@theevilbit great work!
and a comment: not excluding apple and anonymous reporters in the 'top reporters' chart would be more informative for statistics.
Your bad humor about the article cannot justify such a big-scale genocide and every single person took part in it - including the *cool-vibed* DFSec researchers. Shame on every single of them.
Nice finding, but bro, you ought to publish a write-up, not a drama novel. 80% of the whole text tries to convince the reader how dramatic this is. C'mon bro, I was reading a memory corruption writeup and my emotions are unnecessarily triggered.
https://t.co/kAEoXjyOBp
iMessage EXR. zero click. heap overflow before the banner finishes.
CVE-2026-86869. libAppleEXR sizes the buffer for 3 channels. 12 bytes.
CompressedInterleave4 writes 4. 16 bytes. every pixel.
three of those four bytes come from the file.
BlastDoor never decodes EXR.
Spotlight and the photo indexer do, later, with SDR hardcoded on.
no tap. same ImageIO path on iPhone, iPad, and Mac.
fixed in the 27 releases. older fleet still sits on it.
credit: Niels Hofmans / ironPeak
https://t.co/viusjHmr47
#iOS #ExploitDev #InfoSec
I asked GPT-6 Astra to mine a diamond in Minecraft using computer use, then went to sleep.
Woke up to a diamond in its inventory ๐คฏ๐คฏ๐คฏ
Setup in the replies.
@deepsec_cc@WHW_0x455 > To prevent weaponization or malicious use, the post-exploitation phase will not be discussed.
Thanks for good intention but I think this won't change anything in the AI age ๐