Worldline Yomani XR payment terminal reverse-engineering and security analysis stefan-gloor.ch/yomani-hack #embedded #infosec

Exploiting vulnerabilities in Supermicro BMC (CVE-2025-7937 and CVE-2025-6198) www.binarly.io/blog/broken-... Credits Anton Ivanov #infosec

Breaking Server SGX via DRAM Bus Interposition wiretap.fail #infosec

Analysis of GrapheneOS hardened malloc libc allocator www.synacktiv.com/en/publicati... Credits Nicolas Stefanski #infosec

Flipping the R/W bit in the page table entry of a mapped file to gain write access ptr-yudai.hatenablog.com/entry/2025/0... #Linux #infosec

Exploiting CVE-2024-50264, a Linux kernel UAF vulnerability due to a race condition in AF_VSOC sockets a13xp0p0v.github.io/2025/09/02/k... #infosec #Linux

Reliable Linux system call interception blog.mggross.com/intercepting... #cybersecurity #Linux

Devirtualizing VMProtect and Themida nac-l.github.io/2025/01/25/l... #infosec #reverseengineering

Practical guide to fuzzing the Binder kernel driver using the Linux Kernel Library (LKL) androidoffsec.withgoogle.com/posts/binder... Credits Eugene Rodionov, Gulshan Singh and Zi Fan Tan #infosec #android

Reverse engineering and decryption of Synology encrypted archives www.synacktiv.com/en/publicati... Credits Théo Fauché #infosec

Two parts series on hacking the Xbox 360 hypervisor Part 1: icode4.coffee?p=1047 Part 2: icode4.coffee?p=1081 #infosec #xbox

Exploiting an array-Out-Of-Bounds vulnerability in the Linux network packet scheduler (CVE-2025-37752) syst3mfailure.io/two-bytes-of... #infosec #Linux

Exploiting Linux kernel from Chrome renderer with MSG_OOB (Google Project Zero) googleprojectzero.blogspot.com/2025/08/from... #infosec #chrome

Security analysis of Sonoff Smart Home IoT devices (CVE-2024-7205 and CVE-2024-7206) jerinsunny.github.io/blogs/iotsec... Credits Jerin Sunny and Shakir Zari #iot #infosec

Porting a Mali GPU exploit to Pixel 6 Pro (CVE-2023-48409) starlabs.sg/blog/2025/06... #cybersecurity #mobile

"Challenges and Pitfalls while Emulating Six Current Icelandic Household Routers" Evaluation of different tools for routers firmware emulation (FACT, QEMU, EMUX, Qiling, Firmadyne, FAT, FirmAE, Pandawan, and EMBA) skemman.is/bitstream/19... #cybersecurity #embedded

GDB over a serial connection for debugging the kernel on a Pixel 8 xairy.io/articles/pix... #infosec

FiberGateway GR241AG: root code execution through public wifi network r0ny.net/FiberGateway... #infosec #embedded

Root access on the TP-Link Tapo C200 Rev.5 quentinkaiser.be/security/202... #infosec #embedded

FiberGateway GR241AG home router: exploitation chain r0ny.net/FiberGateway... #infosec #embedded

Linux ELF symbols resolution and obfuscation blog.elmo.sg/posts/breaki... #infosec #Linux

Thermomix TM5 reverse engineering and exploitation www.synacktiv.com/en/publicati... #cybersecurity #iot

Getting started with Linux kernel exploitation (slide) "Linux Kernel Exploitation for Beginners" by Kevin Massey: rvasec.com/slides/2025/... "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov pt-phdays.storage.yandexcloud.net/Yashnikov_Va... #Linux #infosec

Series on hacking the Xbox 360 hypervisor Part 1: icode4.coffee?p=1047 Part 2: icode4.coffee?p=1081 #infosec #xbox

External fuzzing of USB drivers with Syzkaller docs.google.com/presentation... #infosec #fuzzing

Bypassing Ubuntu’s Unprivileged Namespace Restriction u1f383.github.io/linux/2025/0... #Linux #infosec

Security analysis of a Allen-Bradley (Rockwell Automation) PowerMonitor 1000 device claroty.com/team82/resea... #infosec

"My Emulation Goes to the Moon... Until False Flag" by Retooling Exploring the re-implementation of APT41 Scatterbrain's obfuscation retooling.io/blog/my-emul... #malware #cybersecurity

Exploiting a Tenda Ac8v4 SOHO router (Flow-control ROP -> RCE) 0reg.dev/blog/tenda-a... #infosec #embedded

"False Injections: Tales of Physics, Misconceptions and Weird Machines" (h2hconference keynote) raelize.com/upload/resea... #infosec

Introduction to Voltage Glitching (STM32L051 microcontroller) blog.syss.com/posts/voltag... #hardware #infosec

Introduction to voltage glitching attacks security.humanativaspa.it/fault-inject... Credits Maurizio Agazzini #hardware #cybersecurity

Full exploit chain for the FiberGateway GR241AG home router r0ny.net/FiberGateway... #infosec #embedded

Exploiting a use after free (CVE-2025-1050) in the Sonos Era 300 (Pwn2Own 2024) blog.ret2.io/2025/06/11/p... Credits Jack Dates & Markus Gaasedelen #infosec #embedded

Reverse engineering Hanwha IoT security camera (WiseNet XNF-8010RW) brownfinesecurity.com/blog/hanwha-... #iot #infosec

Introduction to map related bugs in V8 Javascript engine xia0.sh/blog/visit-t... #cybersecurity #v8

PatchGuard internals (KPP, Kernel Patch Protection) r0keb.github.io/posts/PatchG... #infosec

Writeup on exploiting a heap overflow in Llama.cpp retr0.blog/blog/llama-r... #cybersecurity #llama

Leveraging program entry points for process injection in Windows bohops.com/2023/06/09/n... #infosec #Windows

Excellent blog post on reverse engineering the Valve Anti-Cheat (VAC) solution codeneverdies.github.io/posts/gh-2/ #infosec #reverseengineering

Overview on adversarial examples for breaking machine learning models boschko.ca/why-models-b... #ai #infosec

Linux Netfiler Ipset OOB write vulnerability exploitation u1f383.github.io/linux/2025/0... #cybersecurity #Linux

Root code execution on FiberGateway GR241AG through public wifi network r0ny.net/FiberGateway... #infosec #embedded

Dirty COW Linux vulnerability and its variants Part 1: u1f383.github.io/linux/2025/0... Part 2: u1f383.github.io/linux/2025/0... #infosec #Linux

Attack surface and security analysis of a Allen-Bradley (Rockwell Automation) PowerMonitor 1000 device claroty.com/team82/resea... #infosec #embedded

Bootloader vulnerability and firmware decryption in TP-Link (Tapo) C210 V2 cloud camera watchfulip.github.io/28-12-24/tp-... Credits @Watchful_IP #embedded #cybersecurity

Exploiting an array-Out-Of-Bounds vulnerability in the Linux network packet scheduler (CVE-2025-37752) syst3mfailure.io/two-bytes-of... #infosec #Linux

Internals and evolution of Windows kASLR r0keb.github.io/posts/kASLR-... #cybersecurity

Exploiting an Array-Out-Of-Bounds vulnerability in the Linux network packet scheduler (CVE-2025-37752) syst3mfailure.io/two-bytes-of... #infosec #Linux

Exploitation of a heap overflow in Llama.cpp (write up) retr0.blog/blog/llama-r... #cybersecurity #llama