deven

witnessing the magic (preagi)! 🪄 ~ opinions and posts are my own.

[deven @_deven___]

Apple Security Updates Released Today (Nov 9)

iOS 27.2.1 and iPadOS 27.2.1 - https://t.co/zahT1GPUxs

macOS Golden Gate 27.2.1 - https://t.co/f4DudTl6FE

[deven @_deven___]

@christianvsauer @i0n1c @iliaa @OpenAI @calif_io “/goal”

[deven @_deven___]

@grok @RexQuantumAI @OpenAI @calif_io @i0n1c https://t.co/0MNhZOqZsF

[Stefan Esser @i0n1c]

Did you recently get a warning by Apple that you are targeted by mercenary spyware? Remember to always use Lockdown mode and OTA update to the latest iOS 🤡

[deven @_deven___]

hands down the best talk I’ve ever seen. the slides are public now.

- Calif got permission from @openai to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is possible in ~3 hours (with the right prompting, skills, and primitives)
- the world is changing faster than expected

I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️

thank you so much for the presentation! @pwnlambda @brucedang @calif_io

[lambda @pwnlambda]

Finally back home! Slides from "0clicks in an AI World," the talk @brucedang and I gave at @unpromptedconf, are now up:
https://t.co/Jaqwn6Haal

[deven @_deven___]

@grok @RexQuantumAI @OpenAI iOS 27.2 impacted by @calif_io and @i0n1c chains

[deven @_deven___]

@grok @RexQuantumAI @OpenAI Incorrect

[deven @_deven___]

@grok @RexQuantumAI @OpenAI incorrect

[Calif @calif_io]

Lockdown Mode helps, until it doesn't.

[deven @_deven___]

@i0n1c Esser is the OG

[deven @_deven___]

Apple’s security advisories now available in JSON (CSAF 2.1). enables automation + integration with security workflows for customers worldwide

Huge shout-out to Apple Product Security and https://t.co/443Sdw8EUg for making this a reality 🎉

iOS/iPadOS 27.2: https://t.co/XfnEQkHDqL

[deven @_deven___]

@moyix @pr0me they did confirm it is astra-cyber and OAI gave permission to mention the (unreleased) model name

[Mateusz Krzywicki @krzywix]

Astra-cyber mentioned by @pwnlambda on [un]prompted writing 0-click/1-click exploits in 3 hours from generic prompt. Buckle up for a ride.

[deven @_deven___]

such fascinating timeline we’re living in (Oct 2026)

“/goal” + “3 hours later” - FORCEDENTRY++

incredible work @calif_io @pwnlambda @brucedang

[deven @_deven___]

@natashenka mind blending & incredibly exciting 😊

[Stefan Esser @i0n1c]

We cracked the new hardware based UFP mitigation in the iPhone Duo on release day (UFP = unavailable for purchase)

[Csaba Fitzl @theevilbit]

🍎🐛 I got Claude making this, maybe it's useful for others as well.

Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations.

https://t.co/aSv0PZpQj3

[deven @_deven___]

Apple Security updates today...

263 CVEs in macOS and 163 CVEs in iOS/iPadOS

That's a lot!!

[deven @_deven___]

@rauchg @S1r1u5_ are there signs that it’s happening?

[deven @_deven___]

Today’s iOS 27 and macOS 27 updates patch 247 CVEs

🍎 https://t.co/YWAUsDeu9H

[deven @_deven___]

Released today: iOS 26.6.1 and iPadOS 26.6.1

📲 https://t.co/UjOxhru08H

[deven @_deven___]

Apple released macOS Tahoe 26.6.1 today (August 6 2026)

https://t.co/R39omztdZ3

[deven @_deven___]

Apple Security Updates released today (July 27 2026) https://t.co/YWAUsDeu9H

iOS 26.6 / iPadOS 26.6 - 87 CVEs
https://t.co/TsZjhVwdUv

macOS Tahoe 26.6 - 155 CVEs
https://t.co/ihXT78shYa

📲