nicolas vamous

[nicolas vamous @NVamous]

@VAR10CK You rock

[Zy @VAR10CK]

Slides for my Zer0Con 2026 talk "Attacking Apple Display Co-processor" is out ~ : https://t.co/10MTNMBhAw

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[nicolas vamous @NVamous]

@1ce0ear Could you please dddd？

[xvonfers @xvonfers]

Slides from Samuel Groß talk(@5aelo) about v8sbx hw-support
https://t.co/vxqmVaHIpU
https://t.co/poy1RH9v8m

[Samuel Groß @5aelo]

We released our Fuzzilli-based V8 Sandbox fuzzer: https://t.co/eVkR1bl76n
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!

[Crusaders of Rust @cor_ctf]

We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸

Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds?

Read the full writeup at: https://t.co/GkpCjamlaZ 👀

[nicolas vamous @NVamous]

@javierprtd This technique has been disclosed before.

[nicolas vamous @NVamous]

@VAR10CK @LiangWenfeng_ like how？

[Hardened-GNU/Linux @hardenedlinux]

https://t.co/mjsQFPoVsc #noexec #bypass

[Klecko @klecko0]

I've written a post on SELinux and some public bypasses for Android kernel exploitation. It's especially relevant for Samsung and Huawei devices due to their use of hypervisors. Check it out here: https://t.co/UHesQZgjuv

[1ce0ear @1ce0ear]

More details about CVE-2024-44068 - it’s part of an EoP chain in the wild:

https://t.co/cUNkll6Hf4

[nicolas vamous @NVamous]

@1ce0ear Bring me fly.

[nedwill @NedWilliamson]

@mboehme_ This video is an excellent broader overview. Despite being relative obscure I find it presents some good intuitive models: https://t.co/tECIaYnJEK

I'm following other work related to automated proof generation such as AlphaGeometry. I can see parallels with symbolic execution.

[Project Zero Bugs @ProjectZeroBugs]

Qualcomm KGSL: reclaimed / in-reclaim objects can still be mapped into VBOs https://t.co/DSO0NbRTlB

[Project Zero Bugs @ProjectZeroBugs]

Linux: LSM can prevent POSIX lock removal in fcntl/close race cleanup path https://t.co/bMBlFqGTjt

[Javier Partido Rufo @javierprtd]

I just released the blog explaining how I leveraged CVE-2022-22265 in the Samsung npu driver. Double free to achieve UAF over signalfd + cross cache + Dirty Page Table + code inject into https://t.co/4qmJHJUSBo for execution by init. Hope you can enjoy it https://t.co/qCFC5t8E4K

[Project Zero Bugs @ProjectZeroBugs]

Linux: landlock can be disabled thanks to missing cred_transfer hook; and Smack looks dodgy too https://t.co/TH3gPQvSjn

[1ce0ear @1ce0ear]

OBS heap overflow vulnerability in parsing GIF image: https://t.co/Zf7InKR9Y1

[Mathias Payer @gannimo]

Philipp and Valentin wondered how good "safe" allocators actually are and dissected Android's scudo. We found that the zygote fork model results in unexpected bypasses for several mitigations, including the breaking the guarantees of the safe allocator. Join us tomorrow at 10:45!