Pinned Tweet
“2026 is just the beginning,” Professor Rockström added. “It will inevitably get worse. It will get worse and worse and worse to the point where, I’m afraid, we’ll be passing the limits of adaptation.”
#climate #planetarybounderies
nytimes.com/2026/07/29/wor…
#climate #planetarybounderies
nytimes.com/2026/07/29/wor…
1
1
3
107
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
#Israel has committed war crimes & crimes against humanity in the Occupied #Palestinian Territory amid continuing #genocide in Gaza, the @UN Commission of Inquiry on Occupied Palestinian Territory & Israel said in a new report to #UNGA81 today.
More ➡️ bit.ly/4zR1h0S
More ➡️ bit.ly/4zR1h0S
91
1,059
1,724
39,636
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
UN Human Rights Chief @volker_turk calls for an end to #Israel’s aggressive operation in the #WestBank city of #Hebron, which forcibly displaced nearly 2,000 Palestinians, demolished homes and commercial property, and deprived residents of the ability to move freely.
"Collective iolation of international law. Threats to empty and erase entire neighbourhoods also raise serious concerns of ethnic cleansing," Türk says.
ohchr.org/en/press-relea…
"Collective iolation of international law. Threats to empty and erase entire neighbourhoods also raise serious concerns of ethnic cleansing," Türk says.
ohchr.org/en/press-relea…
63
255
451
13,701
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
bleepingcomputer.com/news/security/…
bleepingcomputer.com/news/security/…
bleepingcomputer.com/news/security/…
bleepingcomputer.com/news/security/…
5
15
73
11,012
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
UN Commission of Inquiry:
"Israel has committed war crimes & the crimes against humanity of extermination, persecution, torture, rape & other forms of sexual violence in the Occupied Palestinian Territory, intentionally targeting Palestinian civilians."
ohchr.org/sites/default/…
"Israel has committed war crimes & the crimes against humanity of extermination, persecution, torture, rape & other forms of sexual violence in the Occupied Palestinian Territory, intentionally targeting Palestinian civilians."
ohchr.org/sites/default/…
380
4,034
8,900
297,277
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/brotli…
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/brotli…
32
137
721
74,648
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions
Details: cybersecuritynews.com/microsoft-auth…
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared rk account access tokens due to improper authentication in its broker component.
Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account.
#cybersecuritynews
Details: cybersecuritynews.com/microsoft-auth…
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared rk account access tokens due to improper authentication in its broker component.
Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account.
#cybersecuritynews
73
1,038
3,189
418,829
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
The ICJ found Israel's occupation unlawful. It must end.
Until then, under int'l law, Palestinians have the right to resist it through lawful means.
Israel shall protect its youth by ending the colonial project that traps many of them in committing atrocity crimes.
Until then, under int'l law, Palestinians have the right to resist it through lawful means.
Israel shall protect its youth by ending the colonial project that traps many of them in committing atrocity crimes.
A war is coming to the West Bank
Yesterday Palestinian resistance fighters conducted a surgical strike against Israeli occupation soldiers, fully in accordance with international law.
In response, Israeli government immediately announced that they will do war crimes and started doing war crimes.
All the Palestinian villages in the West Bank are under siege, the city of Hebron is under siege. IDF is demolishing house after house, raiding family after family. They said they want to turn Hebron into Rafah.
More than 250 families were kicked out into the streets with nothing. People slept on the street last night.
The Israeli election is in 3 days, and the Netanyahu-Smotrich government is going to use this to start a war in the West Bank.
The only way to stop this is pressure from all directions. We know it works. International pressure worked for the besieged house in Qusra, which still belongs to the Palestinians because of the all-around attention. It can work for Hebron too.
But it will require EVERYONE reading this doing everything they can to stop this. Call your representative, hold a demonstration, organise direct action against the occupation’s assets abroad. Keep attention on the West Bank.
ACT NOW.
89
2,174
5,807
57,341
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
.@CIJ_ICJ in July 2024: "all the States parties to the Fourth Geneva Convention have the obligation... to ensure compliance by Israel with international humanitarian law".
Full and comprehensive embargo now! @Ed_Miliband
Full and comprehensive embargo now! @Ed_Miliband
The ICJ found Israel's occupation unlawful. It must end.
Until then, under int'l law, Palestinians have the right to resist it through lawful means.
Israel shall protect its youth by ending the colonial project that traps many of them in committing atrocity crimes.
4
42
84
2,510
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
Microsoft releases emergency .NET patches for critical Brotli flaw
bleepingcomputer.com/news/microsoft…
bleepingcomputer.com/news/microsoft…
bleepingcomputer.com/news/microsoft…
bleepingcomputer.com/news/microsoft…
11
51
210
28,725
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
🚨 Brotli2Shell goes beyond HTTP2Shell.
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP.
JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing.
We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions.
Full research and technical details in our blog 👇
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP.
JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing.
We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions.
Full research and technical details in our blog 👇
12
114
669
236,835
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
The view that Ukraine is wrong to defend itself against Russia’s invasion is the dumbest view ever to attract so many followers. Hall of Fame stupidity. It makes every other stupid opinion look like infinite wisdom. Worthy of a Nobel Prize for stupidity.
198
293
2,433
34,955
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
YOUR ATTENTION:
🚨Every new COVID-19 (re)infection elevates your cardiovascular risk profile. Even mild cases can raise the odds of a heart attack, stroke, heart failure, and other CV events for months to years afterward. Risk is higher with more severe illness, yes, but it’s o severe disease. Updated vaccination will show some mitigation(infection severity↓) but doesn’t give you a risk-free pass!
#AvoidSars2 #AvoidReinfections #UpdateVaccination
➡️Supportive links:
1. Xie et al., Nature Medicine (2022): Long-term cardiovascular outcomes of COVID-19 (elevated risk even in non-hospitalized patients, graded by severity).
nature.com/articles/s4159…
2. American Heart Association news release (2024) on the UK Biobank analysis (≈2× risk of heart attack/stroke/death for up to 3 years after any COVID-19 infection).
newsroom.heart.org/news/covid-19-…
3. Lindgren et al., Journal of Internal Medicine (2026): Nationwide Swedish matched cohort (nearly doubled long-term MACE and death risk in hospitalized cases, persisting beyond year 1).
onlinelibrary.wiley.com/doi/10.1111/jo…
4. Hadidchi et al., Journal of Human Hypertension (2026): Elevated CV outcomes (including in non-hospitalized patients) among those with pre-existing hypertension.
nature.com/articles/s4137…
5. CARTESIAN study, European Heart Journal (2025): Accelerated vascular aging / arterial stiffness after COVID-19, including mild cases:
academic.oup.com/eurheartj/arti…
➡️These five links give a clear progression from the early 2022 data through 2024–2026 confirmation!!
🚨Every new COVID-19 (re)infection elevates your cardiovascular risk profile. Even mild cases can raise the odds of a heart attack, stroke, heart failure, and other CV events for months to years afterward. Risk is higher with more severe illness, yes, but it’s o severe disease. Updated vaccination will show some mitigation(infection severity↓) but doesn’t give you a risk-free pass!
#AvoidSars2 #AvoidReinfections #UpdateVaccination
➡️Supportive links:
1. Xie et al., Nature Medicine (2022): Long-term cardiovascular outcomes of COVID-19 (elevated risk even in non-hospitalized patients, graded by severity).
nature.com/articles/s4159…
2. American Heart Association news release (2024) on the UK Biobank analysis (≈2× risk of heart attack/stroke/death for up to 3 years after any COVID-19 infection).
newsroom.heart.org/news/covid-19-…
3. Lindgren et al., Journal of Internal Medicine (2026): Nationwide Swedish matched cohort (nearly doubled long-term MACE and death risk in hospitalized cases, persisting beyond year 1).
onlinelibrary.wiley.com/doi/10.1111/jo…
4. Hadidchi et al., Journal of Human Hypertension (2026): Elevated CV outcomes (including in non-hospitalized patients) among those with pre-existing hypertension.
nature.com/articles/s4137…
5. CARTESIAN study, European Heart Journal (2025): Accelerated vascular aging / arterial stiffness after COVID-19, including mild cases:
academic.oup.com/eurheartj/arti…
➡️These five links give a clear progression from the early 2022 data through 2024–2026 confirmation!!
16
469
918
18,794
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
“Do Palestinians have a right to defend themselves through armed struggle, if that’s what it takes? And if not, do you suggest they lay down and die and let their village get overrun and let Heidi Levine get killed and accept the fate that the settlers have in mind for them, which they will openly tell you is to wipe them off the map?”
“If those Palestinians hadn’t come and started throwing rocks, I probably would not have survived,” veteran Washington Post photojournalist Heidi Levine told Jasper Nathaniel after she was brutally beaten by Israeli settlers in the occupied West Bank, according to Nathaniel.
on Pod Save the World, Nathaniel recounted the details of the October 16 attack on Palestinian olive harvesters, how Palestinian villagers risked their lives to rescue Levine, and how Israeli soldiers subsequently shot a Palestinian man and blocked paramedics.
“Do Palestinians have a right to defend themselves through armed struggle, if that’s what it takes?” Nathaniel asked.
“And if not, do you suggest they lay down and die and let their village get overrun and let Heidi Levine get killed and accept the fate that the settlers have in mind for them, which they will openly tell you is to wipe them off the map?”
🔗 Full interview linked in reply.
@infinite_jaz | @brhodes
72
1,050
3,971
81,707
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
B’Tselem urgently calls on governments and international institutions to act now, using all means available under international law, to prevent the forcible displacement of Palestinian civilians, collective punishment and extensive unlawful destruction in Hebron. Israeli leaders eir intentions, and actions on the ground have already begun.
Following the shooting near Hebron on 23 October, in which two Israeli soldiers were killed, Prime Minister Benjamin Netanyahu and Defense Minister Israel Katz openly announced plans to forcibly displace Palestinian residents and carry out extensive destruction in the area.
In a statement, Prime Minister Benjamin Netanyahu declared: “We will apply in the cities the successful offensive model we implemented in the refugee camps.”
That same model has already displaced more than 33,000 Palestinians in the northern West Bank. Now, Israeli leaders are threatening to bring the same mass displacement and destruction to Hebron.
Implementation has already begun. Israeli forces imposed a cordon on Hebron and Halhul, while the Civil Administration began demolishing Palestinian structures in the neighborhood of Farsh al-Hawa. At the same time, Minister Bezalel Smotrich announced the establishment of four new settlement farming outposts in the South Hebron Hills.
Israeli leaders are openly announcing plans for collective punishment and acts that could constitute war crimes. These plans echo Israel’s devastating operations as part of the genocide in Gaza and mark a further escalation of its ongoing campaign of ethnic cleansing as part of the Elimination Project in the West Bank: the systematic dismantling of Palestinian collective life while expanding settlements and entrenching permanent Israeli control.
The world cannot stand by as Israel continues its assault on Palestinians, waiting for yet more neighborhoods to be emptied and erased before intervening, despite what we have already witnessed in Gaza and the northern West Bank. Governments and international bodies must act now to prevent these crimes and protect Palestinian civilians.
Following the shooting near Hebron on 23 October, in which two Israeli soldiers were killed, Prime Minister Benjamin Netanyahu and Defense Minister Israel Katz openly announced plans to forcibly displace Palestinian residents and carry out extensive destruction in the area.
In a statement, Prime Minister Benjamin Netanyahu declared: “We will apply in the cities the successful offensive model we implemented in the refugee camps.”
That same model has already displaced more than 33,000 Palestinians in the northern West Bank. Now, Israeli leaders are threatening to bring the same mass displacement and destruction to Hebron.
Implementation has already begun. Israeli forces imposed a cordon on Hebron and Halhul, while the Civil Administration began demolishing Palestinian structures in the neighborhood of Farsh al-Hawa. At the same time, Minister Bezalel Smotrich announced the establishment of four new settlement farming outposts in the South Hebron Hills.
Israeli leaders are openly announcing plans for collective punishment and acts that could constitute war crimes. These plans echo Israel’s devastating operations as part of the genocide in Gaza and mark a further escalation of its ongoing campaign of ethnic cleansing as part of the Elimination Project in the West Bank: the systematic dismantling of Palestinian collective life while expanding settlements and entrenching permanent Israeli control.
The world cannot stand by as Israel continues its assault on Palestinians, waiting for yet more neighborhoods to be emptied and erased before intervening, despite what we have already witnessed in Gaza and the northern West Bank. Governments and international bodies must act now to prevent these crimes and protect Palestinian civilians.
56
1,255
1,516
43,396
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
The recent node.js RCE related to brotli compression is broader than just node.js and applies to essentially all software using brotli[1]
Vercel’s firewall protection against the attack is effective independent of the backend technology.
Python is vulnerable. However, unlike Node.js it requires using the pypi/brotli package explicitly[2].
It is likely that other software is impacted. Attacks can happen both through decoding incoming HTTP requests (which the Vercel Firewall protects against) as well as downloading attacker-controller payloads via HTTP.
[1] cve.org/CVERecord?id=C…
[2] db.gcve.eu/vuln/PYSEC-202…
Vercel’s firewall protection against the attack is effective independent of the backend technology.
Python is vulnerable. However, unlike Node.js it requires using the pypi/brotli package explicitly[2].
It is likely that other software is impacted. Attacks can happen both through decoding incoming HTTP requests (which the Vercel Firewall protects against) as well as downloading attacker-controller payloads via HTTP.
[1] cve.org/CVERecord?id=C…
[2] db.gcve.eu/vuln/PYSEC-202…
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/no…
19
17
161
19,739
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library.
CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.
What you need to know ↓ thehackernews.com/2026/10/critic…
CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.
What you need to know ↓ thehackernews.com/2026/10/critic…
25
131
665
114,044
Håkan Save Hansson 🇸🇪 🇺🇦 retweeted
I spent last night watching my honeypot server get hit 14,000 times in six hours.
And almost none of the traffic was human.
I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before.
The shape of the threat has changed.
When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name.
These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are.
The numbers coming out of October are the ones keeping me up.
Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history.
Ransomware incidents jumped 41% in a single month.
In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day.
In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task.
A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard.
I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline.
What I want people outside the industry to understand is why this specific moment feels like a hinge.
For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone.
An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired.
The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists.
I'm not writing this to spiral anyone out.
Most of this fight genuinely isn't yours to win.
But the small things still matter more than people think.
Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key.
I'd kill SMS 2FA wherever an authenticator app is offered.
I'd turn on breach alerts in whatever password manager you use.
If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes.
None of that stops the swarm.
It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too.
@mattshumer_ has summed it beautifully.
Drop everything and go give it a read. Nothing is more important than this article right now.
And almost none of the traffic was human.
I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before.
The shape of the threat has changed.
When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name.
These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are.
The numbers coming out of October are the ones keeping me up.
Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history.
Ransomware incidents jumped 41% in a single month.
In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day.
In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task.
A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard.
I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline.
What I want people outside the industry to understand is why this specific moment feels like a hinge.
For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone.
An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired.
The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists.
I'm not writing this to spiral anyone out.
Most of this fight genuinely isn't yours to win.
But the small things still matter more than people think.
Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key.
I'd kill SMS 2FA wherever an authenticator app is offered.
I'd turn on breach alerts in whatever password manager you use.
If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes.
None of that stops the swarm.
It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too.
@mattshumer_ has summed it beautifully.
Drop everything and go give it a read. Nothing is more important than this article right now.
Everyone in tech is panicking about security right now. But outside of it, almost nobody knows anything is wrong.
I wrote this so you don’t have to be the one explaining it to your family.
Just send them this.
291
3,281
15,621
1,052,627
