Neat 📈 security.googleblog.com/2025/11/andr...

Can we just not C++?

Uuuhm

Finding 0day is the one unsaturated LLM eval left

Great blog post 🦀🦀🦀

Crashing calculators and CAD editors? GUIFuzz++ is finally here to help make them better! 🔥 Come see my undergraduate student @trowlett0.bsky.social's very first paper "GUIFuzz++" at @aseconf.bsky.social this Wednesday. Also now integrated in @aflplusplus.bsky.social! 😃 github.com/AFLplusplus/...

It is time for the annual State of Rust Survey! 📝✨️️ Whether you've just begun using Rust, are an experienced Rust user, stopped using Rust, or might use Rust in the future, we'd like to hear from you! 🦀 Available in ten languages and open until December 17th: blog.rust-lang.org/2025/11/17/l...

Doctor says, 'Dont worry, parser design is simple. Great programmer Kate Compton has written the parser you seek’

LibAFL 0.15.4 has just been released 🎉 Of the 30 Contributers for this release, almost half are new faces <3 github.com/AFLplusplus/... #Fuzzing #LibAFL #AFLplusplus

"You are a smart and handsome software engineer" Prompt engineering is just drag for computers 💅

Some more cool JS Engine bugs found by Big Sleep were fixed in yesterday's Apple security updates: support.apple.com/en-us/125632 Technical details will be available soon at issuetracker.google.com/issues?q=com...

support.apple.com/en-us/125632 the name "big sleep" feels a lot more insulting now that its really threatening to take our jobs

What is my purpose You provide entropy Oh

thehackernews.com/2025/11/goog... 📈📈📈

Neat idea: Snapshot fuzzing from a certain point deeper in the target (with +- complex state), then use an AI Agent to trigger that point. Fuzzer goes brrr

We derestricted crbug.com/382005099 today which might just be my favorite bug of the last few years: bad interaction between WebAudio changing the CPU's handling of floats and V8 not expecting that. See crbug.com/382005099#co... for a PoC exploit. Also affected other browsers

TLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-... 🧵

POE2: community.arm.com/arm-communit...

Get Low though.. 🔥

Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump addisoncrump.info/research/wha...

A sandwich is $3000 but if you want meat that's another $1500 and oh if you want lettuce that's another $1500. Mustard? You're not gonna believe this

I prefer Ghidra&Frida, but...

I might have more cameras than phones at this point lol

endianness is just a plot by Big Endian to sell more byte swap operations

Please slides and python scripts for this talk #hacklu #crypto #reverseengineering github.com/lclevy/d8_or...

Everything I have ever posted is on the record, because it has been slurped up by an LLM and is part of the eternal GenX/Millennial cross-language culture supremacy ideaplex who wrote a majority relevant – especially summarization of it – in high-impact source of machine training. We are... forever

Our @defcon.bsky.social talk is online: youtu.be/FXIScbxJTZw! Ever wanted to get banned from online games without cheating? We've got you covered! Check out this talk for fun hacks tripping off modern anticheats. Joined work with Sam Collins and Tom Chothia. More Info: game-research.github.io

tired: it's always DNS inspired: ICANN feel it coming in the air tonight

For those of you who are wondering, the most important opsec lesson to take from the First Wap story is that if your threat model includes a government, do not take your cell phone with you to locations or meetings you don't want them to know about.

From Discord: 😂

So what names form Ubuntu

[RSS] Lucid Dreams II: Harness Development h0mbre.github.io -> #fuzzing Original->

The recording of our (CC @nicolo.dev ) talk "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" at @reconmtl.bsky.social is now online! Recording: www.youtube.com/watch?v=QxSG... Slides: synthesis.to/presentation... #BinaryNinja Plugin: github.com/mrphrazer/ob...

Talks from the REcon 2025 security conference, which took place in June, are available on YouTube www.youtube.com/@reconmtl/vi...

In retrospect looking for command injection on a zte MF971V by putting ;reboot; on the end of values might not have been the best idea as its now reboting every 40 seconds or so and i cant connect to the wifi. Have ordered another to try ;telnetd; instead

[RSS] Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers blog.quarkslab.com -> Original->

At the center of it all, the company First Wap. Hidden behind hideous 2000s web design is a ruthless surveillance pioneer that has operated in the shadows for more than two decades.

Short introduction to Windows heap exploitation mrt4ntr4.github.io/Windows-Heap... #infosec

That's a lot of 🤑

Current status: oh god why am I in the BRCM2837 interrupt controller docs all I wanted was a higher degree of graphical fidelity in Doom

After 5 years, we are back at NDSS in San Diego! Looking forward to submissions from the Security and the Software Engineering community!

I have a spare hexacon ticket if anyone wants it

Signal to leave EU rather than comply w/ Chat Control, which would scan all messages sent over end-to-end encrypted platforms. Vote on Chat Control's future Oct 14. Germany is the swing vote. Officials there opposed the measure in past but new govt silent re position therecord.media/signal-calls...

We ported Rust to the Sega Megadrive for the finals 🦀🦀🦀 (Times are off by one)

Hackceler8 live stream will start on 2025-10-04 21:15 UTC / 14:15 PST Schedule (PST) 14:15 - Live stream start 14:30 - Semifinals #1 16:30 - Semifinals #2 18:30 - Finals www.youtube.com/watch?v=xN1W...

A beer leak?

NEW: A cyberattack has forced Japan's beer maker Asahi to suspend operations at its plants in the country since Monday. For now, the company said it's experiencing a "system failure" but did not confirm "leakage of personal information or customer data to external parties."

Today, my research group @ Georgia Tech released a paper on vulnerabilities in Tile --- the second largest device finding network after Apple's AirTags. You can read about it in Wired, reporting by @kimzetter.bsky.social! www.wired.com/story/tile-t...