Kirin

Everything will be fine.

[Kirin @Pwnrin]

@yo_yo_yo_jbo 🍻🎉🎉🎉

[xvonfers @xvonfers]

Whoah... $250000

(CVE-2025-4609, similar to CVE-2025-2783/412578726)[412578726][Mojo][IpczDriver]ipcz bug -> renderer duplicate browser process handle -> escape sbx is now open with PoC & exploit(success rate is nearly 70%-80%)
https://t.co/KiQ6gHaHVj
https://t.co/5TXy8yIC0g

[Tielei @WangTielei]

Just finished a new blog sharing an interesting example demonstrating the power of cross-operating system vulnerability variant analysis! Check it out here: https://t.co/AdCDUhVtGz
Hope you like it.

[Csaba Fitzl @theevilbit]

You can the slides for my today’s @bsidesbud talk (Apple Disk-O Party) on my site:

https://t.co/hLq264uEN6

[Angelboy @scwuaptx]

Thrilled to share our latest deep dive into Windows Kernel Streaming!
Just presented this research at @offensive_con.

Check it out: https://t.co/DRxHWf5pTJ

[Ian Beer @i41nbeer]

My writeup of the 2023 NSO in-the-wild iOS zero-click BLASTDOOR webp exploit: Blasting Past Webp -
https://t.co/H4m8MBwoWN

[Kirin @Pwnrin]

@theevilbit Perhaps it's due to different reviewers. In fact, my single category TCC bypass in 2023 still received 15.5k. Only issues that involve restrictions (root permission) or require user interaction would be awarded 5k.

[Kirin @Pwnrin]

@theevilbit I asked Apple half a month ago if there was any error in this CVE description. Apple didn't reply or correct it (BTW, the inspiration for this issue is from your paper in BlackHat).

[Kirin @Pwnrin]

@theevilbit Yes, I'm OK with this. It's just that one month's reply is too long. What's worse is that this issue has not been fixed. Once again, Apple confused my report with others.

[Alfie @alfiecg_dev]

I've just published a new blog post detailing how I developed a deterministic kernel exploit for iOS. Enjoy!
https://t.co/ah8qtW0CG5

[Hichem Maloufi @hichem_ifpdz]

New writeup:
CVE-2025-24104 – Apple’s bug allowed arbitrary file reads outside the sandbox.

While iOS 18.3 added a mitigation, it doesn’t fully fix the issue. I even bypassed it since my recommended fix wasn’t followed.

Read more 👉 https://t.co/NmnHKrra8k

#AppleSecurity #CVE2025 #InfoSec

[Kirin @Pwnrin]

👀👀👀

[Kirin @Pwnrin]

😊😊😊

[Tim Willis @itswillis]

Two new posts from @tiraniddo today:

https://t.co/StB2knG8FO on reviving a memory trapping primitive from his 2021 post.

https://t.co/sbKodaJMe9 where he shares a bug class and demonstrates how you can get a COM object trapped in a more privileged process.

Happy Reading! 📚

[Mickey Jin @patch1t]

New Blog Post:
https://t.co/RXemRXnoNs
Tell you more about what I didn’t talk about at the #OBTS 7 @objective_see

[Mickey Jin @patch1t]

New Blog Post in 2025:

https://t.co/BPgJ0YaG8K

Tell you more about the AMFI👻

[Csaba Fitzl @theevilbit]

🍎🪳Second part of the diskarbitrationd - storagekitd vulnerability blog series is out on @KandjiOfficial 's blog.
These vulnerabilities were presented at @BlackHatEvents #BHEU2024 and @POC_Crew #POC2024 conferences.
https://t.co/wjT5V6RjwZ

[Huke @08Tc3wBB]

iOS 17 PoC, Here’s how u can leak any iCloud app data by copying and pasting two completely unrelated files. https://t.co/jD7gOJOTid

[Mickey Jin @patch1t]

My slides for the OBTS is here:
https://t.co/lXHZ0b8L7f

Exploits: https://t.co/Fg5i69llV4

Blog will be posted after the fix of the variant issue.

[Mickey Jin @patch1t]

As promised, I just dropped a dozen new sandbox escape vulnerabilities at #POC2024
If you missed the talk, here is the blog post:

https://t.co/zTcENNrZun

Slides:
https://t.co/sWztf0ygM4

Enjoy and find your own bugs 😎