valenok

PSTC

[Blacktop @blacktop__]

Uh oh 😬 (iOS 27.2 beta2)

[Lorenzo Franceschi-Bicchierai @lorenzofb]

~ Personal news ~

I left TechCrunch. I will now focus on finishing my book about Hacking Team and the history of government spyware.

After that, and in the meantime, I will be freelancing.

Contact me: [email protected] or Signal @ LorenzoFB.1337 ([phone])

[iSoftware Updates @iSWUpdates]

New in iOS 27.0:
• Updated Liquid Glass design with customization slider, and refined icons
• Chatbot style Siri AI and Siri app*
• More Apple Intelligence features**:
- Extend and Reframe in Photos
- Create Shortcuts bye describing them
- More Image Playground options
• Various performance improvements including 80% faster AirDrop transfers
• New and expanded child safety features

and more: https://t.co/UnmfzkCPlV

* Not available in the EU and China. In the EU it is available on macOS 27.
** Not available in China.

#iOS27

[matteyeux @matteyeux]

"Revisiting SecureROM Adventures".

Talk is about the SecureROM and an usbliter8 variant by iH8sn0w

https://t.co/n3WTOHRCL9

[Jachash @jachashx]

The 40-year-old iOS kernel bug I discovered on the DEFCON 34 main stage.

My demo crashed on stage, and after investigating I traced it to a mistyped ++ that goes back to 1985.

Can you spot the bug?

Full post:

https://t.co/e3vuomAJ8r

[ONE Jailbreak @onejailbreak_]

📣CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) by @ByteV0rtex

https://t.co/eCInGlTMRx

[Joseph Ravichandran @0xjprx]

I got the latest iOS and macOS 27 booting in Qemu (with SPTM!)

- Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported
- Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able
- Boots directly to root shell in seconds
- Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required
- SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs
- Automated setup; get running in just a few minutes
- Runs anywhere qemu runs... no ARM CPU required 😉

Try it here: https://t.co/PEydRXL25G

[Vladislav Shevchenko @destr4ctt]

Apparently, writeups are becoming a regular thing here :)

This time, added details and PoC for a regression in AppleM2ScalerCSCDriver that causes attacker supplied IOSurface KVA leak. Fixed in *OS 26.6:

https://t.co/vt8NobXpcS

[Varik @D4RK7ET]

New write-up with @GenericCoding on pois0nSword, our iOS 26.1 port of DarkSword: bypassing PAC to reach arbitrary native calls from a WebKit renderer R/W, by making dyld's own loader do the write.

https://t.co/pVJm0wtowR

#WebKit #JavaScriptCore #iOS #exploitdev

[0xor0ne @0xor0ne]

Exploiting a Linux kernel Stack UAF (GhostLock, CVE-2026-43499) (@nebusecurity)

https://t.co/dQMXI2vnSS

#infosec

[Duy Tran @khanhduytran0]

People say CVE-2026-43724 is unreachable on iOS because of _POSIX_SPAWN_RESLIDE. Think again. Test done on MIE-enabled device.
(Disclaimer: I can’t promise if anything useful may come out of this, need more research; thanks @Little_34306 for porting to iOS)

[0xor0ne @0xor0ne]

Exploiting a page UAF in Qualcomm AI Accelerator Linux Kernel Driver (qaic) (Lukas Maar)

https://t.co/sGJi5Y0YLF

#infosec

[Paradigm Shift @prdgmshift]

Great researchers deserve great swag.
This summer, we’re serving Hex on the Beach. ☀️🏖️
Happy summer to our team and the entire research community! 🌞

[es3n1n @es3n1n]

Today, we’re releasing rCTF v2, an open-source platform for hosting cybersecurity capture-the-flag competitions.

[Andreas Kling @awesomekling]

Linus is 100% right, and at this point we need to accept that software development is never going to be the same again.

[8kSec @8kSec]

This blog reverse-engineers how Apple's MIE works inside the iOS 26 kernel - hardware memory tagging that mitigates buffer overflows, UaF, and type confusion with near-zero overhead: https://t.co/16Ih0F6qqF
Three pillars: type-aware allocators, Enhanced MTE with synchronous faults, and SPTM hypervisor protection that guards tag storage even with a compromised kernel.
Follow @8kSec for more iOS kernel research.

[Binary Wizards @BinaryWizards]

Slides are out. Please grab them from here: https://t.co/G24BV6xBTD

[Kenan Sulayman @in19h]

The rax emulator now lives under the Hex-Rays brand https://t.co/QH5IL3i9ZO

[Blacktop @blacktop__]

High level diff of iOS 26.5 vs. iOS 27 beta1 🎉

https://t.co/2ERejoQFzC