3ndy1

A real 菜鸡 & 倒霉蛋

[Alex Moshkov @amoshkov]

Book May 28–30 for Positive Hack Days in Moscow 🇷🇺

Cybersecurity conference, festival & community event — unlike anything you’ve been to.

CFP open: https://t.co/t0KkvwtNJa — flights + stay covered.

I’ll personally take care of you — you’ll see how we do things here at #PHDays.

[Alex Moshkov @amoshkov]

🟥 Positive Hack Talks → São Paulo 🇧🇷
Dec 10th, 2025

🗣️ Speakers — submit papers (flights/hotel covered). CFP link in thread 👇
💻 Cybersecurity community — join our most community-driven event.

➡️ https://t.co/dLTF5ZhE7Z
Free · 8 talks · limited spots

#PHTalks

[binaryboy @b1n4r1b01]

Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 https://t.co/EL3qg56N8X

[DawnSecurityLab @dawnseclab]

New blog post: A journey in Android physical memory - writeup on exploiting recent GPU bug CVE-2025-21479 https://t.co/9aSzddEzK3

[Dataflow Forensics @df_forensics]

Another guaranteed bestseller by our own Co-Founder and CTO

[roothide @roothideDev]

FairFree released!

jailbreak any ipa and run on apple silicon M1/M2 macOS without decrypted: https://t.co/u96dHsD1ZV

[A. Z. @antoniozekic]

How many ITW zero days have been documented on iOS this year?

[pattern-f @pattern_F_]

I'm an iOS SEP app developer. 👀

[Hoshino Lina / 星乃リナ 🩵 3D Yuri Wedding 2026!!! @Lina_Hoshino]

I just posted the slides for today's collab stream with @CyanNyan6!!!

　「I hacked macOS!!!
　　CVE-2022-32947
　With Lina✨ & Cyan💎」

https://t.co/87UlSLuVQu

[Hoshino Lina / 星乃リナ 🩵 3D Yuri Wedding 2026!!! @Lina_Hoshino]

✨ Collab Announcement!!! ✨

Did... did I just hack macOS??? Join me and @CyanNyan6 to hear the story of that time I found a major security bug in macOS and got a bounty from Apple!!

🎦 https://t.co/S2A2CAI6L3
🕚 September 17th at 11:00 JST / 2:00 UTC
▶️ https://t.co/tpiMea2JXP

[3ndy1 @_3ndy1]

@realBrightiup 这年头还是坏人多

[Dohyun Lee @l33d0hyun]

Lucky vuln found in 10 minutes!

CVE-2023-28201 : Use-After-Free in Apple Safari Web Inspector

https://t.co/XXYwQWFI5A

[Ezrak1e @ezrak1e]

Continuing my sad story, another exploit I prapared for tfc got fixed today cve-2023-28218 reported by Junoh Lee
A double fetch+integer overflow can allow the size of memmove 0xffffffff. Since src is user space, it can actually copy any size

[Linus Henze @LinusHenze]

CVE-2023-28206 PoC: https://t.co/OHBjbzoYan

[pattern-f @pattern_F_]

proc_entitlement_is_bool_true("https://t.co/lHiZWv1L77.container-manager") is changed to AppleMobileFileIntegrity::AMFIEntitlementGetBool in iOS 16.4. So the hack adding entitlements to the backend OSDictionary of OSEntitlements is not working.

[Project Zero Bugs @ProjectZeroBugs]

XNU vm_object use-after-free due to invalid error handling in vm_map_enter https://t.co/KCFChT6s0S

[simo @_simo36]

I'm sharing two other iOS kernel vulnerabilities reachable from the default app sandbox that don’t require you to open a UserClient:
https://t.co/a6ZOu8UWKR

[simo @_simo36]

CVE-2022-32932 is another vulnerability I discovered in the ANE kernel interface; this is a double fetch issue that resulted in an interesting OOB write.
https://t.co/dova9tSWkD

[3ndy1 @_3ndy1]

@realBrightiup 带带

[Ivan Fratric 💙💛 @ifsecure]

Every time TinyInst on macOS breaks, you can be sure it's because Apple is doing something completely bonkers like, say, in Ventura, moving dyld around once already loaded https://t.co/nPixwwaV5I. Sigh. Fix still in progress.