@kripthor

rural hacker. nfcdripper. hardware maker. software breaker.

 Portugal
Joined November 2008
  • Tweets1.6K
  • Following736
  • Followers1.2K
231Media
Replying to @kripthor
TL;DR: I wrote this after one of my own systems got popped by RapperBot bitsight.com/blog/rapperbot-…
2
1,306
14
545
I know everyone is focused on attacks on water. And I know apocalypse stories sell best. And I know this isn't one. But I have yet to see an ICS/OT exposure drop so fast. Makes one wonder what it takes to fix the water. And the grid. And the hospitals... bitsight.com/blog/thousands-…
3
1
7
714
This is one of the coolest end to end research I've had the pleasure to have seen developing pretty much from scratch. IF you still like to read some cool shit, just grab some popcorns and follow the rabbit hole in the link. It is really something. bitsight.com/blog/fuyao-ente…
1
1
105
Pedro Umbelino retweeted
fG!@osxreverserJul 29
The screensharingd bug is a pre-auth, and an amazing bug that LLM enabled clowns killed without understanding it. Releasing a PoC that allows to download files from vulnerable macOS. It’s not super reliable, but the real one is very much. Patch asap! reverse.put.as/2026/07/29/it…

It's a pre-auth, stupid!

This Monday Apple’s Security Bulletin finally brought the bad news I had been waiting for a long time (because I’m a very curious person and like to experiment!). There was a section on Screen...

reverse.put.as
8
33
6
186
67,640
Pedro Umbelino retweeted
fG!@osxreverserJul 29
Sad, I had “this” bug for a long while. And even sadder is that they don’t understand or see the better bug LOl. The real bug is 10.0 score or close to it. There is no need for passwords or anything else, it’s full pre auth as long service is open ;-)
sam4k@sam4k1Jul 29
here's a writeup on a cool macos screensharingd rce @__rev found 🍎🤓
1
1
2
39
11,002
Pedro Umbelino retweeted
Owen Brake
@OwenBrakesJun 1
NoLoRa: Team from Edinburgh demonstrated LoRa transmission on MCUs with no radio chips, by utilizing the 27th harmonic of the SPI peripheral
52
235
45
1,830
101,274
Pedro Umbelino retweeted
fG!@osxreverserMay 16
If you are waking up to the Iran in US gas pumps news, check the research on that topic of dear friend Pedro Umbelino aka @kripthor . It’s already almost two years old. Someone at CNN forgot proper research :-) bitsight.com/blog/critical-v…

Critical Vulnerabilities Discovered in Automated Tank Gauge Systems | Bitsight

Recent investigation by Bitsight TRACE has discovered multiple critical 0-day vulnerabilities across six ATG systems from five different vendors.

bitsight.com
3
8
1,088
Happy negative birthday Y2K38. We are twelve years away from a synchronized global stress test. Although, in fact, this is exploitable today... Where will you stand? Will you help? bitsight.com/blog/what-is-y2…

Forward to the Past: The Y2K38 Problem Ahead | Bitsight

The Y2K38 problem threatens legacy 32-bit systems in 2038. Understand the risks, affected systems, and mitigation strategies.

bitsight.com
2
2
854
Pedro Umbelino retweeted
Claroty@Claroty22 Dec 2025
💡 On Nexus, Pedro Umbelino (@kripthor), Principal Research Scientist at @Bitsight reflects on the fragility of #industrial ecosystems, and anticipates what will happen as Industry 4.0 and 5.0 collide. hubs.li/Q03YQhnd0

Nexus Reflections and Predictions: Pedro Umbelino

Pedro Umbelino, Principal Research Scientist at Bitsight Technologies reflects on the fragility of industrial ecosystems, and anticipates what will happen as Industry 4.0 and 5.0 collide.

nexusconnect.io
1
5
164
Pedro Umbelino retweeted
BSidesLisbon@Bsideslisbon10 Dec 2025
Video up: [BSL2025] 2038 Is Not A Future Issue, Get That Through Your Thick Skull by Pedro Umbelino (@kripthor) & Trey Darley (@treyka ) #BSidesLisbon2025 youtu.be/zKk_pBQKTHg

[BSL2025] Trey Darley & Pedro Umbelino - 2038 Isn't A Future Issue Get That Through Your Thick Skull

On 19 January 2038 at 03:14:07 UTC implementations relying on 32-bi...

youtube.com
8
8
1,902
Portugal updates cybercrime law to exempt security researchers - @billtoulas bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Portugal updates cybercrime law to exempt security researchers

Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and to make hacking non-punishable under certain strict conditions.

bleepingcomputer.com
1
38
2
85
15,791
What another incredible ride! It is such an honor to be part of the @Bsideslisbon community!
4
146
We are almost at the end of @Bsideslisbon. Stay tuned.
2
10
726
5
139
Pedro Umbelino retweeted
BSidesLisbon@Bsideslisbon13 Nov 2025
Trey and @kripthor start the afternoon talks.
3
10
716
#badgelife is a hard, stressful life. Those who know...
1
5
207
I don't know which and how many were the sacrifices to the demo gods, but that was a damn cool live demo at @hack_lu by Edouard D'Hoedt and Hayk Gevorgyan! Live demos ftw!
1
240
What could this be? 😉 Dogs are curious! Thanks for all the help @JLCPCB
1
3
170
Pedro Umbelino retweeted
SecurityWeek
@SecurityWeek8 Oct 2025
The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn securityweek.com/the-y2k38-b…

The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn

The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS and consumer devices.

securityweek.com
4
1
5
2,007
Load more