@hackplayers profile picture
hackplayers @hackplayers

Hacking ético e in-seguridad informática: it's time to play!

Joined July 2010
  • Tweets 50,453
  • Following 1,337
  • Followers 54,863
3,310 Photos and videos
hackplayers retweeted
Óscar Alfonso Díaz@OscarAkaElvis
May 14
🎉 airgeddon 12.0 released! The 10th Anniversary Edition is here 👽 ✅ Partial 6GHz support ✅ Evil Twin improvements ✅ Multiple fixes & hardening & more Thanks to everyone supporting the project over the last 10 years ❤️ Sponsor: github.com/sponsors/v1s1t0r1… #wifi #linux #hacking
1
10
15
1,017
Microsoft fixes Entra ID flaw enabling privilege escalation securityaffairs.com/191414/s…

Microsoft fixes Entra ID flaw enabling privilege escalation

Microsoft fixed a Microsoft Entra ID flaw where the Agent ID Administrator role could enable privilege escalation and account takeover.

securityaffairs.com
1
510
New Android spyware Morpheus linked to Italian surveillance firm securityaffairs.com/191398/m…

New Android spyware Morpheus linked to Italian surveillance firm

Osservatorio Nessuno uncovered Morpheus spyware spreading via fake Android apps to steal data, highlighting rising covert surveillance tools.

securityaffairs.com
2
491
NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links securityaffairs.com/191408/s…

NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links

NCSC’s SilentGlass blocks malicious HDMI/DisplayPort links, protecting monitors from hardware attacks. Now commercialized for global use.

securityaffairs.com
1
399
Lo que se vende de IA en la Dark Web (III) — el mercado negro de datasets hackplayers.com/2026/04/lo-q…

Lo que se vende de IA en la Dark Web (III) — el mercado negro de datasets

Durante los dos artículos anteriores hemos hablado de herramientas como los LLMs sin censura o los deepfakes como servicio. Pero hay algo má...

hackplayers.com
443
Medtronic discloses security incident after ShinyHunters claimed theft of 9M records securityaffairs.com/191391/c…

Medtronic discloses security incident after ShinyHunters claimed theft of 9M records

Medtronic confirmed a breach of its IT systems after ShinyHunters claimed the theft of over 9 million records.

securityaffairs.com
1
1
466
LINKEDIN BROWSERGATE securityaffairs.com/191383/s…

LINKEDIN BROWSERGATE

BrowserGate claims LinkedIn secretly fingerprints users via extensions and device data, sending encrypted results to third parties for tracking.

securityaffairs.com
346
Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software securityaffairs.com/191347/i…

Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software

A Chinese national posed as a U.S. researcher, tricking NASA staff in a phishing campaign to steal sensitive data tied to defense software.

securityaffairs.com
1
401
Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting securityaffairs.com/191374/s…

Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting

CVE-2026-6770 let attackers fingerprint Firefox and Tor users, even in Private mode. Firefox 150 and Tor Browser 15.0.10 fixed it.

securityaffairs.com
1
1
500
Italy moves to extradite Chinese national to the U.S. over hacking charges securityaffairs.com/191368/a…

Italy moves to extradite Chinese national to the U.S. over hacking charges

Italy plans to extradite Xu Zewei to the U.S. over alleged hacks on COVID-19 research tied to state-backed operations.

securityaffairs.com
2
379
Fast16: Pre-Stuxnet malware that targeted precision engineering software securityaffairs.com/191325/m…

Fast16: Pre-Stuxnet malware that targeted precision engineering software

Fast16 is a pre-Stuxnet malware that tampered with precision software and spread itself. Evidence suggests links to U.S. operations.

securityaffairs.com
342
U.S. utility giant Itron discloses a security breach securityaffairs.com/191360/d…

U.S. utility giant Itron discloses a security breach

Itron detected unauthorized access to part of its IT environment on April 13, 2026, and launched incident response and notified authorities.

securityaffairs.com
310
Critical bug in CrowdStrike LogScale let attackers access files securityaffairs.com/191343/h…

Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed

CrowdStrike fixed CVE-2026-40050 in LogScale self-hosted, a critical flaw allowing unauthenticated file access via path traversal.

securityaffairs.com
1
552
GopherWhisper: new China-linked APT targets Mongolia with Go-based malware securityaffairs.com/191318/a…

GopherWhisper: new China-linked APT targets Mongolia with Go-based malware

ESET found a new China-linked APT, GopherWhisper, targeting Mongolia using Go-based malware, loaders, and backdoors.

securityaffairs.com
358
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 94 securityaffairs.com/191312/m…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 94

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

securityaffairs.com
390
Trigona ransomware adopts custom tool to steal data and evade detection securityaffairs.com/191294/c…

Trigona ransomware adopts custom tool to steal data and evade detection

Trigona ransomware now uses a custom command-line tool to steal data faster and evade detection, replacing tools like Rclone and MegaSync.

securityaffairs.com
385
Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION securityaffairs.com/191305/b…

Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs.

securityaffairs.com
277
U.S. CISA adds SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities catalog securityaffairs.com/191281/s…

U.S. CISA adds SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities catalog

The U.S. CISA added SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities (KEV) catalog.

securityaffairs.com
2
404
HTB: Sorcery 0xdf.gitlab.io/2026/04/25/ht…

HTB: Sorcery

Sorcery is a Linux box with a Rust Rocket web app backed by Neo4j, Gitea, and a Kafka message bus. I’ll exploit Cypher injection in a derive-macro-generated query to leak the seller registration key,...

0xdf.gitlab.io
325
Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844) securityaffairs.com/191267/u…

Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844)

Attackers exploit a Breeze Cache flaw (CVE-2026-3844) to upload files without login. Wordfence researchers detected over 170 attacks.

securityaffairs.com
1
466
Load more