David Attenborough is now narrating my life Here's a GPT-4-vision + ElevenLabs python script so you can star in your own Planet Earth:

CVE-2023-49103: this analysis by GreyNoise is erroneous. The exploit WORKS with default configuration, even on docker installs. Please patch.

Here we are! 🥷 Masters of pwn for the third time 🎉 Congratulations to all the ninjas involved! #Pwn2Own

Manfred Paul’s Firefox renderer bug is a beauty that takes advantage of an optimisation implemented just 3 months ago. Let’s break it down!

The first part of the blog series: #Iconv, set the charset to RCE. We'll use #PHP filters and #CVE-2024-2961 to get a very stable code execution exploit from a file read primitive. #cnext

New week, new newsletter 📰 Synacktiv tracks down why you are suddenly seeing deleted photos of your ex Meysam and roddux drop some Linux goodies V8 required reading from Rebane and xvonfers faulty *ptrrr drops 2 bugs in njs + jobs and more blog.exploits.club/exploits-club-…

Here is a new blog post, where I wrote about (some of) my recent work with angr, including: - Adding support for Windows debug symbols - Collecting and visualizing real-time coverage - Improving debugging workflows plowsec.github.io/angr-introspec…

i know at least 10 people exactly like this

Ph0wn CTF Teaser is out! Head to teaser.ph0wn.org. Good luck! PS. Don't forget to subscribe to our (low volume) newsletter for latest news listmonk.ph0wn.org/subscription/f…

Bug bounties are a scam. They reward low effort spray and pray researchers and punish those who go deep.

Don't miss "From Easy Wins to Epic Challenges: Bounty Hunter Edition" by Daniel Le Gall (Blaklis)! 📅 Friday, Aug 9 ⏰ 11 AM 📍 Creator Stage 4 #BugBounty #DEFCON

Excitd about Blaklis talk at the bug bounty village. Great chance to learn from a great bug bounty hunter! Don’t wanna miss this one!

Unfortunately, I can't attend Hexacon Anyone interested in buying my ticket ? Please dm or respond to this msg, thx!

A fish called Gemmy and how it saved Chris Wade. A story I’ve wanted to tell for a long time. semafor.com/article/01/10/…

Looool

✨ Finally! After 12 years of crazy solo dev, my game Zefyr: A Thief's Melody lands on Steam June 2, 2025!🎉 🐢 Sail the ocean on a cute turtle 🏝️ Climb every island 🏴‍☠️ Confront or avoid pirates 🦊 Heal animals 👉 Wishlist on Steam NOW store.steampowered.com/app/1344990 #indiegame

I haven't been publishing much lately, but not because I haven't been doing research -- in fact, I've done more than ever in the past five years. My ~200KLOC backlog will soon begin trickling out into the IDA/Hex-Rays ecosystem.

Hey the community! I feel the need to react to x.com/GodfatherOrwa/…, as it targets me specifically and is doing a clear defamation there. I guess it's useless to say that the claims of me telling that I'll block people based on the fact that they're muslim is a complete lie,

Check out our first blog post about V8 CVE-2024-12695: bugscale.ch/blog/dissectin…

🐞 Bugscale is thrilled to be sponsoring Hexacon again and we look forward to seeing everyone in Paris! Thank you Bugscale for your continued support 🙏