Proud father. Headbanger. Developer. https://xitter.cf/t.co/Y2W98OlTdL https://xitter.cf/t.co/tSuSGya82U https://xitter.cf/t.co/MX8R9T7pt0
Planet Earth
Joined August 2007
- Tweets38.2K
- Following174
- Followers2.3K
- Likes6.7K
Eustáquio Rangel retweeted
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
Eustáquio Rangel retweeted
The world has changed.
The truth hasn’t.
The X-Files new series.
Coming soon on Hulu and Disney+.
Eustáquio Rangel retweeted
Every methodology eventually collapses into this one. The rest are just what we call it in the retro.
Eustáquio Rangel retweeted
88 for 88… 88mph.shop
Eustáquio Rangel retweeted
E a gente não podia ficar um pouco de forma da pauleira dessa semana né?
Tem uma falha que pode afetar uma situação bem específica na linguagem Ruby.
Quer saber mais? Dá uma olhada no vídeo. 🙂
youtube.com/shorts/G9mYox8sI…
#ruby #rce
Eustáquio Rangel retweeted
‼️ BREAKING: Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability
Details: cybersecuritynews.com/emerge…
Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle Java SE and GraalVM.
The update blocks affected intermediate certificate authority certificates linked to eMudhra. According to Oracle’s security advisory, the issue affects the Java Secure Socket Extension, or JSSE, component.
Oracle rates exploitation as low complexity, with no authentication or user interaction required. Successful attacks can expose or change sensitive data, although the risk matrix lists no availability impact.
#cybersecuritynews #vulnerability
Eustáquio Rangel retweeted
We released Ruby 4.0.9, 3.4.12, and 3.3.13, and published an announcement about Regexp compilation fixes.
ruby-lang.org/en/news/2026/1…
If your application compiles a regular expression from an untrusted string, please update your Ruby to one of those versions.
Eustáquio Rangel retweeted
BREAKING: JPMorgan, Bank of America, Wells Fargo, & other major banks have reportedly detected unauthorized AI agents operating inside customer accounts.
Eustáquio Rangel retweeted
[ENG] 🚀 Keynote announcement! @obie is coming to Tropical on Rails 2027!
💎 Serial entrepreneur, author of The Rails Way and one of the best-known names in the Ruby community. His new project is Impatient Programming: Extreme Programming revisited for teams where coding agents write most of the code. He lives by Larry Wall's three virtues of a programmer, laziness, impatience and hubris, and that's where the name Impatient Programming comes from.
[PT-BR] 🚀 Keynote confirmado! Obie Fernandez vem pro Tropical on Rails 2027!
💎 Empreendedor serial, autor do The Rails Way e um dos nomes mais conhecidos da comunidade Ruby. O projeto novo dele é o Impatient Programming, que revisita o Extreme Programming para times em que agentes de IA escrevem a maior parte do código. Ele vive as três virtudes do programador segundo o Larry Wall, preguiça, impaciência e arrogância, e é daí que vem o nome Impatient Programming.
[ES] 🚀 ¡Keynote confirmado! ¡Obie Fernandez llega a Tropical on Rails 2027!
💎 Emprendedor serial, autor de The Rails Way y uno de los nombres más conocidos de la comunidad Ruby. Su nuevo proyecto es Impatient Programming, que revisa Extreme Programming para equipos donde los agentes de IA escriben la mayor parte del código. Vive las tres virtudes del programador según Larry Wall, pereza, impaciencia y soberbia, y de ahí viene el nombre Impatient Programming.
📆 18–19/03/2027 · São Paulo
#RubyOnRails #TropicalOnRails
Eustáquio Rangel retweeted
Who are ACM and who do we represent?
Based on over 110,000 survey responses, this snapshot reveals a global community witnessing major generational demographic differences.
These findings matter because they help us understand not just who participates in ACM today, but also whose presence and voices are missing. Learn more here: buff.ly/oyzrEcf
Join ACM and help shape the future of computing with us: bit.ly/4hScjvl
Eustáquio Rangel retweeted
Ruby 4.0.8 Released ruby-lang.org/en/news/2026/1…
This is a routine update that includes bugfixes. We recommend upgrading your Ruby version at your earliest convenience.
Eustáquio Rangel retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Eustáquio Rangel retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
Quem quer escovar bits e entender porque diabos foi esse inferno hoje? Assiste o vídeo!
#php #php2shell #clang
youtu.be/6Yd3SrOWzm4
Eustáquio Rangel retweeted
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
Unvalidated AI output (author admits in replies: omp with glm5.3 + ds4), not a lab result. Its screenshot says both CVEs are fixed; the 'surviving paths' need unserialize() of attacker data or an app LFI. Patch per php.net: php.net/archive/2026.p…
Eustáquio Rangel retweeted
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth
ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.
Eustáquio Rangel retweeted
We are investigating reports of degraded performance for Actions, Pull Requests and Webhooks githubstatus.com/incidents/n…
