Co-founder & CTO @ @usemilgram • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things.
Joined January 2009
- Tweets20.7K
- Following2.1K
- Followers47.9K
- Likes27.4K
Simone Margaritelli retweeted
i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
Simone Margaritelli retweeted
3% of “critical” software security bugs, in all of recorded history, have been found in the last month.
This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total
Do you realize how fucking insane that is?
Simone Margaritelli retweeted
⚠️ Python packages are vulnerable to remote code execution via the same node2shell CVE-2026-111497.
You may be affected if you are using the Brotli library. Note this is a very popular dependency (⬇️100m/month)
Other major services likely affected. We will communicate ASAP when we are able to.
Aikido detects this. Patches available.
Simone Margaritelli retweeted
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
Simone Margaritelli retweeted
I think we've discovered another critical vulnerability:
CVE-2026-BURNOUT: AppSec Professional Exhaustion
Severity: Critical (CVSS 10.0)
Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures.
Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends.
Attack vector: Reading security advisories.
Affected versions: All AppSec professionals, regardless of experience.
Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
Simone Margaritelli retweeted
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches thehackernews.com/2026/10/ur…
Simone Margaritelli retweeted
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library.
CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.
What you need to know ↓ thehackernews.com/2026/10/cr…
Simone Margaritelli retweeted
Ruby’s turn 😅
Remember the GitLab bug? Well now it moved upstream into Ruby.
Multiple 10.0 CRITICAL exploits.
Patch now 🚨
Happy Friday 🤠
ruby-lang.org/en/news/2026/1…
Simone Margaritelli retweeted
shut... the ... front... door...
was JAVA feeling lonely and wanted to get into the party?????
Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1
oracle.com/security-alerts/a…
@uwu_underground
Simone Margaritelli retweeted
Reproduced the Brotli memory corruption bug (CVE-2026-111497) using a simple Node.js + Express app.
Patched and unpatched versions produce different decompressed output, making it possible to remotely identify vulnerable servers.
Simone Margaritelli retweeted
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
Simone Margaritelli retweeted
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
As high as CVSS 9.0. Whoops.
phoronix.com/news/LKML-New-T…
Simone Margaritelli retweeted
Bind9 RCE anyone?
linuxcompatible.org/story/is…
Simone Margaritelli retweeted
Some more updates, github.com/GoldraK/php2shell… , implements chain_e, which was first reported from jackalsyn. This works on a lab for the patched releases. Verify on your end always under a lab env.
