AuditHub

AuditHub is the collaborative auditing platform transforming how security teams secure their protocols. Built by security experts from @VeridiseInc

[AuditHub @AuditHubDev]

Zero-click means the victim does nothing and the attacker still wins.

When the only defense is patching after exploitation, the window is already lost.

[Dark Web Informer @DarkWebInformer]

🚨 Google confirms Pixel phones targeted in zero-click zero-day attacks

Google has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under "limited, targeted exploitation."
⠀
The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.
⠀
Most importantly, exploitation requires no interaction from the victim.

No malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.
⠀
Google has not disclosed:

• Who carried out the attacks
• How many Pixel owners were targeted
• How the victims were selected
• What tools or spyware may have been deployed
⠀
CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.
⠀
Google says Pixel devices with the September 5, 2026 security patch level or later are protected.

Pixel owners should update their devices immediately.

[AuditHub @AuditHubDev]

@martinetlee An allowlist that checks the shape of a call but not its arguments is not an allowlist.

caller_supplied pool address means the attacker picks the destination.

[AuditHub @AuditHubDev]

@PrimordialAA Curious how much the output control depends on parameter choices vs. the sponge structure itself?

[Kostas Ferles @KFerles]

Read it here: https://t.co/HdAPk24MMM

[AuditHub @AuditHubDev]

Your last audit has a date on it

But do you know how many commits have shipped since then ?

[AuditHub @AuditHubDev]

The detector behind this asks one question. Does anything constrain the value that decides the call, anywhere on its path to that call?

A require elsewhere in the function does not answer it.

New Pre-Mortem from @KFerles

[AuditHub @AuditHubDev]

The detector behind this asks one question. Does anything constrain the value that decides the call, anywhere on its path to that call?

A require elsewhere in the function does not answer it.

New Pre-Mortem from @KFerles

[Kostas Ferles @KFerles]

An interesting "pre-mortem" this week. See how running continuous checks on your code can help you catch bugs even in the cases where you deem an external audit is not necessary.

[AuditHub @AuditHubDev]

@joranhonig the fuzzing parallel is good

once the baseline rises, the edge moves from finding shallow bugs to proving the absence of whole bug classes

that's where the next status symbol lives

[AuditHub @AuditHubDev]

"AI has been a ‘net negative’ for crypto"

AI is making attackers faster. Your audit cadence hasn't changed.

Quarterly reviews can't outpace automated exploit generation.

[Veridise @VeridiseInc]

A function that forwards caller-supplied calldata into a low-level call can perform any operation the target's interface exposes.

Nobody designed that set. No auditor reviewed it.

New Auditor's Take from @FormallyJon covers the class.

https://t.co/JQPRc9kmVF

[AuditHub @AuditHubDev]

@thedaofund Let's make it together!

[Veridise @VeridiseInc]

Formal verification tells you a property fails. It doesn't tell you why.

@ShankaraPailoo2 on turning a counterexample into a root cause.

[AuditHub @AuditHubDev]

@storming0x every security dollar looks like a cost until the exploit turns it into a ransom negotiation

prevention is priced in minutes when recovery is priced in weeks & reputation

[AuditHub @AuditHubDev]

@hrkrshnn @popular_12345 @ethereum Nice work!

[AuditHub @AuditHubDev]

@Zac_Aztec AI agents writing Noir circuits means more builders and more underconstrained signals slipping through.

[AuditHub @AuditHubDev]

@pashov +1

[AuditHub @AuditHubDev]

@storming0x The sad reality is the incentive math.

A published bounty of even 5% would've cost a fraction of 600 BTC, and it would've been agreed before the funds were ever at risk.

[AuditHub @AuditHubDev]

@MerlinEgalite The TAM half is right. The "you don't need humans" half is where teams get burned.

AI expands coverage and speed.

It does not replace the judgment that decides whether an underconstrained circuit is exploitable or benign.

[AuditHub @AuditHubDev]

@nateholiday @Microsoft @NVIDIAAI if ai compliance runs on zkproofs, then the audit surface moves from the model to the circuit!

every constraint gap becomes a silent way to prove a false claim

[AuditHub @AuditHubDev]

@KFerles: A defender has to find every vulnerability. An attacker needs one.

AI just made finding that one cheaper. Point-in-time audits cannot keep pace with that. Exploits climbed in the first half of this year.

Continuous validation is the only way defenders catch up.