Here we go again, on the road again: Korea 🇰🇷, Japan 🇯🇵

@POC_Crew @codeblue_jp @tengu_con @avtokyo

events.pt.community/?list=power-of…

#PHTalks Goa community friend: @bsidesahmedabad, one of India's longest-running BSides.

We've been there: in 2025 our researchers stole LUKS keys and dissected ATM attacks on stage, and @amoshkov moderated the Bug Bounty Panel.

Dec 10 - Goa - Free
phtalks.pt.community/goa

$1,000 says you can't break into an industrial plant in 8 hours.

Standoff Task CTF by @StandoffBB at #PHTalks Goa: web, AD, SCADA, PLCs. Solo, free.
$600 / $300 / $100.

Dec 10 - apply for a seat, tick the CTF box:
phtalks.pt.community/goa?utm_source…

#PHTalks Goa: Clone, Open, Pwned, by @WobbaMan.

A VS Code task, a fake WOFF2 font, a C2 address read from 0 ETH transactions, and a North Korean RAT grafted onto every Electron app on the box.

Dec 10 - Goa - Free
phtalks.pt.community/goa

Summer plans for people who read vulnerability write-ups for fun.

#PositiveHackCamp 2027 applications are open. Two weeks of hands-on cybersecurity in Moscow, July 3–18.

Apply by March 15: phcamp.pt.community

#PHCamp

🔥 New article by @a13xp0p0v: "Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via struct device."

Alexander discovered, fixed, and developed a PoC exploit for a race condition caused by a logical bug in network device management.

ptswarm.com/blog/dangerous…

Community friend of #PHTalks Goa: @BsidesMussoorie, where hackers meet the hills at nearly 7,000 feet.

We've been there: in April 2026 @amoshkov gave a community talk at their first edition and ran a @StandoffBB CTF. A magical place.

Dec 10 - Goa - Free
phtalks.pt.community/goa

#PHTalks Goa: CVE-2026-113915, Racing the Media Daemon to Steal Your Hidden Photos on iOS 27.2.

@andrd3v and @amfi_d: a 200-microsecond race in mediaanalysisd lets any app swap in a symlink and read your hidden photos. No prompt.

Dec 10 - Goa - Free
phtalks.pt.community/goa

Launched. Repost if you like it!

Cybersecurity conferences in one place, checked against official sources: events.pt.community

- Open CFPs & deadlines
- Published speaker support
- Topics from past talks
- Nearby events for one trip

Save, share, add to your calendar. No account needed.

My list for the rest of 2026: events.pt.community/?list=geekcon%…

First #PHTalks Goa speaker: Haidar Kabibo (@haider_kabibo), Kaspersky Lab.

Talk — RedNova: turning an arbitrary file write into privileged code execution via Windows COM.

Dec 10 - Goa - Free:
phtalks.pt.community/goa

Slides for my talk at @TheSAScon
"Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via struct device"
a13xp0p0v.tech/img/Alexander_…

📢 Positive Hack Talks is heading back to India 🇮🇳!
📍 Goa
📅 December 10, 2026

Free in-person hacker event: talks, CTF with a $1,000 prize pool, villages and 10-min community stand-ups. Everyone's welcome!

CFP & attendee registration now open ⬇️
phtalks.pt.community/goa

rate my travel working setup
it's been a few years I travel with those pelican cases, and I'll tell you, this is the best investment in a suitcase you can ever make!

LET'S GO INDIA! 🇮🇳 #PHTalks is coming back: Goa, Dec 10!

CFP is OPEN: talks, community stand-ups, villages. Grassroots communities are VERY welcome!!

Speakers: travel & stay on us. Entry is free.

Beach resort, chill vibes... and sunset:
phtalks.pt.community/goa

What was that. @rootconorg was straight-up WILD.

That moment when your camera roll has almost nothing that's appropriate to post 😅

See you next year, ROOTCON. SHOT SHOT SHOT!

#GISEC is a wrap, but we’ve still got DeCode footage to drop 👀

@amoshkov teamed up with @GodfatherOrwa and @XHackerx007 to build a security token, rip into its firmware and trade bug bounty stories

Watch till the end to find out where we’re heading next youtu.be/YJ7LzoMmFQ8

Late post, but Positive Hack Camp was really good. We ran it in Moscow a month ago: 80+ students from 20+ countries. Just watch the video.

Next #PHCamp announcement soon. Trying to get into cybersecurity? Apply when it opens, want to see you there 🫶

🍏 Fresh LPE in macOS: Repair Permissions - Get Root!

CVE-2026-43783 found by our researcher Ilya Andr (@andrd3v) has been recently fixed by Apple. A single XPC request to DesktopServicesHelper lets you chown any path on disk - straight to root.

👇👇👇

ptswarm.com/blog/cve-2026-…

Schedule for the next couple of weeks.
Let's meet if you're around!

Sep 13-15 in 🇸🇬 Singapore for @offbyoneconf
Sep 16-18 in 🇦🇪 Dubai for @GISECGlobal
Sep 19-20 in 🇲🇾 KL for @StandoffBB hacking event celebrations
Sep 21-27 in 🇵🇭 Philippines for @rootconorg

@POC_Crew I am preparing myself for Drinking Hell!!