Zy

[Zy @VAR10CK]

Slides for my Zer0Con 2026 talk "Attacking Apple Display Co-processor" is out ~ : https://t.co/10MTNMBhAw

[POC_Crew @POC_Crew]

#Zer0Con2026, a wrap up!

Big thanks to our speakers, sponsors, participants, and staff members for making this incredible journey with us.

Special appreciation to those who joined from a far despite ongoing global situation, we truly appreciate your effort coming all this way. 🙏

Wishing everyone a safe trip home, and we look forward to seeing you again at "🔴POC2026" this November!

[deepsec.cc @deepsec_cc]

#deepsec 12/16/ 2025 "Attacking Apple Display Co-processor" by Ye Zhang maps Apple’s DCP attack surface, shows firmware analysis and fuzzing that led to 14 CVEs and code execution on the display coprocessor, and reviews Apple’s fixes and new mitigations. https://t.co/KYlSs1jqBb

[Zy @VAR10CK]

@__sethJenkins Nice finding! this one is very similiar to CVE-2023-33114, is there any point I miss?

[Dataflow Forensics @df_forensics]

Our latest blog post: Tracing Back to the Source | #SPTM Round 3 #TXM #iOS #macOS #DFF

https://t.co/UvKZI9MNeq

[meeko✨ @meekochii]

i hope im not too late to the cloutchasing cycle

Deepseek's Low Level Hardware Magic, with art by @onigiriice https://t.co/dy5dUOI8hk

[Zy @VAR10CK]

@LiangWenfeng_ This should be a fake account

[Project Zero Bugs @ProjectZeroBugs]

From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code https://t.co/NYv5XVZYU5

[Linux Kernel Security @linkersec]

SSD Advisory — Linux kernel TAPRIO OOB

An article about exploiting an RCU-involved race condition in the TAPRIO network queuing discipline implementation. The exploit is by @ky1ebot.

https://t.co/qEvz8BzxDq

[Zy @VAR10CK]

@NVamous dont do this master LE...

[Patrick Wardle @patrickwardle]

Neat research from @eva_info_sec, highlighting (yet again), the increased risk of supply chain attacks introduced by dependency managers 😱

https://t.co/sVsyvqEWJy

[Andrej Karpathy @karpathy]

These 94 lines of code are everything that is needed to train a neural network. Everything else is just efficiency.

This is my earlier project Micrograd. It implements a scalar-valued auto-grad engine. You start with some numbers at the leafs (usually the input data and the neural network parameters), build up a computational graph with operations like + and * that mix them, and the graph ends with a single value at the very end (the loss). You then go backwards through the graph applying chain rule at each node to calculate the gradients. The gradients tell you how to nudge your parameters to decrease the loss (and hence improve your network).

Sometimes when things get too complicated, I come back to this code and just breathe a little. But ok ok you also do have to know what the computational graph should be (e.g. MLP -> Transformer), what the loss function should be (e.g. autoregressive/diffusion), how to best use the gradients for a parameter update (e.g. SGD -> AdamW) etc etc. But it is the core of what is mostly happening.

The 1986 paper from Rumelhart, Hinton, Williams that popularized and used this algorithm (backpropagation) for training neural nets:
https://t.co/f52IcDNitR
micrograd on Github: https://t.co/GaTd16jRnB
and my (now somewhat old) YouTube video where I very slowly build and explain:
https://t.co/EPGG6kd5Yz

[Ivan Fratric 💙💛 @ifsecure]

New Project Zero blog post by Sergei Glazunov and Mark Brand: Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models https://t.co/txvkXH5oCC

[Mohamed Baioumy @mo_baioumy]

One more Apple announcement this week: you can now run your personal AI cluster using Apple devices @exolabs_

h/t @awnihannun

[Maxime Rossi Bellom @max_r_b]

Better late than never!

The slides of our talk "Attacking Samsung Galaxy A* Boot Chain" at @offensive_con can be found here: https://t.co/P6gtwDftBp

The video is also available: https://t.co/RnGuJHOIJA

[exploits.club @exploitsclub]

It's a great week for a vuln research newsletter 📰 🏴‍☠️

"Inside The 0-day Market" slides from @mdowd

@NCCGroupInfosec with some musl heap magic

.NET RE fun from @SinSinology and @Horizon3Attack

MIPs ROP from @ruikai

+ jobs and more 👇

https://t.co/gZWlI3ACB0

[Zy @VAR10CK]

@NVamous good job👍

[nicolas vamous @NVamous]

Finally finish the talk "Game of Cross Cache: Let's Win It in a More Effective Way!", trying to solve challenges in cross-cache attack. Here are slides:
https://t.co/I3T63jHA68

[Zy @VAR10CK]

@NVamous brilliant!

[Zy @VAR10CK]

@_simo36 wow, amazing, sir