Programming ✦ Linux ✦ Electrical ✦ Gaming; Always building bigger dreams; https://teapawt.net/t.co/m2dv757X8R ✦ https://teapawt.net/t.co/qxObxYtW1r
In the sky
Joined May 2017
- Tweets44.2K
- Following859
- Followers810
- Likes112K
ByteDrag𝟶n retweeted
‼️ Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers
Details: cybersecuritynews.com/php2sh…
Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and South Korea, including three systems in a US government-affiliated environment. Dream researchers uncovered the campaign’s files on October 25, revealing a path from exposed firewall management interfaces to internal Active Directory services.
The attack paired PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, with Fragnesia, a Linux kernel privilege escalation flaw tracked as CVE-2026-46300.
Dream described the PHP2Shell code as a custom, nonpublic implementation tailored to the targeted firewall platform, rather than a copy of a known public exploit. The full chain reportedly installed a root webshell in under 15 minutes.
#cybersecuritynews
ByteDrag𝟶n retweeted
🚨🇺🇸 Massive leak reportedly exposes more than 41,000 U.S. Homeland Security employees
A group calling itself the Department of Peace claims it compromised a Department of Homeland Security system and obtained records belonging to employees across ICE, CBP, CISA and several other DHS agencies.
The dataset reportedly contains names, work emails, cellphone numbers, job assignments and facility locations. It also exposes memberships in internal access groups associated with undercover and covert operations, wiretap programs, Palantir software, Cellebrite tools and xAI’s Grok chatbot.
⠀
Journalists who reviewed the material found records connected to undercover ICE personnel and other sensitive law enforcement roles. The data has since been released publicly with a searchable interface.
The group reportedly gained access using a compromised Okta single sign-on account. DHS, ICE and CBP had not publicly confirmed the breach or responded to requests for comment at the time of publication.
ByteDrag𝟶n retweeted
BREAKING: Emergency response triggered at U.S. nuclear facility in South Carolina following reports of a fire and “unfiltered radiological release.”
ByteDrag𝟶n retweeted
‼️ Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS
Details: cybersecuritynews.com/0-clic…
A new zero-click bug in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to the conference agenda.
Aziz says he got past Telegram’s server-side checks and that the flawed code still ships in its apps. Animated stickers use the TGS format, which is a compressed Lottie animation file. Telegram’s rlottie library draws them on your screen.
Pasquale Pillitteri explained that one tiny 269-byte sticker could crash Telegram and lock a chat. He also noted that server filtering does not catch every case. Telegram Desktop 7.2.7 fixed that specific variant.
#cybersecurityNews
ByteDrag𝟶n retweeted
JUST IN: Dropbox cuts 9% of its workforce & announces the departure of its Chief Technology Officer.
ByteDrag𝟶n retweeted
FAA says there was a "U.S. Government Nuclear Incident" at the Savannah River site amid emergency response at U.S. Department of Energy industrial complex near Aiken, South Carolina.
They add that temporary flight restrictions are In effect.
ByteDrag𝟶n retweeted
❗️ A critical Signal bug let the other person on a call keep listening after you hung up.
Flooding the call's event queue could stall your hang-up, leaving your mic and possibly your camera live.
Signal patched CVE-2026-113380 on Android in September. No attacks are known.
ByteDrag𝟶n retweeted
BREAKING: National Guard units in all 50 states are reportedly "mobilizing for next week's elections," per Ken Klippenstein
ByteDrag𝟶n retweeted
ppu toys is available for SNES PPU graphics.
Tiny playground for a legendary chip. Make pictures like it’s 1991. Build live graphics toys with Lua and an authentic SNES PPU. Remix an experiment or start with a blank screen. Community toys and studio available.
Made by Liora Labs.
ppu.toys/
#SNES #PPU #Graphics #Lua #RetroComputing
ByteDrag𝟶n retweeted
The Looping Entity came to me and said all will be fine... and I felt the need to trust it and walk with it, for a time...
ByteDrag𝟶n retweeted
Nintendo’s worst nightmare begins as Switch 2 exclusive games start running on PCs and Macs
🔗videocardz.com/newz/nintendo…
ByteDrag𝟶n retweeted
A 32GB DDR5 RAM kit bought for just $110 in 2024 is now listed for over $1,500. 🔗 wccf.tech/1lgdp
That's a price difference of approximately 1,285%, or nearly 14 times the original purchase price.
ByteDrag𝟶n retweeted
🚨 PHP2Shell exploited in real-world attacks.
An attacker chained PHP2Shell with a Linux kernel flaw to gain root access to 25 servers across four countries, including three in a U.S. government-affiliated environment.
The intrusion extended into the internal network, where the attacker targeted Active Directory.
Suspected China nexus. Signs of AI-assisted tooling.
Read the full report: thehackernews.com/2026/10/ph…
ByteDrag𝟶n retweeted
ALERTA MAXIMA EN NINTENDO 🚨🚨 LOS "MODDERS" YA TIENEN EL ZELDA OCARINE OF TIME REMAKE Y A TRAVES DE INGENIERIA INVERSA Y LA IA TENDRAN LISTO EL EMULADOR EN BREVE, SERA EJECUTABLE ANTES QUE SALGA, FURUKAWA CONVOCO UNA REUNION DE EMERGENCIA EN KYOTO.
ZELDA PRELOAD MEETS SWITCH 2 JAILBREAK
Notebookcheck reports that the 24.54 GB Ocarina of Time pre-load has begun, exposing the game to potential data mining via the ns2jb exploit.
• Much of the dump is likely encrypted, with decryption keys not appearing until the November 5th launch.
• Hackers may still uncover dungeon layout differences and expanded dialogue by examining file names and structures.
Nintendo has not yet blocked the vulnerability that allowed previous game dumps. 🎮
ByteDrag𝟶n retweeted
GOG is getting into game publishing.
The newly independent DRM-free storefront has teamed up with indie publisher Retrovibe to launch Retrovibe by GOG, a new initiative focused on helping indie devs bring their games to PC and consoles.
The partnership will handle things like funding, marketing, creator and media outreach, and getting games certified for release.
The first games are already on the way:
> Cop Bastard, releasing October 29
> Project Warlock: Lost Chapters, the third game in the boomer-shooter series
These won’t be GOG exclusives. Both games are also coming to Steam.
