Raphaël Lacroix

🚨Wiz Research update: MCP Auto-Execution: From Git Clone to Cloud Compromise. This let malicious repos run code and steal AWS credentials without consent via workspace MCP configs. Attackers could compromise cloud envs. Fixed in language server 1.65.0 (CVE-2026-12957). wiz.io/blog/amazon-q-…

0x3lk.github.io/posts/xsskerne… a high quality blog post from @0x3lk about @ToulouseHacking's 2026 most infamous reverse challenge. Worth reading if you love kernel, drivers and reverse.

Onelogon: Taking over Active Directory Accounts via Netlogon🔑 We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵

We just increased the maximum number of pinned chats from 4 to 10, so you can show 6 more people how much you love what they have to say.

I just wrote a new blog on bypassing CA policies in Entra ID that have a resource exclusion, and why you probably want to enable baseline enforcement if you have such policies. Enjoy! dirkjanm.io/bypassing-cond…

‼️🚨 Critical remote code execution in libssh2, the SSH client library embedded in countless tools: CVE-2026-55200, rated CVSS 9.2 by VulnCheck. Every version up to and including 1.11.1 is affected. It's an out-of-bounds heap write in ssh2_transport_read(), which fails to bound-check the SSH packet_length field. A malicious or MITM'd SSH server can send oversized packets to corrupt memory and run code on the connecting client. No known exploitation yet and it's not in CISA's KEV. Fix: move to a build that includes commit 7acf3df (PR #2052), and inventory anything that links libssh2 for SSH, SCP, or SFTP.

We've been working on something for a while. The talks your blue team doesn't want you to see. 🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation. 📍 Paris - Le Dernier Étage 📅 March 19–20, 2027 entrypoint.fr CFP and additional details coming soon.

considering switching from @HedgeDocOrg to @DocmostHQ anyone got feedbacks ?

@awesomekling @ladybirdbrowser Waiting for a @ladybirdbrowser-based @zenbrowser

vertical tabs in @ladybirdbrowser :)

We are starting to upload the videos of this year's talks. And nothing better to start with than our two keynotes : youtube.com/watch?v=fbicyl… and youtube.com/watch?v=obdPo6… from @misc0110 and @aurelsec

You won’t believe what’s next for Android! Tune in to the The Android Show | I/O Edition May 12 at 10 am PT for a look at the future. Set a reminder at Android.com/io-2026 and be the first to know 🗓️ #TheAndroidShow

To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More changes are on the way.

Last week happened the THCon 2026 CTF. A huge congrats to all our participants, especially the winners of this year on-site CTF : - 🥉 1984 (@UT3PaulSabatier) - 🥈 FlagaDOS (@ITrust_CyberSec) - 🏅 Old Tokenz (various companies)

👇👇👇

The CTF has ended, we thank you all 2134 players for taking part in it (except those that DoSed the infra 😅). Here is the leaderboard. Happy hacking until next year (and this time we'll make sure the infra holds on for 2000 people rather than the 500 of last year 😅).

🥁 barbhack.fr is back ! Et c'est le 29 août 2026 👉 Les sponsors c'est ici : sponsors@barbhack.fr 😎 ⏩ Le Call for paper est #OPEN cfp.barbhack.fr #MayThe4th #CTF #CFP #BBQ

GrapheneOS fixes Android VPN leak Google refused to patch #GrapheneOS #Google #Android cyberinsider.com/grapheneos-fix…

And that's a wrap for THCon 2026. Thanks again to all our sponsors, speakers, participants organizers and everyone else who contributed to make this day unique ! Remember that the CTF startes tomorrow on ctf.thcon.party, see you there or see you next year 👨‍💻

❤️‍🔥

THCon 2026 has started. We are experiencing a technical difficulty regarding the stream. The talks are still recorded so you'll be able to replay them.