AppSec by design. Secure #SDLC through culture, strategy & technology. @BSidesKrakow @CyberSecGames @codesnconseqs https://xitter.cf/t.co/VN5dkbIHBW
🇧🇷 🇵🇱 🌎
Joined May 2009
- Tweets14.5K
- Following11
- Followers1.4K
- Likes3.6K
Cássio B. Pereira | AppSec retweeted
Speaking of the devil, now it's Tailscale's turn 😂
Go to tailworm.com/ to check your setup
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
Cássio B. Pereira | AppSec retweeted
The #BSidesKraków #Hacker Club is coming!
A space for the #community of #hackers and curious minds to #meet #learn #break and #fix things and #build stuff together.
📍Kraków - Świętego Filipa 23, 1º floor, room 3
🚀Opening: November 1st
Join the club: bsideskrakow.pl/hacker-club
And now with migration to SC will become just like the rest of it. And organized crime is in the whole country not only RJ and SP
Would be good to meet and have a coffee BTW.. And bring you to meet @BSidesKrakow
Auschwitz (45m from Kraków) but a must. Wielicka salt mines (half day). Wawel castle (6hr). The top 3 things for sure.
Brastemp, Samsung, LG, Mitsubishi are the common ones... but there are some "premium" ones that I do not know :(
Cássio B. Pereira | AppSec retweeted
#BSidesKrakow is already in the past, and history. So #BSidesKrakow 2027 is already being planed, so we have already #CFP and registrations open! Check them out buytickets.at/securitybsides… sessionize.com/bsides-krakow…
In fact @levelsio was right. Vibecoding all shit that is paid and sucks but you need. Just did agenda conf to manage conference live agenda and an interactive feedback for slides like slido... Soon I'll share
Funny how @BSidesKrakow just finished and... I miss already... let's prepare for next year then! @BSides #CyberSec #InfoSec
It’s an honor to organize @BSidesKrakow and be part of something this big, meaningful, and fun.
Seeing this #community grow year after year makes me incredibly proud.
Thanks to everyone who showed up, shared, helped, spoke, sponsored, volunteered, and made it happen. ❤️#BSides
