b0ring

Learning & Research

[Chaofan Shou @Fried_rice]

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -

Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.

Check https://t.co/d0SZSf1KqF

[matteyeux @matteyeux]

I was able to recover one of the implants of the Coruna iOS Exploit Kit

[b0ring @dnpushme]

Lucky Number `MSRC Case 101010`

[b0ring @dnpushme]

Is this written by AI?

[blackorbird @blackorbird]

#GlassCage zero-click attack IOS
Once triggered, the chain escalates to full root access via a combination of WebKit RCE (CVE-2025-24201) and Core Media kernel exploitation (CVE-2025-24085).#IOCs
https://t.co/44okBv1Vbv

[b0ring @dnpushme]

@HaifeiLi 已经一个月没开工了😂

[b0ring @dnpushme]

Thanks, @msftsecresponse ! Thrilled to be on the leaderboard with everyone! 😊

[Microsoft Security Response Center @msftsecresponse]

Shoutout to the other incredible researchers who made this quarter’s leaderboard. Your work and partnership is deeply appreciated! @dhiralpatel94 @dnpushme @HaifeiLi @sim0nsecurity @KeyZ3r0 @xtytia0922 @longgregc @hpy_insu @nevul37 @nvk0x @ashketchum_16 @niraj1mahajan @fatnass1f1ras @thisis0xczar @martin_jw @AnupamAs01 @scwuaptx @_dirkjan @ImanGurung13 @guilhermesgi

[b0ring @dnpushme]

@wmessmer I couldn't find any place to update to 2504, even the update log still shows 2502 (https://t.co/weqNNkQuu9). Can you tell me where I can download it?

[b0ring @dnpushme]

@xvonfers Should be "MiraclePtr: PROTECTED""

[1377 High-yield Nukes @buptsb]

TF is too mature for bug hunting, so we introduced a new surface for u guys.

[b0ring @dnpushme]

@goabout21 mug

[b0ring @dnpushme]

It looks really good!

[b0ring @dnpushme]

Super nice hoodie, for sure!

[b0ring @dnpushme]

Let’s compete again next year

[Google VRP (Google Bug Hunters) @GoogleVRP]

📯 Announcing the top 20 Chrome VRP researchers for 2024: https://t.co/nTqXlYvevs 📯
Congratulations to everyone on the list! Many thanks and much gratitude to our entire Chrome VRP researcher community and helping us make Chrome Browser & Chromium more secure for all users! 🎊

[b0ring @dnpushme]

@R00tkitSMM Excellent work! thanks for sharing

[b0ring @dnpushme]

😇😇

[Nicolas Krassas @Dinosn]

Sophos Used Custom Implants to Surveil Chinese Hackers Targeting Firewall Zero-Days https://t.co/kTuBY8doj6

[b0ring @dnpushme]

@l33d0hyun 😂

[Joe Desimone @dez_]

https://t.co/3UqBHBFERj "Desktop Window Manager local privilege escalation.docx"

[b0ring @dnpushme]

@ret2happy 😂

[b0ring @dnpushme]

🍈🍈🍈🍈🍈🍈

[3aturn @sat0rn3]

·Severity: Important
·Bounty: None

Is this "mitigation" a new method to reduce vulnerabilities?

@msftsecresponse

[b0ring @dnpushme]

@R00tkitSMM Has anyone actually seen Apple paying a bounty for the ImageIO vulnerability? I haven't seen it😂