hungtt28

Independent bug hunter

[kqx @kqx_io]

Pwning V8CTF with a 0day in Chrome thanks to Phi untagging.

Read here: https://t.co/dFDPRFnGLM

[Toan Pham @__suto]

I’ve tried various agent pipelines, and here is one of them. It found five type-confusion bugs in V8 Wasm: three under non-default flags and two in DrumBrake/MS Edge.
The repo includes all the bugs in detail, along with a README file that explains how the pipeline works, the prompts used, and many of the genomes it generated.
Since the README is enough to let Claude vibe-code it, I won’t upload my messy and embarrassing code.
Have fun :)
https://t.co/N6zbZmzW8K

[Paolo Stagno (VoidSec) @Void_Sec]

I originally prepared this bug for Pwn2Own Berlin. A few days before the contest, a CVE got assigned. So, here is my technical analysis and exploitation strategy for CVE-2026-40369: a 12-byte kernel increment, exploitable both as an LPE and SBX.
https://t.co/agxyuR2AjE

[Ori Nimron @orinimron123]

@M4x_1997 4/4:
Last but not least CVE-2026-40369 - Windows Kernel Arbitrary Increment primitive reachable from any browser sandbox renderer process

This one was rejected from Pwn2Own and closed anyway yesterday :(

My exploit is here - blogpost will be soon:
https://t.co/Qqpi7Zo4Gi

[stratan @5tratan]

What The Claude: Browser Edition, episode 2.

This time: Bug 2024918.

A phi node, SpiderMonkey's JIT pipeline, Wasm GC scalar replacement, escape analysis, and one wrong equality check.

Let’s dive in.

https://t.co/3pf1TKRvcd

[Jack Ren @bjrjk]

A carefully structured, tiered root cause analysis for CVE-2025-43529 (JSC UAF). Spent quite some time refining the structure to make the reasoning explicit and readable. Shoutout to @jir4vv1t for his detailed analysis and exploit. https://t.co/nGiwxIv2aM

[jir4vv1t @jir4vv1t]

iOS 26.1 Safari StoreBarrierInsertionPhase missing Upsilon escape to uaf proof-of-concept
https://t.co/bO7OKTt5E3

[littlelailo @littlelailo]

Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :)

https://t.co/DWld4SWgf6

[starlabs @starlabs_sg]

Our newest team member @streypaws just dropped his first blog post!
He peered into CVE-2026-0899, from patch to arbitrary r/w primitives

No, it is not April Fool's joke from us
https://t.co/fuHUFhLDOx

[SpecterOps @SpecterOps]

Stop asking LLMs to “find vulns.” Start using them to understand code.

@Sw4mp_f0x walks through using Claude Code as a force multiplier in app assessments - faster analysis, fewer false positives, better outcomes.

Check it out: https://t.co/BpMnOGBMv7

[Mr. OS @ksg93rd]

Reverse engineering Claude's CVE-2026-2796 exploit

https://t.co/V8TvrOGAqn

[Dmitry Vyukov @dvyukov]

syzkaller/syzbot now has AI agentic framework for kernel bug fix generation, bug assessment, security triage, POC generation, etc:
https://t.co/MO6sET6UkG
Includes set of tools to build kernels, navigate/edit source, test reproducers, etc.
Contributions/research are welcome.

[Ben Visness @its_bvisness]

Read the full article here:

https://t.co/WBQwkQwb7x

[Security Bug Aggregator @BugsAggregator]

[452605804][reward: $20000] V8 Sandbox Bypass: Wasm streaming compilation cache confusion via "double streaming"
https://t.co/THNpxFh70C

[Security Bug Aggregator @BugsAggregator]

[454485895][reward: $50000] Incorrect Optimization of ArrayConstructor by Maglev Leads to Creation of Malformed JSArray Objects
https://t.co/e8zk4O7EFX

[Boris Cherny @bcherny]

I'm Boris and I created Claude Code. I wanted to quickly share a few tips for using Claude Code, sourced directly from the Claude Code team. The way the team uses Claude is different than how I use it. Remember: there is no one right way to use Claude Code -- everyones' setup is different. You should experiment to see what works for you!

[Security Bug Aggregator @BugsAggregator]

[450328966] V8: Type Confusion in LoadSuperIC
https://t.co/9Sr0sf3Rzc

[Security Bug Aggregator @BugsAggregator]

[451355210][reward: $20000] V8 Sandbox Bypass: AAW/PC control via OOB builtin in SharedFunctionInfo
https://t.co/Hqg030RT9Q

[Dan Guido @dguido]

.@trailofbits released our first batch of Claude Skills. Official announcement coming later.
https://t.co/vI4amorZrc