candymate

Previously was in POSTECH-PLUS, now in KAIST hacking lab

[xvonfers @xvonfers]

👀
(CVE-2026-2649)[481074858][wasm][turboshaft]Wasm br_table operation Phi integer overflow(passing too many inputs).
https://t.co/v9TQ3GFwib
https://t.co/KkDjUirztm
https://t.co/9tPiiRe75r

PoC:
./d8 --no-liftoff
https://t.co/WAbjqK04Y0

Reported by JunYoung Park(@siwu_network)

[INSU YUN @insu_yun]

Everyone wants to fuzz complex optimizations of WebAssembly compilers, but most approaches are simply considering grammars and types. Why can't we fuzz optimizations directly? We will share how we can do if we have systematically written optimization rules in S&P 2025 :)

[candymate @siwu_network]

Just killed a Pixel 7 Pro... Not sure what I did wrong here... I'm very sad..😭

[Project Zero Bugs @ProjectZeroBugs]

Driving forward in Android drivers https://t.co/mcQ6zaRDgw

[POSTECH PLUS @POSTECH_PLUS]

Cold Fusion got 6th place at DEF CON CTF Qualifier 2024 💙

Cold Fusion이 DEF CON CTF Qualifier 2024에서 6위를 차지했습니다! 😘

*PLUS is part of the "Cold Fusion", which is a collaboration team from South Korea 🇰🇷

[TyphoonCon🌪️ @typhooncon]

🌪️”From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit's Journey to
v8CTF Glory” will be presented by Haein Lee and @insu_yun at #TyphoonCon24!

Buy your tickets at: https://t.co/D064iuXh6C

[TrendAI Zero Day Initiative @thezdi]

Confirmed!! Seunghyun Lee (@0x10n) of KAIST Hacking Lab used a UAF to RCE in the renderer on both #Micosoft Edge and #Google Chrome. He earns $85,000 and 9 Master of Pwn points. That also puts us over $1,000,000 for the event! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Boom! Seunghyun Lee (@0x10n) of KAIST Hacking Lab was able to successfully demonstrate his exploit of #Google Chrome. He's off to the disclosure call to provide us all the details before we bring in the Google team for disclosure. #Pwn2Own #P2OVancouver

[Aanjhan Ranganathan @tuxmaniac]

Big change coming to @USENIXSecurity starting 2025. "Starting with USENIX Security '25, we will be decoupling paper publication from paper presentation, so not all papers will have full-length talk presentations at the conference." https://t.co/nsfpHh8Sl1

[c0m0r1 @c0m0r1]

Our POC2023 slide is now available on our website
#POC2023
https://t.co/2ztQpWUDYZ

[Juliano Rizzo @julianor]

CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
https://t.co/tew1zqkvNw

[Dohyun Lee @l33d0hyun]

This was exploited in the wild and is a Type Confusion vulnerability in Safari DFG JIT (CVE-2023-32439). This vulnerability causes type confusion because `EnumeratorNextUpdateIndexAndMode` and `HasIndexedProperty` are different DFG Nodes but share the same heap location kind.

[INSU YUN @insu_yun]

I am happy to announce that "BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software" is accepted to Usenix Security '23. This work is related to static analysis to find logical bugs in baseband firmware.

[LaurieWired @lauriewired]

This is Huge. A UCLA student may have just found the first feasible Indistinguishability Obfuscation (iO) scheme, based on well-understood cryptographic theories.

In other words, imagine an obfuscator/packer that is nearly as difficult to crack as AES.

The research validates the creation of an (iO) scheme for all polynomial-size circuits (i.e. computer programs of a reasonable size)

Malware and DRM could start to get really, really interesting in the next few years.

https://t.co/ce5nThKT4I

[TrendAI Zero Day Initiative @thezdi]

CVE-2023-28231: The Trend Micro Research Team takes a in depth look at this recently patched RCE bug in the #Microsoft #Windows DHCPv6 service. Their write-up includes root cause analysis and detection guidance: Read the details at https://t.co/2Pm6bMoc1b

[SinSinology @SinSinology]

Elevation of privileges from Everyone through Avast Sandbox to System AmPPL (CVE-2021-45335, CVE-2021-45336 & CVE-2021-45337) by @Denis_Skvortcov

https://t.co/LrM5F05dPv

[GitHub Security Lab @GHSecurityLab]

GHSL-2023-023: Type confusion in the Chrome renderer - CVE-2023-1214 https://t.co/Rs5nn1S0WN

[TrendAI Zero Day Initiative @thezdi]

VM escapes in #Parallels Desktop are a common target for many researchers. @renorobertr details some local privilege escalation via setuid root binaries in his latest blog. His write-up includes root cause analysis of CVE-2023-27322, -27324, & -27325. https://t.co/LkZFgsYHpD

[Michele Campa @s1ckb017]

I am really happy to announce that my research on adobe sandbox escape exploiting a windows CVE has been published on the Exodus Intelligence's blog

https://t.co/BFtXsTpWOj