Forever seeking Yume forever
France
Joined November 2019
- Tweets2.1K
- Following54
- Followers748
- Likes8.1K
3 mois et demi sans avoir remis les pieds dans ce tas de merde, je suis heureux et proactif dans mes projets 😋
Shunthail retweeted
🚨 UPDATE: PHP2Shell exploitation confirmed in the wild.
Perplexity researcher Adel Karimi observed successful exploitation on honeypot servers, with attackers executing shell commands to fetch additional payloads.
No second-stage payloads have been recovered so far.
Details: thehackernews.com/2026/10/ph…
Les vrais fans qui connaissent la licence par cœur, qui ont consacré une partie de leur enfance au jeu, ils n’ont jamais rien eu
🎮 ALERTE INFO - Rockstar Games a commencé à envoyer aux médias les premiers CODES D’ACCÈS à GTA 6 pour leur permettre de TESTER le jeu en avant-première. Les premières critiques seront publiées le 18 novembre, soit 1 jour avant sa sortie officielle. (via @NateTheHate2)
Shunthail retweeted
‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
Details: cybersecuritynews.com/micros…
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component.
Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account.
#cybersecuritynews
Shunthail retweeted
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/br…
Shunthail retweeted
🔴 MARSEILLE | Une minute de silence pour les victimes de l'attentat raciste de Trappes
Ils nomment les responsables : l'offensive réactionnaire et sécuritaire du gouvernement et de l'extrême droite.
Shunthail retweeted
🚨 Hackers breached enterprise firewalls and VPNs worldwide in a campaign linked to k0t.
Over 70,000 exposed credentials identified.
Fortinet and Palo Alto devices targeted. Persistent access established. Data exfiltrated.
Inside the attack chain and suspected ransomware links: thehackernews.com/2026/10/ha…
Shunthail retweeted
🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build.
Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime.
Here's how the exploit works: thehackernews.com/2026/10/re…
Shunthail retweeted
‼️ PHP2Shell exploit attempts hit millions as attackers try to deploy Mirai malware. Exposed attacker servers reveal RCE tooling.
No successful compromises confirmed so far.
Inside the payloads, exploit tools, and failed attempts → thehackernews.com/2026/10/ph…
Shunthail retweeted
les dernières 48h :
> panne Orange (timing intéressant avant la prochaine manif des ténèbres)
> vuln PHP (on est complètement mort, force à nous)
> 0day PyTorch (maxi force)
> la Chine qui utilise l'IA pour target des centaines d'entreprises (mini force)
> Railway qui se fait hack (nitro force)
> potentiel RCE GitLab (méga force)
> RCE Node.js (turbo force)
en résumé : force
la "bonne" nouvelle c'est que presque tout a déjà été hacké en France il ne reste plus grand chose à dump
Shunthail retweeted
🚨 Actively Exploited: CVE-2026-85706 (CVSS 10.0).
An unauthenticated path traversal in GitLab CE/EE allows attackers to read arbitrary files off your server. All it takes is one HTTP request to expose CI/CD secrets, deploy tokens, and SSH keys.
Patch self-managed instances immediately (19.1.8 / 19.2.6 / 19.3.2).
Want to see how this access-control failure works under the hood? Practice exploiting it safely in our new Offensive Cyber Range lab on Learn Enterprise.
Try it here: bit.ly/4yqqKOe
