Free hacker conference Positive Hack Talks is coming to Goa 🇮🇳 🎤 The call for papers is open. Bring your exploit, tool, or research. Travel is covered for selected speakers. 👉 Speak or attend at phtalks.pt.community/goa #PositiveHackTalks #PHTalks

#PHTalks Goa: Clone, Open, Pwned, by @WobbaMan. A VS Code task, a fake WOFF2 font, a C2 address read from 0 ETH transactions, and a North Korean RAT grafted onto every Electron app on the box. Dec 10 - Goa - Free phtalks.pt.community/goa

Summer plans for people who read vulnerability write-ups for fun. #PositiveHackCamp 2027 applications are open. Two weeks of hands-on cybersecurity in Moscow, July 3–18. Apply by March 15: phcamp.pt.community/ #PHCamp

Community friend of #PHTalks Goa: @bsidesmussoorie, where hackers meet the hills at nearly 7,000 feet. We've been there: in April 2026 @amoshkov gave a community talk at their first edition and ran a @StandoffBB CTF. A magical place. Dec 10 - Goa - Free phtalks.pt.community/goa

#PHTalks Goa: CVE-2026-113915, Racing the Media Daemon to Steal Your Hidden Photos on iOS 27.2. @andrd3v and @amfi_d: a 200-microsecond race in mediaanalysisd lets any app swap in a symlink and read your hidden photos. No prompt. Dec 10 - Goa - Free phtalks.pt.community/goa

for the community! 🔥🔥🔥

A ghost tried to haunt our systems. A witch ran into bugs in her spellware. A vampire had his fangs confiscated for analysis. Now they’re all in therapy, seeking professional help. Unfortunately, they picked the wrong professional. Our bad. Happy Halloween! 👻

First #PHTalks Goa speaker: Haidar Kabibo (@haider_kabibo), Kaspersky Lab. Talk — RedNova: turning an arbitrary file write into privileged code execution via Windows COM. Dec 10 - Goa - Free: phtalks.pt.community/goa

Two critical PHP flaws. Protection before the patch. We developed PT Application Firewall rules hours before PHP updates were released, helping clients reduce risk while preparing to patch. See our response timeline below.

Hackers, bug hunters, researchers — we built our new home! Zero marketing fluff, just good stuff: ✅ @ptdbugs: 350K+ free vulns ✅ 0days & breach intel ✅ @StandoffBB: Bug bounties ✅ The world's cybersecurity calendar 👉 pt.community/

One of our business cards had a busy three days at @GISECGlobal It passed from hand to hand as we talked about what it takes to make digital sovereignty work. The answer doesn’t fit on a business card. Watch the film. #GISEC #GISEC2026

#GISEC is a wrap, but we’ve still got DeCode footage to drop 👀 @amoshkov teamed up with @GodfatherOrwa and @XHackerx007 to build a security token, rip into its firmware and trade bug bounty stories Watch till the end to find out where we’re heading next piped.video/YJ7LzoMmFQ8

Hackers in the wild 😎 @GodfatherOrwa & @XHackerx007 at @GISECGlobal 📍DeCode Zone, #GISEC2026

RT @XHackerx007: Our workshops will start soon Is on the schedule 4 per day one one cybersecurity talks Come join us on Gisec! At The De…

The Positive Technologies team will be at @GISECGlobal 2026 tomorrow! 📍 Dubai Exhibition Centre (DEC), Expo City 📢 Stand C140, Hall 5 Check out our full GISEC agenda below: positivegisec.com/?utm_sourc… #GISEC #GISEC2026

QKS Group has ranked Positive Technologies among the leading vendors in its SPARK Matrix for XDR, highlighting MaxPatrol Endpoint Security and its integration with SIEM, VM, Sandbox, NAD and ISIM. Independent recognition is always welcome—especially when customers agree. 😎 #XDR

Long time no post! Back from CSST in Tianjin 🇨🇳 Was really happy to return to the International #AntiVirus #Conference for a 2nd year in a row! Talked about "Navigating the Ocean of Network Dumps", basically how to triage terabytes of traffic & keep your sanity as an analyst 👩‍💻

What’s in Positive Technologies’ DeCode zone at @GISECGlobal? ⚙️ Positive Labs: build&hack an USB security token 🎭 DeepFake Reality: see how AI can replicate your identity 🎤 Stand-up talks with @GodfatherOrwa & @XHackerx007 for real-world insights and tips C140, Hall 5 #GISEC

Emad Abu Jazar of Positive Technologies, highlights the evolving threat landscape and the need for organisations to strengthen their defences while securing AI systems, critical infrastructure and cloud environments - securityreviewmag.com/?p=305… @PTsecurity_EN

🚨 New #FamousSparrow campaign: meet SquawkDoor Our Threat Intelligence team at PT ESC has uncovered a new campaign by the East Asian APT group FamousSparrow. The group used a new backdoor we named SquawkDoor, along with an updated version of their known #SparrowDoor backdoor. 🎣 The group injected malicious JS into websites across multiple countries. Visitors saw a fake "certificate error" in their own language, urging them to download a "new certificate." In reality, the file was an MSI installer — and running it infected victims with the backdoors. 🔍 We took a close look at both tools: how SquawkDoor works, what's changed in SparrowDoor, and how they relate to #HemiGate, #TernDoor, and #CrowDoor. We also found several overlaps with other threat actors from East Asia. 🕵️ Separately, we identified a pentester linked to the group who was preparing attacks. Our Medium article reveals what kinds of applications this hacker had targeted before. Read: medium.com/@dzaripova1177/th… #Malware #Backdoor #APT #ThreatActor #EarthEstries #SaltTyphoon #GhostEmperor