Mickey

Low hanging fruit maven. Cluster Head. Tweets are my own.

[0xor0ne @0xor0ne]

Using Claude for porting an exploit for an eventpoll vulnerability to Android (@Shiftreduce)

https://t.co/lDBjbt7Pzp

#infosec #llm

[Mickey @HackingThings]

When you think you have experienced the worst a disclosure process can offer but then @intigriti comes along and surprises you

[BSides Portland @BSidesPDX]

⏳ CFP DEADLINE: tonight!

Got a talk, breakdown, or project you want to share with the community? Don't wait until the final hour. First-time and experienced speakers are equally welcome. Submit your proposal here: https://t.co/0tth3syI2e #InfoSec #CyberSecurity #CFP

[Thaís (@[email protected]) @barbieauglend]

You’ve got security research, tooling, findings, or a project you want to share? Submit it to @BSidesPDX 2026: https://t.co/zGIab8UkG1

CFP closes Sept 25 — we’re at day-2. I’m looking forward to seeing the cool work and ideas y’all bring to the community. Submit yours now!

[Mickey @HackingThings]

I've create an iOS app called Signal Watch Guard that listens for nearby Bluetooth devices and alerts you when one on your watchlist is nearby.
Get alerted for nearby smart glasses, Taser devices or any other device you want to add a rule for.
https://t.co/dI7BZfXSJY

[BSides Portland @BSidesPDX]

⏳ CFP DEADLINE: September 25th!

Got a talk, breakdown, or project you want to share with the community? Don't wait until the final hour. First-time and experienced speakers are equally welcome.

Submit your proposal here: https://t.co/0tth3syI2e

#InfoSec #CyberSecurity #CFP

[Yuriy Bulygin @c7zero]

Agents taking over GPUs, BMCs, DPUs in the data centers and we are in for a rough ride…

[Andreas @Bin4ryDigit]

My boy @olivier_boschko just published the awesome and massive research on @UnitreeRobotics named #UniBLEed. He and friends showed a novel way to exploit the Unitree G1 via BLE! AGAIN a wormable BLE hack on a Unitree G1, the same class of exploits as @d0tslash and my #UniPwn which was the first exploit on a Humanoid, also via BLE and wormable. But this blog article and reserach goes much deeper, read it now!
https://t.co/ssvrxvQrJM

[Andreas @Bin4ryDigit]

We published our Mammotion security research.
Unauthenticated admin takeover, ~337k users enumerable, fleet, wide device data leaks and account takeover that let an attacker drive someone else’s mower from the official app including camera.

Writeup:
https://t.co/8hkzhIkJHi
Research by @n0tsa, @Bin4ryDigit, @d0tslash

Mammotion l4wnm0w3r sometimes you have to mow someone else’s lawn.

[Mickey @HackingThings]

@devfromjokela Thanks! Yeah, seeing how well the built in stack works IRL and how useful it can be

[Mickey @HackingThings]

Got an alert while walking the dog, cars drove past us but none were cop cars 🤔

[Mickey @HackingThings]

@devfromjokela It’s a side project i’ve been working on for iOS 😅

[Mickey @HackingThings]

Dishwasher

[cr3ghost @cr3ghost]

Chad Everdox appreciation post.

Nick ‘Everdox’ Peterson (@nickeverdox) is genuinely one of the most underrated reverse engineers and Windows researchers in the industry.

A lot of people know Riot Vanguard.

Far fewer know the depth of Windows internals, kernel, anti-debugging, hypervisor and reverse engineering work behind one of the engineers who helped build and advance it.

His old blog is an absolute gold mine. Some of this research is more than a decade old and still covers concepts people are learning and rediscovering today.

Old but gold:

Easy anti-trace with SYSCALL:
https://t.co/cWpMDBIHzX

Debugger detection with GetProcessIoCounters:
https://t.co/NlQUlZQyVO

BTF + LBR anti-tracing:
https://t.co/ugj2T4VdPL

Paged virtual memory as an anti-debug / anti-dumping primitive:
https://t.co/R8fVpHinQC

Kernel/user shared page kernel-debugger detection:
https://t.co/SOgN6v0AHt

RTL_USER_PROCESS_PARAMETERS anti-debugging:
https://t.co/YggdAETOTW

Full archive:
https://t.co/Qbg8ScFxIt

Then there is InfinityHook, another Everdox contribution that became a reference point for Windows kernel instrumentation:

https://t.co/iSEJpIvye4

And his own article on https://t.co/SLm7Vlyd93:

PatchGuard: Detection of Hypervisor Based Introspection [P1]
https://t.co/pJNWLBE2Gu

If you are interested in reverse engineering, Windows internals, Windows kernel research, anti-debugging, anti-cheat engineering, hypervisor internals or obscure tricks buried deep inside the OS, his work is invaluable.

Also bookmark the wider https://t.co/SLm7Vlyd93 archive:
https://t.co/oGY1wYHPFw

That site is multi-author and contains excellent work from @daaximus , @aidankhoury across reverse engineering, kernel internals, virtualization and EPT.

People spend a lot of time chasing the newest research.

Sometimes the real gold has been sitting online for 10+ years.

#ReverseEngineering #WindowsInternals #Infosec

[BSides Portland @BSidesPDX]

BSidesPDX 2026 is back! 🌲👾
Mark your calendar for October 23–24 Portland

Here’s your checklist:
🎟️ Tickets: On sale now!
🎙️ CFP: Open until September 25th!
🙋 Volunteers: We need you to help!

Details & links below 👇
https://t.co/B3OhB7F09L

#InfoSec #CyberSecurity #Portland

[dragosr @dragosr]

A reminder that this is the last week for submissions to CanSecWest, in Vancouver on Sept 30 / Oct 1. We are also adding courses on reverse engineering with LLMs, specifically Ghidra, from Kara Nance, author of the No Starch Ghidra Book. She'll also be presenting her optical drone tracking work.

In a similar vein: so you've been asked to set up an agentic vuln discovery and security auditing pipeline? Come learn how to build one in Erlend Oftedal's two-day workshop, which we're just opening registration for. Check out our other technology leading courses and find conference and course registration at https://t.co/5twIAMSjy0

Keynote speakers: Bruce Schneier and Katie Moussouris. And Sergey Bratus is going to tell us about automated micro-patching.

I'm also looking for one more contributor for the panel "Who Guards the Guardians?" on safety classifiers, guardrails, and their effect on security research. That promises to be an interesting discussion. :-) Paper announcements will be showing up on the site as we proceed.

Image prompt: calculate geopositioning of CanSecWest 2026 in this image from Vancouver building profile extrapolation and give me a ground level wire-mesh from an overlaid targeting reticle, please

[Mari0n @pinkflawd]

I'll be at CanSecWest this year, teaching my Advanced Linux Malware Reverse Engineering with new chapters on MIPS and ARM implants, and updates to Go, Rust, and C++ chapters 🤓

[CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_]

Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.

Now you can. Enjoy!

https://t.co/WmBlShAnLr

[Paul S. Conyngham @paul_conyngham]

My dog Rosie was given months to live. Chemo and immunotherapy failed

I used chatgpt + computational genomics to design a personalised mRNA cancer vaccine for her tumour. Several of her tumours shrank

Today we launch Gamgee (YC S26): personalised mRNA cancer vaccines for dogs

[atlas 0f d00m @at1as]

At Long Last! RfCat Release: v3.0.0

https://t.co/L5kdGiriQh

Gone are the remnants of Python2, and finally pyside6.

Thank you all for your patience. The last few years have been somewhat insane for me.

PLEASE test this out (not updating PYPI for a few days)
@michaelossmann