Tesi1a

[Archi Bald @ArchiDoSecurity]

@pedrib1337 I can’t at the moment - waiting for the disclosure timeline to go away

My report collided with these

https://t.co/BK5W6T0jOE waiting 976d

https://t.co/AuQYwJv8wq waiting 828d

https://t.co/OwKWgrx7tD waiting 811d

https://t.co/zf7wkOFCFi waiting 100d

[Project Zero Bugs @ProjectZeroBugs]

Root Cause Analyses for 0-day In-the-Wild Exploits https://t.co/glHOGu7fKU

[Tesi1a @leytang]

@chengjia4574 tql

[LiveOverflow 🔴 @LiveOverflow]

I'm really excited about this video. It has been in the making for a long time. It's a video with @NedWilliamson about his SockPuppet vulnerability in the XNU (iOS/Mac) Kernel and was used for jailbreaking.

Haxember #10
https://t.co/khViaVl6KM

[Tesi1a @leytang]

@CodeColorist tql

[Project Zero Bugs @ProjectZeroBugs]

lastpass: bypassing do_popupregister() leaks credentials from previous site https://t.co/Stl216y2kF

[Azeria @Fox0x01]

I’ve decided to write up one of the iOS exploits in a new series, walking through each step of the underlying exploit development process.

Hope these post will be more accessible for ppl trying to learn exploit dev and understand how exploit devs think.

https://t.co/vtvfasQlie

[lilang wu @Lilang_Wu]

The slides of my BH topic, help you to find your own bugs.
https://t.co/z9iFPN8Atg

[Andrey Konovalov @andreyknvl]

Slides for my "Coverage-guided USB Fuzzing with Syzkaller" talk @offensive_con https://t.co/2trxROys9k

[TechCrunch @TechCrunch]

One of the world's most popular Android apps, ES File Explorer, can put user data at risk, a researcher warns. https://t.co/N2P53dVDpx by @zackwhittaker

[Mobile Security @mobilesecurity_]

Hacking North Korea’s Android
#MobileSecurity #AndroidSecurity by @hackerfantastic
SLIDES: https://t.co/ieU6T3izm3
GitHub Repo: https://t.co/EmhVTjnwpo

[Mobile Security @mobilesecurity_]

Debugging Android app with Dwarf GUI
#MobileSecurity #AndroidSecurity @fridadotre by @iGio90
https://t.co/1R0YNcyyxN

[Daily CyberSecurity @Daily_CyberSec]

kernelpop: kernel privilege escalation enumeration and exploitation framework https://t.co/ZFltdMORTQ #opensource #infosec #Security #pentest

[360 Threat Intelligence Center @360CoreSec]

New attacks were discovered against a Russian polyclinic, exploiting a Flash #0day vulnerability (CVE-2018-15982). The vul has been reported to Adobe and the patch was released already. #PoisonNeedles https://t.co/DnuzdAir61

[ANY.RUN @anyrun_app]

New Flash 0-Day #exploit.
Here the PoC of CVE-2018-15982 (2/57)

Thanks to @rimpq
https://t.co/2EeB82LNPf

https://t.co/tNPZzRhmDj

[Michael.Gorelik @smgoreli]

CVE-2018-15982 PoC (Excel pop-up calculator and swf to be played in IE) https://t.co/sgc4oMfKI1 just modified the end result of the cmd.exe

[Scott Bauer @ScottyBauer1]

The last 3 public security bugs I will have for awhile were released today:
Bluetooth Heap info disclosure: CVE-2018-9566
Bluetooth RCE: CVE-2018-9555
NFC RCE: CVE-2018-9558
https://t.co/IVFwLVgFF5:
https://t.co/ojRXHFxpoV

https://t.co/OMfw5rFpl8

https://t.co/gLarrCPPZX

[Mobile Security @mobilesecurity_]

Hidden Gems in APKs
#MobileSecurity #AndroidSecurity
#HITB2018DXB [SLIDES] by Marc Schönefeld
https://t.co/YLt3tNy6e4

[Jann Horn - [email protected] @tehjh]

https://t.co/bCZ6XseLAg Pixel 2 (walleye) PoC for the Linux kernel mremap TLB flushing bug; overwrites a code page in the filesystem page cache, leading to app->zygote privesc

[Mobile Security @mobilesecurity_]

Use-after-free vulnerability in privileged Android service
#MobileSecurity #AndroidSecurity by @tamir_zb
https://t.co/oSzMAPyHOI