👨🏻💻 Did you know that it’s possible to perform RCE in Internet Explorer via clickjacking? Igor Sak-Sakovsky's (@Psych0tr1a) new article will explain how!
https://t.co/HfVLnuzwAT
"Bounty awards are determined and paid based on what is demonstrated in the report, not on claims made in the report but not proven with evidence or proof of concept." - Apple Security Team
The POC:
Reverse engineering Apple’s silent security fixes, by @blacktop__
We grabbed the latest iOS update, and diffed it with ipsw. The diff reveals at least two security-relevant changes that were shipped quietly.
https://t.co/mUt11Qy7ly
Woke up to getting acknowledged by Apple!
Apple just pushed an update to fix a vulnerability I reported on Music app.
https://t.co/bqfzPoKk1g
#bugbounty#CyberSecurity#appsec
If you missed the talk at @1ns0mn1h4ck , our latest blog post is now available for you to explore.
In this post, researchers @Hacker_Chai and @SachaKozma detail their journey to a 1-click RCE exploit on the Samsung S25 phone.
Check it out here: https://t.co/x7mZcFCSR3
Google Threat Intelligence Group has identified DarkSword, a new iOS exploit chain leveraging six zero-day vulnerabilities.
Multiple threat actors are actively using it to deploy malware payloads. Update your devices or enable Lockdown Mode.
👉 https://t.co/9XzL9nogwL