This @bishopfox tool is next level! 🚀
Eyeballer uses AI to analyze screenshots and sorts them into categories based on appearance, including:
👀 Old-looking pages,
👀 Login pages,
👀 404 responses
👀 Web apps
👀 Parked domains
Get your eyeballs around this👇
Eyeballer uses AI to analyze screenshots and sorts them into categories based on appearance, including:
👀 Old-looking pages,
👀 Login pages,
👀 404 responses
👀 Web apps
👀 Parked domains
Get your eyeballs around this👇
0
4
52
2,146
André Baptista retweeted
For the second year in a row, Ethiack ran the CTF at @Bsideslisbon. The final match lasted over an hour and 15 minutes, and more than 50 people stayed to watch it live.
We also took the stage: Our Research team brought their DEFCON talk, “Write Once, Shell Everywhere: Turning nto RCE,” to Lisbon.
Huge thanks to our team and to everyone who came to play, watch, and cheer. And to BSides Lisbon for having us back.
Stay tuned. we'll share more details in the coming days!
We also took the stage: Our Research team brought their DEFCON talk, “Write Once, Shell Everywhere: Turning nto RCE,” to Lisbon.
Huge thanks to our team and to everyone who came to play, watch, and cheer. And to BSides Lisbon for having us back.
Stay tuned. we'll share more details in the coming days!
0
1
9
469
CTFs ain't dead!
We organized a speed pwning CTF at @Bsideslisbon. No AI, human-only.
Congrats to the winners!
1st- s1gn3rs
2nd- h11p13
3rd- tmv11
We organized a speed pwning CTF at @Bsideslisbon. No AI, human-only.
Congrats to the winners!
1st- s1gn3rs
2nd- h11p13
3rd- tmv11
5
22
240
17,563
André Baptista retweeted
BSides Lisbon is on fire! 🔥
As always every year, the spirit and vibe here are just incredible.
Super excited about the Speed PWN CTF we created at @ethiack !
The finals are tomorrow: 1v1, Humans only
Also, big congrats to @s3np41k1r1t0 and @castilho101 for an amazing ou guys killed it !
#BSidesLisbon #Ethiack #SpeedPwn
As always every year, the spirit and vibe here are just incredible.
Super excited about the Speed PWN CTF we created at @ethiack !
The finals are tomorrow: 1v1, Humans only
Also, big congrats to @s3np41k1r1t0 and @castilho101 for an amazing ou guys killed it !
#BSidesLisbon #Ethiack #SpeedPwn
1
3
9
513
Attackers often exploit new vulnerabilities before defenders can react, sometimes before the vulnerability even gets a public ID (a CVE).
In the first half of 2026, 487 vulnerabilities were listed as exploited. For 137 of them (>25%), the exploitation record existed on or before thehed.
We built Ethiack Zero to track emerging vulnerabilities from the first public signal (a patch, a GitHub advisory, news, a blog post) and validate actual exploitability before the CVE is officially published.
Check it out below👇
In the first half of 2026, 487 vulnerabilities were listed as exploited. For 137 of them (>25%), the exploitation record existed on or before thehed.
We built Ethiack Zero to track emerging vulnerabilities from the first public signal (a patch, a GitHub advisory, news, a blog post) and validate actual exploitability before the CVE is officially published.
Check it out below👇
4
1
5
1,098
Live hardware hacking is coming to @Bsideslisbon.
Get ready for the @ethiack SOHO Smashup on Friday, October 30! Inspired by Pwn2Own, we’re dropping real, aging office equipment right on the floor:
• One office router
• One printer
The challenge: Hack them live in the lounge ience.
Get creative with your exploits, AI is fully allowed, and we are accepting any kind of vulnerability. Just visit us in the lounge to schedule your time slot.
Goodies await anyone with a successful exploit. See you there 👇
Get ready for the @ethiack SOHO Smashup on Friday, October 30! Inspired by Pwn2Own, we’re dropping real, aging office equipment right on the floor:
• One office router
• One printer
The challenge: Hack them live in the lounge ience.
Get creative with your exploits, AI is fully allowed, and we are accepting any kind of vulnerability. Just visit us in the lounge to schedule your time slot.
Goodies await anyone with a successful exploit. See you there 👇
1
0
8
768
André Baptista retweeted
🚨CVE-2026-111497 (Node2Shell): a critical flaw in Google's Brotli decoder may let remote attackers execute code on servers that decompress untrusted Brotli data.
Affects Node.js and Bun. Patch now: Node.js 22.23.4 / 24.22.1 / 26.12.1, Bun 1.4.4.
ethiack.com/info-hub/resea…
Affects Node.js and Bun. Patch now: Node.js 22.23.4 / 24.22.1 / 26.12.1, Bun 1.4.4.
ethiack.com/info-hub/resea…
1
4
10
1,096
André Baptista retweeted
Published our high fidelity scanner for node2shell: github.com/assetnote/node…
Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
6
80
378
20,134
André Baptista retweeted
Attackers don’t wait for the CVE. Neither does Ethiack Zero, now live for 3 days.
Here’s why we built it 👇
ethiack.com/info-hub/resea…
Here’s why we built it 👇
ethiack.com/info-hub/resea…
0
4
57
353,241
André Baptista retweeted
Just published our high fidelity scanner for php2shell: github.com/assetnote/php2…
See our detection logic here: slcyber.io/research/high-…
We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.
See our detection logic here: slcyber.io/research/high-…
We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.
14
89
533
50,758
André Baptista retweeted
Two critical RCE flaws in PHP itself: CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2). Every PHP stack is in scope. Fixes ship today at 14:00 UTC.
Early signal flagged by Ethiack Zero. Ethiack now identifies the PHP runtimes you expose and flags EOL ones.
ethiack.com/info-hub/resea…
Early signal flagged by Ethiack Zero. Ethiack now identifies the PHP runtimes you expose and flags EOL ones.
ethiack.com/info-hub/resea…
1
3
7
767
André Baptista retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
342
4,172
18,567
7,083,402
We’re continuously reversing the emerging 0days that matter most, sometimes before they get a CVE, and publishing how fast we validate them vs how fast attackers exploit them.
👉 zero.ethiack.com
👉 zero.ethiack.com
Yesterday we asked: what if you could turn back the clock?
We can’t, but we can see it sooner.
Ethiack Zero is live: a public record of emerging 0-days. Open feed, API, MCP and methodology. Check our numbers and tell us what’s missing.
zero.ethiack.com
1
0
17
2,157
André Baptista retweeted
Yesterday we asked: what if you could turn back the clock?
We can’t, but we can see it sooner.
Ethiack Zero is live: a public record of emerging 0-days. Open feed, API, MCP and methodology. Check our numbers and tell us what’s missing.
zero.ethiack.com
We can’t, but we can see it sooner.
Ethiack Zero is live: a public record of emerging 0-days. Open feed, API, MCP and methodology. Check our numbers and tell us what’s missing.
zero.ethiack.com
1
6
29
6,872