akshshshJHanHJ

[Ikotas Labs, Inc. @ikotas00]

弊社エンジニアがGoogle kernelCTFを0-dayで突破しました。kCFI+IBT、SLAB_VIRTUAL、KMALLOC_PARTITION_TYPEDなどのセキュリティ緩和策が有効化され、io_uring、user_ns、TLSも潰された新ターゲットです。対象の報奨金は$71,337で、日本人初です！

[hackyboiz @hackyboiz2]

[1day1line] CVE-2026-42980: Privilege Escalation via an Integer Underflow in Windows WMI

Hello, This is minzu.
Today's 1day1line covers a local privilege escalation vulnerability in the Windows kernel's WMI code (ntoskrnl.exe). When multiple WMI query results are written into one buffer, subtracting an 8-byte-aligned result size without checking the remaining output space can cause an integer underflow. The resulting size miscalculation can lead to a nonpaged pool buffer overflow. The public PoC demonstrates escalation to SYSTEM on vulnerable systems.

Please refer to the blog post for more details!
https://t.co/gYuEsOgNNd

[Brendan Dolan-Gavitt @moyix]

Cool work! I did something similar with gpt-5.6-sol: put two agents inside isolated workerd (V8) isolates and set the win condition to be learning the other agent's flag. They succeeded 1/5 times using the shared event loop as a comms channel

[Alisa Esage Шевченко @alisaesage]

I don’t think the world is ready for the zero day apocalypse that’s upon it.

Cost of entry was the only real constraint on ethics of the game. Given current AI, it no longer holds.

Who pays more for the bug is the only question now.

Critical software vendors that don’t have a good bug bounty program are screwed.

[Zhenpeng (Leo) Lin @Markak_]

Check out the technical details here: https://t.co/cjEuccbEMe

[s1r1us @S1r1u5_]

gotta give it to @OpenAI and their sane daybreak program

heif heist by harsh
kvmescape by paulos
php2shell by lcfr
gitlab rces by joaxcar
chrome full chain by moyix
wordpress rce by hashkitten

all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol.

[QED Audit @QED_Audit]

The overflow lands in the JIT code region, so we overwrite executable code directly. That got us arbitrary code execution on the latest Chromium, and a $10,000 payout from v8CTF. (2/n)

[QED Audit @QED_Audit]

@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)

[akshshshJHanHJ @ErnestAng1]

@odinshell Sorry what does that mean? Congrats btw

[akshshshJHanHJ @ErnestAng1]

@Wrath_ZA 0 day?

[BackBox Labs @backbox_labs]

BackBox AI built a complete Chrome 152 exploit chain against @Google's v8CTF target, from a web page to RCE and a file read.

Three V8 bugs, a sandbox escape, WebAssembly and ROP.

We break down how it works and what the patch gap means for defenders.

https://t.co/6DNdJDqS4i

[Himanshu Anand @anand_himanshu]

I chained 3 public V8 bugs against Google's v8CTF Chrome build and got a real flag.

OOB read → GC stale slot → fake array → caged R/W → native leak → JSPI/JDT stack pivot → ROP.

V8 sandbox escape: yes.

$10k ??

[Ethan @Wrath_ZA]

DeepSeek V4.1 Flash is pretty good :) Managed to solve v8CTF.

[Jihyeon Jeong @symsool9143]

A little research recap for 2026 so far:

• 8 v8CTF submissions (7 accepted, 1 pending)
• 9 V8 bugs
• 19 V8 SBX

Learned a lot digging into V8 this year. Still plenty more to explore :)

[Suppressed Man @SuppressedMan]

🇪🇨🚨 A tragic incident in Guayaquil, Ecuador: Priest Patricio Sánchez died after a massive cross fell on his head during Mass at the Perpetuo Socorro Church.

The incident was captured on a live broadcast.

[Mochi @madebymochi]

iOS 16.5 IS BOOTING ON ANDROID PHONES

OOSexGang claims they’ve got actual iOS running on the Poco X5 Pro and Xiaomi 11 Lite 5G

not a launcher or a skin, the real OS

Safari and YouTube have been shown, with Wi-Fi, audio and cameras reportedly working too

no public build yet, so it still needs independent verification

[Asjid Kalam @odinshell]

first v8CTF solve!!!

very cool bug chain, exciting things coming.

[عالم التكنولوجيا @Q8Pro]

إختراق أيفون 18 برو IOS 27.0.1 بدقيقة

[小柒🍥🏳️‍⚧️ @XiaoQi_077s]

5.10-6.18 Linux Kernel
漏洞提权root，可自行测试
Github仓库：https://t.co/vkHRkiilew
提前安装好KernelSU