Haki 31337

Vulnerability Researcher

[SSD Secure Disclosure @SecuriTeam_SSD]

Want to learn more about Chrome exploitation?

In our latest article, we break down two critical Android GPU driver vulnerabilities that enabled Chrome sandbox escape from a compromised renderer and were used in full device exploit chains. Read the full technical analysis here: https://t.co/3kIHg9f9xm

[Caleb Gross @noperator]

1/ Agentic LLMs can automate vuln detection. Very exciting, but doesn't address the hardest part (imo) of vuln research: prioritization. Can we reliably explore the search space and separate signal from noise? I wrote a paper (and OSS tool) to solve this. https://t.co/HDzm4SvSX1

[Synacktiv @Synacktiv]

At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller.
Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit.

🔍 Full technical write-up 👇
https://t.co/R0E5Uqql1E

[kmkz @kmkz_security]

CVE-2025-5419 - Google Chrome V8 Engine Out-of-Bounds Read/Write Vulnerability -@ThePracticalDev
https://t.co/BlbiOS23cY

[Jonathan Bar Or (JBO) 🇮🇱🇺🇸🇺🇦 @yo_yo_yo_jbo]

I found a use-after-free in CPython!
In this blogpost I also discuss interesting patterns such as refcount changes during callbacks.
Read more here: https://t.co/a1WhJBJnyc

[Alex Matrosov @matrosov]

.@xorpse has been building program analysis tools his entire career, and we’ve been iterating our @binarly_io vision on Fugue by applying a lot of industry practical knowledge on RE of complex software and vulnerability REsearch.

Fugue is fully open btw:
https://t.co/OQDAu8dIkm

[BINARLY🔬 @binarly_io]

✨AI-generated code is accelerating development, but it's also introducing unmaintainable, vulnerable dependencies.

Today, we introduce VulHunt: A new framework for semantic binary vulnerability detection.

https://t.co/mn7lo4Soj1

[Sean Heelan @seanhn]

Blog post: On the Coming Industrialisation of Exploit Generation with LLMs https://t.co/aK4pysY1wD

TL;DR: I ran an experiment with GPT-5.2 and Opus 4.5 based agents to generate exploits for a zeroday QuickJS bug. They're pretty good at it.

Code: https://t.co/47xHRObhRy

[Gabriel Prostitis @___prosti]

Let's begin the new year with some V8 exploitation!
Learn how to turn a broken CanonicalEquality check into arbitrary Wasm type confusion in this ASIS CTF Finals writeup by @Erge!

Read it here: https://t.co/OMofRaV0l5

[quarkslab @quarkslab]

A decade is an eternity in security. 🛡️
Ten years ago, we released the Clang Hardening Cheat Sheet. Today, the landscape has changed.
@0xTRIKKSS & @bcreusillet break down the latest mitigations to keep your code secure.

🔗Read the update: https://t.co/ZVC2h5yNMw

[Florian Hansemann @CyberWarship]

''Exploiting Heroes of Might and Magic V''

#infosec #pentest #redteam #blueteam
https://t.co/JG9bAP57FP

[0xor0ne @0xor0ne]

Getting arbitrary read/write in QEMU by exploiting iret/call far instructions

https://t.co/wfHSaIiDsz

#infosec

[Alexandre Borges @ale_sp_brazil]

From Coverage to Causes: Data-Centric Fuzzing for JavaScript Engines:

(paper) https://t.co/feTDgsJhB2
(project) https://t.co/z5tqTrEJ6Z

#fuzzing #vulnerability #javascript #exploitation #llm

[PixiePoint Security @pixiepointsec]

What better way to get into x'mas vibes than @flyingpassword dropping a BFS n-day (CVE-2025-29970) blog post! (Santa would approve :)) Merry X-mas!
https://t.co/Skmuu5rsU1

[starlabs @starlabs_sg]

Slides from @n0psledbyte, @st424204 & @Peterpan980927 at @codeblue_jp talk are also up:

“Dancing with Exynos Coprocessor: Pwning Samsung for fun and ‘profit’”
https://t.co/FaeX6SkoFc

Shout-out to @rainbowpigeon_ for contributing a lot in this research during his internship.

[Linux Kernel Security @linkersec]

Déjà Vu in Linux io_uring

Talk by @u1f383 about exploiting CVE-2025-21836 — a race condition that leads to a use-after-free in the io_uring subsystem.

Slides: https://t.co/IsW8Nx8kyA
Video: https://t.co/kZ21botEkB

[Alex Plaskett @alexjplaskett]

yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) by @_mccaulay

https://t.co/oViXnmPczV

[kmkz @kmkz_security]

Diffing 7-Zip for CVE-2025-11001
https://t.co/mz5XjU1TtJ

[Zhuowei Zhang @zhuowei]

I wrote a blog post on CVE-2025-48593, an issue patched in Android's November Security Bulletin that only affected devices which act as Bluetooth headphones, such as smartwatches, smart glasses, and cars.
I examined the patch and wrote a proof-of-concept:
https://t.co/bBhoMUGXn6

[Alex Plaskett @alexjplaskett]

Pwn2Own 2025: Pwning Lexmark’s Postscript Processor by @boredpentester

https://t.co/Q446vJGh2J