, could be linked to the recent supermarket refrigeration attack.
🔎 Authentication Bypass - Danfoss SM800 & SC255/SC355: synacktiv.com/sites/default/…
🔎 Multiple Vulnerabilities - Danfoss SM800A: synacktiv.com/sites/default/…
This will be fun :)
🚀 Ready to compete old-school style (No 🤖)? Join our speedrun CTF at the @Synacktiv booth Day 1!
🔥 Qualifiers: 15-min try, 1 challenge. Top 8 fastest advance!
🏆 Finals: Friday 16th @ 9 PM (Social Event). 1v1 BO3 bracket
💻Pwn, Web, Crypto, Reverse
voydstack retweeted
I'm happy that my first article as part of the @SLCyberSec research team is finally out! 😁
It covers an interesting ImageMagick race condition that I found back in June, which, combined with a polyglot payload, allowed me to achieve file read/RCE on Discourse. This should resonate with those who've seen the recent @HacktronAI research.
I hope you'll enjoy it! 👇
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
ALT https://www.slcyber.io/research/a-jpeg-a-race-and-a-ghost-breaking-discourses-image-pipeline
voydstack retweeted
The Philips Hue Bridge got the Pwn2Own treatment. 💡
At #HardwearioNL2026, Mehdi Talbi (@Synacktiv) breaks down the journey from Zigbee attack surface to heap exploitation on a modern embedded system.
Register now: hardwear.io/nl-2026/talks-sp…
#HardwearNL2026
