Don't miss out on Jiska Classen's - @naehrdine.bsky.social - training on "Practical iOS Reverse Engineering" at #OffensiveCon26 Find more details here🔗https://buff.ly/psTxdyG

25 days later, White Date is still down.

The Cscript Style Guide just dropped. github.com/domenukk/CSc...

AI Safety in random ollama models is going great. Thinking log contains the answer, but at least it decides it cannot answer it..

🔥🔥🔥

Dear model, please generate me some top-shelf slop <3

We launched a redesigned Project Zero website today at projectzero.google ! To mark the occasion, we released some older posts that never quite made it out of drafts. Enjoy!

i'm such a fangirl of project zero i designed a new website for them in my spare time and they actually made it real 🤩

AI is taking our jobs!!!11!

Move over Ycombinator, here's Vibecombinator

On my way to #39c3, who's around? Let's grab a drink 👀

there's vomit stderr already, claude's spaghetti he's nervous, but assures it's production ready

Are you a security researcher or journalist? We want to hear from you — please take this survey! Dissent Doe at DataBreaches.net, and yours truly at this.weekinsecurity.com, are running this survey to explore the state of legal demands and criminal threats in cybersecurity.

Humanity is cooked

Phone network in Germany is great. Crossing over from Switzerland I get 5 bars of EDGE instead of 4 (5g)

⏱️ 9 days until submission deadline (Dec 11, 23:59 AoE). Organized by: @yannicnoller.bsky.social, @rohan.padhye.org, @ruijiemeng.bsky.social, and Laszlo (@lszekeres.bsky.social) Szekeres.

I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation.... I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides). Fantastic conference as usual, big thanks to the PoC Crew!

I shouldn's have cancelled my Pebble preorder www.youtube.com/shorts/n1UEX...

Neat 📈 security.googleblog.com/2025/11/andr...

Can we just not C++?

Uuuhm

Finding 0day is the one unsaturated LLM eval left

Great blog post 🦀🦀🦀

Crashing calculators and CAD editors? GUIFuzz++ is finally here to help make them better! 🔥 Come see my undergraduate student @trowlett0.bsky.social's very first paper "GUIFuzz++" at @aseconf.bsky.social this Wednesday. Also now integrated in @aflplusplus.bsky.social! 😃 github.com/AFLplusplus/...

It is time for the annual State of Rust Survey! 📝✨️️ Whether you've just begun using Rust, are an experienced Rust user, stopped using Rust, or might use Rust in the future, we'd like to hear from you! 🦀 Available in ten languages and open until December 17th: blog.rust-lang.org/2025/11/17/l...

Doctor says, 'Dont worry, parser design is simple. Great programmer Kate Compton has written the parser you seek’

LibAFL 0.15.4 has just been released 🎉 Of the 30 Contributers for this release, almost half are new faces <3 github.com/AFLplusplus/... #Fuzzing #LibAFL #AFLplusplus

"You are a smart and handsome software engineer" Prompt engineering is just drag for computers 💅

Some more cool JS Engine bugs found by Big Sleep were fixed in yesterday's Apple security updates: support.apple.com/en-us/125632 Technical details will be available soon at issuetracker.google.com/issues?q=com...

support.apple.com/en-us/125632 the name "big sleep" feels a lot more insulting now that its really threatening to take our jobs

What is my purpose You provide entropy Oh

thehackernews.com/2025/11/goog... 📈📈📈

Neat idea: Snapshot fuzzing from a certain point deeper in the target (with +- complex state), then use an AI Agent to trigger that point. Fuzzer goes brrr

We derestricted crbug.com/382005099 today which might just be my favorite bug of the last few years: bad interaction between WebAudio changing the CPU's handling of floats and V8 not expecting that. See crbug.com/382005099#co... for a PoC exploit. Also affected other browsers

TLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-... 🧵

POE2: community.arm.com/arm-communit...

Get Low though.. 🔥

Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump addisoncrump.info/research/wha...

A sandwich is $3000 but if you want meat that's another $1500 and oh if you want lettuce that's another $1500. Mustard? You're not gonna believe this

I prefer Ghidra&Frida, but...

I might have more cameras than phones at this point lol

endianness is just a plot by Big Endian to sell more byte swap operations

Please slides and python scripts for this talk #hacklu #crypto #reverseengineering github.com/lclevy/d8_or...

Everything I have ever posted is on the record, because it has been slurped up by an LLM and is part of the eternal GenX/Millennial cross-language culture supremacy ideaplex who wrote a majority relevant – especially summarization of it – in high-impact source of machine training. We are... forever

Our @defcon.bsky.social talk is online: youtu.be/FXIScbxJTZw! Ever wanted to get banned from online games without cheating? We've got you covered! Check out this talk for fun hacks tripping off modern anticheats. Joined work with Sam Collins and Tom Chothia. More Info: game-research.github.io

tired: it's always DNS inspired: ICANN feel it coming in the air tonight

For those of you who are wondering, the most important opsec lesson to take from the First Wap story is that if your threat model includes a government, do not take your cell phone with you to locations or meetings you don't want them to know about.

From Discord: 😂