FAMASoon

Security research
blog:

[FAMASoon @FAMASoon]

書きました

[エヌ・エフ・ラボラトリーズ @NFLaboratories]

NFLabs.エンジニアブログを更新しました。
「GOADの紹介とその攻略」https://t.co/nsS4oL0Wf8
＃Security #セキュリティ

[秋风 @q1uf3ng]

If I hadn't gone out yesterday, this wouldn't have been a duplicate discover 😭

https://t.co/6DjoiGFvaE

[Orange Tsai 🍊 @orange_8361]

That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉

[Zhongquan Li @Guluisacat]

The blog post on my talk "Design-Based Vulnerabilities on macOS： Oops, Not a One-Shot Fix" presented at OffensiveCon2026 : https://t.co/DAqpWVVxDs

[sangnt @gnas0x0018]

Fixed in Firefox 150.0.3 😔 Good bye p2o @rewhiles

[V12 @v12sec]

this is a dirtyfrag variant. PoC and patch: https://t.co/5lEDZZU3Sj

[V12 @v12sec]

another day, another universal linux LPE

[hiro_ @papa_anniekey]

最近、AI SOCの話がよくでるんだけど、とりあえずログ突っ込めばなんとかなく、ではないのよ…何度もいうが、正規化、正規化。Sigma使おうと正規化

[Kim Zetter @KimZetter]

Researcher @olearysec found privilege-escalation vuln in Azure Backup for AKS and reported to @microsoft. CERT validated it but Microsoft rejected it and asked Mitre not to give it CVE. Then he says Microsoft silently patched it without telling users https://t.co/CL1Jn8vyKL

[vx-underground @vxunderground]

Yippie

Two new Microsoft Windows 0days. The exploits have cool and badass mysterious names to be extra spoopy

- GreenPlasma: Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability
- YellowKey: Bitlocker Bypass Vulnerability

https://t.co/VaWFtW5lFi

[Qrious Secure @qriousec]

We’ve been through all kinds of situations: exploits failing, vendors turning off services during demos, patches being released the night before a demo, and more but we happily accepted and continue to play.
And if you don’t participate in the game, who cares about your opinion?

[Qrious Secure @qriousec]

As a team that has participated in Pwn2Own twice every year since 2020, We’d like to say this clearly: getting rejected is just another part of the game. Calling player to "revenge” and releasing 0-day exploits is irresponsible and harmful.

[FAMASoon @FAMASoon]

@b1ack0wl I agree.
While the rapid advancement of AI can be exhausting at times, people should still make an effort to adopt the technology.
Of course, a final review by a human eye is essential.

[LainKusanagi @unknownseeker99]

Beatrice Pro Edition has been updated!

-New flag to obfuscate Import Address Table
-Improved alternative encodings
-Evasion with Cobalt Strike added to the guide

Check out Beatrice Pro edition:

https://t.co/sXG3Zk6hQW

[Andy Gill @ZephrFish]

It’s been 10 years since I published my first book(LTR101), so to celebrate I’m giving 10% off my red team course, Malwareless Adversarial Emulation (MAE).

MAE focuses on practical, real-world offensive tradecraft including malwareless operations, tunnelling, AD CS abuse, cloud pivoting, and detection-aware operations.

Check it out here: https://t.co/gvGwReAfK5

Discount code: LTR101-10Y
Valid until the end of August 2026.

Thanks to everyone who has supported my work over the years. I genuinely appreciate it.

#RedTeam #CyberSecurity #InfoSec #OffensiveSecurity #AdversaryEmulation #RedTeaming #CyberTraining #Malwareless

[FAMASoon @FAMASoon]

@AyatoShitomi おめでとうございます！

[Yuu @anzuukino2802]

This was supposed to be my PoC for a Claude Code RCE aimed at Pwn2Own Berlin 2026, but ZDI never got back to me about my entry registration. It looks like I won't be able to register it at all...

[eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33]

Devirtualizer Code:

https://t.co/f4dUZdTEZt

[eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33]

When practicing on a VM crackme recently, I created a devirtualizer which lifts the virtual machine to LLVM to defeat the protection. LLVM-based devirtualisation is a lot of fun and I wrote down my experience and lessons learned on my blog:

https://t.co/LiWNIj31uK

[Smukx.E @5mukx]

EDR Tradecraft: Internals, Detection, Evasion & Advanced Research

TL;DR: Covers kernel callback APIs, file-system mini-filters, ETW providers, four detection engine model, syscall gates sleep obfuscation, call stack spoofing, ETW-TI HWD and more ....

https://t.co/U9fxJKIJZv

[FAMASoon @FAMASoon]

@usui_iigame 謎のトンネルを調査する番組です
いまならネットで見れるのでぜひ
【静岡】「新東名」の脇にたたずむ”謎のトンネル”を調査【道との遭遇】 | CBC MAGAZINE（CBCマガジン） https://t.co/YamF3ykgn1