In a video highlight from Day 1 of #Pwn2Own Berlin, @orange_8361 of DEVCORE Research Team (@d3vc0r3) takes on Microsoft Edge with a sandbox escape! He earns $175,000 and 17.5 Master of Pwn points. https://t.co/woZKoSTweK
From inside Iran:
"This is probably my last message.
The regime is going door to door, confiscating satelite dishes and Starlink. Just like in the early 2000s.
Be our voice."
Crosswalk buttons 🚦 in several cities on the Peninsula appear to have been hacked - playing prank messages using voices that sound a lot like Mark Zuckerberg and Elon Musk.
This is one of several in Redwood City @KTVU
Just built an MCP for Ghidra.
Now basically any LLM (Claude, Gemini, local...) can Reverse Engineer malware for you. With the right prompting, it automates a *ton* of tedious tasks.
One-shot markups of entire binaries with just a click.
Open source, on Github now.
Critical vulnerabilities doesn't have to be complex or have a CVE - @deepseek_ai publicly exposed their internal ClickHouse database to the world, without any authentication at all, and leaked sensitive data.
No one is safe from security mistakes, follow along to learn more 🧵
Last night, I dug into the security of RedNote.
RedNote is the Chinese social media app that people have flocked to because of the potential @tiktok_us ban.
I found multiple vulns within a few hours.