Behnam

vulnerability researcher | full-time learner

[Stefan Esser @i0n1c]

Brotli gives you code execution in WebKit.Networking. From there it is just a bit sandbox escaping and stuff. The videos show iPhone 18 Pro, iPad M5 and MacBook M5 so all devices with MTE.

[Natalie Silvanovich @natashenka]

Have you always wondered how we got to a world where memory corruption does so much harm?

Listen to “The Bug We Let Live” podcast.

https://t.co/CJm3ZXPam0

I’ll be on a future episode.

[Behnam @bdsecure]

@pamoutaf You nailed it! 👏🏻🔥

[Calif @calif_io]

Lockdown Mode helps, until it doesn't.

[lambda @pwnlambda]

Also saw everyone is losing their minds over the iOS kernel r/w. I’m home now and aiming to release the exploit + writeup within the next week or so. Thank you for your attention to this matter (and all the “wen eta”s) 🙏

[deven @_deven___]

hands down the best talk I’ve ever seen. the slides are public now.

- Calif got permission from @openai to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is possible in ~3 hours (with the right prompting, skills, and primitives)
- the world is changing faster than expected

I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️

thank you so much for the presentation! @pwnlambda @brucedang @calif_io

[Blacktop @blacktop__]

Slides for my OffensiveCON - Japan '26 presentation 🇯🇵

https://t.co/JfW2zxwLGG

[chompie @chompie1337]

Video of my @UnpromptedAU & Bsides Canberra talks out now

I built an autonomous N-Day exploit pipeline for the Windows kernel w/ mix of deterministic and AI-led stages. Results were comparable to what Anthropic achieved with Mythos using a much less powerful model.

[Calif @calif_io]

Apple Watch, Pyongyang special version, by @i0n1c

[Calif @calif_io]

CC @pwnlambda

[Calif @calif_io]

php2shell - A tale of two PHP remote vulnerabilities:

https://t.co/KEUVez9Zdl

[Hexacon @hexacon_fr]

Tonight's event is canceled due to the protests taking place just outside the bar. We are really sorry to end the event this way, but it's safer for everyone

[TrendAI Zero Day Initiative @thezdi]

We’re happy to return as a sponsor for @hexacon_fr. ZDI’s @MaliciousInput and @hosselot are in attendance and are always up for a good chat (if you can find them)

[Calif @calif_io]

Demos we presented at Hexacon in Paris today. Everything will be released in due time.

1/ Signal 1-click

[Ryan Naraine @ryanaraine]

🔥 The first Three Buddy Problem from Offensive AI Con is live! Audio only.

IBM X-Force’s Valentina Palmiotti (@chompie1337) walks us through the autonomous Windows kernel exploit pipeline she built on older Claude models, which landed within a hair of Mythos for about $180 a chain.

Plus, the Pwn2Own bug Claude called unexploitable, why her Pwn2Own bugs still sit unpatched, disappearing exploit techniques, the dread of being a defender, and how Phrack found its way back into print.

https://t.co/eMpCVWr3cy

[Ken Gannon (伊藤 剣) @Yogehi]

BWA HA HA HA HA

Samsung Pwned
Pixel tomorrow :)

[Natalie Silvanovich @natashenka]

All vendors should have a plan for rapid remediation in the case of active exploitation.

Here’s some emergency fix strategies we’ve seen over the years:

https://t.co/2hSqpoQbDp

[Csaba Fitzl @theevilbit]

🍎🐛 I got Claude making this, maybe it's useful for others as well.

Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations.

https://t.co/aSv0PZpQj3

[Hex-Rays SA @HexRaysSA]

The official IDA MCP Server is here. It's free, open source, and works with any LLM.

Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time.

𝚞𝚟𝚡 𝚒𝚍𝚊-𝚑𝚌𝚕𝚒 𝚖𝚌𝚙 𝚒𝚗𝚜𝚝𝚊𝚕𝚕

https://t.co/jXPiF6Wyvk
(copy-paste: uvx ida-hcli mcp install)

[starlabs @starlabs_sg]

To find a $113,337 Linux kernel bug may be regarded as a fortune. To have your Cisco RCE silently patched the next day looks like the universe is trolling you specifically.

Two blog posts today. 🧵