reverseame

RME-DisCo research group from University of Zaragoza. Special interest on software and systems security. Link to our Telegram channel:

[reverseame @reverseame]

New post: a five-phase, MITRE ATT&CK-aligned workflow for mem forensics, from evidence preservation to binary analysis. We also flag 4 issues that bias mem evidence: paging, demand paging, smearing, and binary transforms #ICDF2C25 https://t.co/7JBeDcN6zP https://t.co/MDIUkqIPVA

[reverseame @reverseame]

New on the blog: MARISSA reverse-engineers network protocol formats straight from PCAPs: no specs, no delimiters. Will be presented at @IEEEEUROSP 2026, come and say hi! https://t.co/VE5qaJxIM2 tool: https://t.co/JcorcdkeW1

[reverseame @reverseame]

New blog post! The simpler, the stealthier: we benchmarked 4 adversarial DGA models. The 2 simplest evade ML detectors >75% of the time and train in under 2s. Open-source: https://t.co/RxDgmgGMDI, blog post: https://t.co/829KoSrpog #DGA #MachineLearning #CyberSecurity #DIMVA2026

[reverseame @reverseame]

After the Takedown: Excavating Abuse Infrastructure with DNS Sinkholes #DNSSinkholes #AbuseInfrastructure #PassiveDNS #TakedownAnalysis #Badbox20 https://t.co/B4eFOrFtse

[reverseame @reverseame]

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK #FacebookAccountTakeover #InsecureRandomNumber #DOMXSS #MobileAppVulnerability #IframeExploitation https://t.co/2s10z5oJJY

[reverseame @reverseame]

How I Used an Agent to Hunt Vulns #Blazelight #TerminalUI #WebNavigation #GuestPrompt #DigitalPortfolio https://t.co/DbQrOlUiQD

[reverseame @reverseame]

Leaking Meta FXAuth Token leading to 2 click Account Takeover #FXAuthLeak #AccountTakeover #RedirectFlaw #MetaSecurity #BugBounty https://t.co/L8PlovOFmc

[reverseame @reverseame]

StackWarp vulnerability #StackWarp #SEVSNP #StackManipulation #StackEngineBug #PrivilegeEscalation https://t.co/2XzQwUW1aQ

[reverseame @reverseame]

Instagram account takeover via Meta Pixel script abuse #InstagramHack #MetaPixelAbuse #CrossWindowMessaging #OAuthCodeTheft #BugBounty https://t.co/anxqG6Wyrj

[reverseame @reverseame]

Multiple cross-site leaks disclosing Facebook users in third-party websites #XSLVulnerability #MetaSecurity #UserIdentification #PrivacyThreat #BugBountyProgram https://t.co/SVDQtSVXi0

[reverseame @reverseame]

WinBoat: Drive by Client RCE + Sandbox escape. #WinBoat #RemoteCodeExecution #SandboxEscape #DriveByAttack #UnauthenticatedAPI https://t.co/U803IR3DN4

[reverseame @reverseame]

The ServiceNow AI Vulnerability: What Went Wrong and How to Secure Your AI Agents #ServiceNowAIHack #AIAgentSecurity #LegacyAISecurity #SupplyChainRisk #AIIdentity https://t.co/NtWpuJGa44

[reverseame @reverseame]

CVE-2026-20965: Cymulate Research Labs Discovers Token Validation Flaw that Leads to Tenant-Wide RCE in Azure Windows Admin Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation https://t.co/DZGwfQQwLP

[reverseame @reverseame]

Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data #MicrosoftCopilot #RepromptAttack #DataTheft #SingleClickHack #AIVulnerability https://t.co/O48JSWHOgI

[reverseame @reverseame]

Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC #DroneHacking #FirmwareDumping #NANDFlash #ECCBruteforce #IoTResearch https://t.co/gfR4NJ8nrA

[reverseame @reverseame]

Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents https://t.co/pZ7hHis2HS

[reverseame @reverseame]

CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEM https://t.co/hluWZ3to7U

[reverseame @reverseame]

Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense #CybersecurityAI #GameTheory #AIAttack #AIDefense #SecurityStrategy https://t.co/yrHZCiwKTK

[reverseame @reverseame]

Grok’s image edits spark sexualised deepfakes and regulator probes worldwide https://t.co/1rrV3NSni8

[reverseame @reverseame]

WTF Are Abliterated Models? Uncensored LLMs Explained https://t.co/5dt1psGv8c