Natnael Samson

Security Researcher

[Natnael Samson @NattiSamson]

@thedawgyg @w3llr00t3d @tyler_J___ From what you are saying it's 1 click exploit not 0 click.

[Natnael Samson @NattiSamson]

@thedawgyg What is your system spec?

[0xor0ne @0xor0ne]

VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-20869) by Alexander Zaviyalov (@NCCGroupInfosec)

https://t.co/qAKnS15RLn

#infosec

[Alex Plaskett @alexjplaskett]

Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure by Gábor Selján

https://t.co/cKXIL1jKOi

[Virus Bulletin @virusbtn]

Check Point Research demonstrates how generative AI can speed up reverse engineering from days to hours by exporting IDA data to ChatGPT for deep static analysis. https://t.co/nhfXopg5vw

[Synacktiv @Synacktiv]

Following their presentation at @hexacon_fr, Mehdi & Etienne detail how they exploited CVE-2023-40129, a critical vulnerability affecting the Bluetooth stack in Android ⬇️

https://t.co/OS63LQ4tJE

[Boris Larin @oct0xor]

TrueType is the gift that keeps on giving (do you remember Triangulation?) and Peter @bl4sty keeps on winning pwn2own thanks to it #TheSAS2025

[0xor0ne @0xor0ne]

VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-20869)

https://t.co/DseNNxt7Ow

Credits Alexander Zaviyalov (@NCCGroupInfosec)

#infosec

[Dohyun Lee @l33d0hyun]

OMG.. whatsapp 0c in pwn2own

[CyberRobo @CyberRobooo]

Sharp Robotics of Singapore has officially unveiled SharpaWave, an impressively dexterous hand. The 1:1 life-size model boasts 22 degrees of freedom, with over 1,000 tactile sensors per fingertip. It can crack eggs, play the piano, or use scissors, combining strength, speed, and dexterity once thought impossible.

[Natnael Samson @NattiSamson]

@msftsecresponse Congrats man you did it

[Mussy @Mu55sy]

We opened the iOS sandbox like a museum vault—carefully, layer by layer—and found the rulebook written in runes. So @yarden_ha revived an old decompiler (dev CPR 🫀🛠️), added modern iOS support, and turned noise into readable signals. Now the policies aren’t “mystery beach sand,” they’re a map you can navigate: what’s allowed, what’s fenced, why that API says “no.” Research → faster. Insights → deeper. Clarity → finally. Only at #OBTS 🍏 do tools get resurrected and upgraded in one talk.

[Florian Hansemann @CyberWarship]

''Windows Heap Exploitation - From Heap Overflow to Arbitrary R/W''

#infosec #pentest #redteam #blueteam
https://t.co/KtyGfqDIpf

[h0mbre @h0mbre_]

Wrote a blogpost today on how to write a harness for Lucid. This is the harness I'll be using to fuzz `nftables`. Some overlap with last blogpost, but everything is explained step-by-step. First blog entry into my earnest attempt to find bugs with Lucid for the 1st time: 👇

[Mr. OS @ksg93rd]

#exploit
Windows Heap Exploitation -
From Heap Overflow to Arbitrary R/W
https://t.co/2RzNvsoBtU
]-> PoC - https://t.co/nxqsSQoxRz
// vulnerability exists in the add/update function where it re-uses the previous size of the record to read the new data

[0xor0ne @0xor0ne]

Windows kernel exploitation (CVE-2024-30088, Pwn2Own Vancouver 2024)

https://t.co/6UWvb48lbn

#infosec

[Zero Day Engineering @zerodayalpha]

🐞Bug Spotlight: CVE-2025-10200 – Use-after-Free in Chrome Service Worker [bounty $43000]

One-shot renderer RCE to sandbox escape with a deep iterator invalidation

Issue: 🔒440454442 (currently private)
Reported by Looben Yang

Reverse engineering & PoC exploit by @alisaesage

[Alex Plaskett @alexjplaskett]

A great write-up of a VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-
20869) exploit by Alex Zaviyalov has just been published!