[RSS] A blueprint for formal verification of Apple corecrypto security.apple.com -> Original->

void shitIDo(bShouldCrash){ if (!bShouldCrash){ crash(); }else{ while(1){} } } Original->

When you can make $thing enter debug mode without docs, before your first and/or after your sixth coffee you know you've spent way too much time on $thing. Original->

[RSS] CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox voidsec.com -> This is another writeup of a Windows sandbox escape that multi-collided during P2O Original->

[RSS] CVE-2026-9082 | Drupal SQL Injection Vulnerability horizon3.ai -> Original->

[RSS] Striga: Lifting x86 to LLVM IR with Python secret.club -> New from secret club! Original->

[RSS] Emulating & Exploiting UEFI: Unveiling Vulnerabilities in Firmware Security www.netspi.com -> Original->

[RSS] Advisory X41-2026-002: Request Host Header not Validated in Starlette x41-dsec.de -> This can lead to auth bypass! Original->

A bunch of local companies had an incident when a datacenter fire triggered the an extinguisher without proper nozzles installed and the shock wave of the gas killed a bunch of HDDs at one. Now I wonder if I should move my speakers further away from my desktop machine... 1/2

I just noticed a maybe lesser emphasized parental instinct: letting children do stuff very inefficiently. Helping in the kitchen, driving a screw, planting a flower. Because that's how we learn things and improve. Original->

"I'm happy to share that #Fortinet has won the Best Government Supplier award" - LinkedIn "They probably were government. Just not ours." - Whistler Original->

[RSS] A gentle introduction to binary analysis and Ghidra's SLEIGH blog.thalium.re -> Original->

FatGid+4 A four-byte type, an eight-byte stride, one root shell. #FreeBSD fatgid.io -> /via @Hetti Original->

[RSS] Deep dive into the object creation flow in Windows - PART 4: Handle table internals. winware31.blogspot.com -> Original->

This one by @sassdawe deserves some more love in these trying days: #VSCode Extension Deployment with Intune - Björn Sundling, David Sass - PSConfEU 2025 www.youtube.com -> >Quoted post< Original->

I could not find an existing phrase so I'm inventing a new one: "Yes Man Design" is the principle of implementing a system so it always reports desired results and hides any errors. This often serves to achieve faster adoption than competing, more honest designs, forcing out 1/2

[RSS] RCE and arbitrary file write in Vitess vtbackup via untrusted MANIFEST fields neurowinter.com -> Original->

[RSS] SeppMail Secure E-Mail Gateway: Critical RCE and LFI Vulnerabilities labs.infoguard.ch -> Original->

[RSS] Pen & paper quantum computing bfswa.substack.com -> Original->

[RSS] The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long-Ignored Attack Surface www.darknavy.org -> Original->

Deep dive into the Object creation flow in Windows Part 1 - Allocation & Pre-Initialization winware31.blogspot.com -> Part 2 - Access check internals winware31.blogspot.com -> Part 3 - Post-Initialization & Name Lookup winware31.blogspot.com -> Original->

[RSS] Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP swarm.ptsecurity.com -> Original->

[RSS] Instrumenting QT6 desktop apps with Frida - Part 1 blog.samanl33t.com -> Original->

[RSS] Exploiting Toshiba Qiomem.sys vulnerable driver valium007.github.io -> Original->

[RSS] HDD Firmware Hacking Part 1 icode4.coffee -> Original->

To whom it may concern: Would you please stop trying to log in to my G/MS accounts? Not too much to see there anyway... Original->

ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass github.com -> Original->

[RSS] Pwn2Own Berlin 2026 - Day One Results www.thezdi.com -> Original->

Original->

#Ghidra 12.1 is out, changes: github.com -> My first contribution (#6827) landed after *checks notes* 19 months :D Original->

Officially lost track of Linux page cache LPE's: github.com -> This is CVE-2026-46300 Original->

[RSS] Exploiting the Tesla Wall Connector from its charge port connector - Part 2: bypassing the anti-downgrade www.synacktiv.com -> Original->

[RSS] Go fuzzing was missing half the toolkit. We forked the toolchain to fix it. blog.trailofbits.com -> Original->

Dead.Letter (CVE-2026-45185) How XBOW found an unauthenticated RCE on Exim xbow.com -> Original->

"This is an elegant use of Rust's trait system to separate construction from operation, with compile-time guarantees that the right capabilities are available when needed." - LLM Except both me and my IDE are in the dark about what kind of object Foo::new(obj) *really* expects 1/2

[RSS] Reverse Engineering Fisher-Price Pixter dmitry.gr -> Original->

We've Been Here Before: Decompilers, Fuzzers, and Now AI www.clearseclabs.com -> Original->

Periodic reminder that HuggingFace models can include code, thus possibly malware too >Quoted post< Original->

Post-Quantum Cryptography A Realistic Guide to Manage the Transition [PDF] www.aumasson.jp -> Original->

[RSS] Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More) heyitsas.im -> Original->

[RSS] CVE-2026-34354: Guardicore Local Privilege Escalation Vulnerability www.akamai.com -> Original->

Behind the Scenes Hardening Firefox with Claude Mythos Preview hacks.mozilla.org -> Original->

[RSS] CVE-2026-42511 Breakdown: RCE in FreeBSD aisle.com -> Original->

[RSS] The IGVM [Independent Guest Virtual Machine] File Format blog.quarkslab.com -> Original->

[RSS] Make it Blink: Over-the-Air Exploitation of the Philips Hue Bridge www.synacktiv.com -> Original->

[RSS] Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama (CVE-2026-7482) www.cyera.com -> Original->

[RSS] pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI clearbluejar.github.io -> + CVE-2024-3273 analysis (D-Link Original->

Coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser github.com -> #Nix #Lix #NoCVE atm Original->

[RSS] [WIP] Resolve indirect calls in Binary Ninja with DynamoRIO instrumentation github.com -> Original->

[RSS] Recursively fuzzing MS-RPC structures and monitoring using ETW incendium.rocks -> Original->