Tris

Bytes smuggler

[Vivek | Cybersecurity @VivekIntel]

📱 Android Security & Reverse Engineering YouTube Curriculum

This community-curated curriculum brings together hundreds of hours of high-quality Android security research from conferences such as Black Hat, DEF CON, OffensiveCon, CCC, USENIX, ShmooCon, and BSides. Topics cover Android exploitation, reverse engineering, malware analysis, kernel and GPU attacks, baseband security, Bluetooth vulnerabilities, WebView exploitation, mobile forensics, hardware hacking, and supply chain security.

Whether you're interested in Android bug hunting, mobile malware research, exploit development, or reverse engineering, this collection provides a structured roadmap from application-level vulnerabilities to advanced hardware and kernel exploitation techniques.

🔗 https://t.co/QsjLk7qcRS

#AndroidSecurity #ReverseEngineering #MobileSecurity #MalwareAnalysis #BugBounty

[Calif @calif_io]

Apple Internals: Swift in the Kernel

https://t.co/HsQj7Ug1FY

[Paradigm Shift @prdgmshift]

A new research blog deserves a proper first post.

A SecureROM bug seemed appropriate.

Allow us to introduce you to #usbliter8.

https://t.co/m7si1XGhvU

[Victor Fresk0 @hacefresko]

After 6 months of extensive research, I have finally published a new blog post! It describes the journey from breaking into my router using a couple of command injections to finding and exploiting a remote heap overflow in a MediaTek kernel driver :D

https://t.co/FeOrZm0fPa

[matteyeux @matteyeux]

A new PCC firmware release for CloudOS 26.4b1 includes vphone600 files, making it possible to run a virtual iPhone on iOS 26.4 beta 1.

[Tris @thuri0]

@Urunzii @maktejah_ E46s and classic bmw groups

[8kSec @8kSec]

We’ve reviewed hundreds of submissions for 8kSec Battlegrounds.
But we haven’t reviewed yours yet 🧐
8kSec Battlegrounds offers free mobile and AI security labs designed to challenge your skills across different difficulty levels.
‣ Hands-on scenarios.
‣ Progressive challenges.
‣ Certificate upon successful completion.
Ready to test your skills?
https://t.co/LKsEH5m8Ld
Keep learning with @8kSec. Follow us for more security resources!

[Chai Yichen @Hacker_Chai]

Our second blog post is out here: https://t.co/mUjTMFpVqN ! We managed to install arbitrary APKs on the Samsung Galaxy S25 from an app without install permissions. For this, @SachaKozma did most of the work, but it was great looking into Samsung's cloud gaming component with him

[Blacktop @blacktop__]

I'm back home! and you know what THAT means, another `ipsw` release. This one has fixes to the sandbox decompiler

https://t.co/QFzT2AkO7v

[Tris @thuri0]

@LaikipiaRanches This is a good place to be. What are the prices in this place.

[Tris @thuri0]

@4osp3l Congratulations in advance and all success in your endeavour.

[Alexandre Becholey @0xabe_io]

Chapter 2 of the ARM hypervisor series is out.
We go over taking ownership of the page tables, memory configuration, copying the current tables, verifying that everything is squared away before committing to the switch.
https://t.co/NZwETYsnQn

[offensivecon @offensive_con]

Our 2026 agenda is live!
🔗 https://t.co/obnIOwZQPl

[Ryan Naraine @ryanaraine]

Here's our interview w Mark Dowd. Enjoy! @mdowd @craiu
@juanandres_gs

https://t.co/vPO3DFTtrb

[kqx @kqx_io]

less than three days left until the start of TRX CTF!
get ready for:
- two kernel pwn challenges
- browser shenanigans
- a *real* x86 challenge
- reversing a kernel module
make sure to register and fight for a spot in the finals in Italy!
https://t.co/knB1TkmHcf

[Brandon Falk @gamozolabs]

My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke

[Alexandre Becholey @0xabe_io]

Chapter 1 of the ARM hypervisor series is out.
Topics:
* allocate runtime memory
* read the .efi from disk via UEFI protocols
* parse the PE/COFF headers to call the entry point
* fix up what the loader would have done.

https://t.co/BPDURlIrPn

[Tris @thuri0]

@Urunzii They are 18s.

[Tris @thuri0]

@MartinAlpine Great journey of patience. It will be worthy it