b33f | 🇺🇦✊ @FuzzySec

意志 / Antiquarian @ IBM X-Force / Team 501 / Ex-TORE ⚔️🦅 / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs linktr.ee/fuzzysec Jumanji Joined April 2012

Tweets

10K
Followers

33K
Following

1K
Likes

15K

Nicolas Economou @NicoEconomou

a hour ago

[+] Exploit writing academy ready in Argentina: academy.binarygecko.com

0 5 6 313 0

Claude @claudeai

5 hours ago

Introducing Claude Sonnet 4.5—the best coding model in the world. It's the strongest model for building complex agents. It's the best model at using computers. And it shows substantial gains on tests of reasoning and math.

777 2K 13K 1.7M 2K

Download Image

Alex Plaskett @alexjplaskett

9 hours ago

Just published a small write-up of a vulnerability found in Tesla TCU which was useful to enable further research on the IVI! nccgroup.com/research-blog/…

1 6 18 2K 5

Download Image

DARKNAVY @DarkNavyOrg

a day ago

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.

8 172 741 89K 358

Download Video

Shreyas Penkar @streypaws

4 days ago

My writeup on CVE-2024-38399 (a Use-After-Free in KGSL driver), which was released in @Qualcomm Oct 2024 Bulletin as reported by Xiling Gong(@GXiling), covering the KGSL Fault Mechanism, the patch-fix, vulnerability analysis, kernel tracing and a plan to trigger it. Blog:…

1 33 108 9K 47

b33f | 🇺🇦✊ @FuzzySec

4 days ago

A lot of excellent tradecraft in these reports with mature toolkits and clearly working with very solid SOP’s

John Hultquist @JohnHultquist

5 days ago

A lot of excellent tradecraft in these reports with mature toolkits and clearly working with very solid SOP’s

6 125 369 92K 163

0 1 15 4K 5

Barack Obama @BarackObama

4 days ago

We have people in power making broad claims around certain drugs and autism that have been continuously disproven. The degree to which those comments can undermine public health, do harm to women who are pregnant, create anxiety for parents who do have children who are autistic –…

29K 39K 225K 17.5M 12K

Download Video

NCSC UK @NCSC

4 days ago

Today, the NCSC has published a new malware analysis report to help organisations detect and mitigate malicious targeting of certain Cisco devices🚨 See our latest advice and insights from our Chief Technical Officer👇 ncsc.gov.uk/news/persisten…

5 34 45 11K 9

Download Image

Justin Elze @HackingLZ

4 days ago

The thing I admire about this space is pentesters who abuse some cloud service/SaaS, whatever, and do read outs to their clients, saying "lolz we used X cloud service to hack you, and they don't care" followed by a number of those companies getting together putting pressure on X…

8 6 58 10K 7

Dominic Chell 👻 @domchell

4 days ago

This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌

MDSec @MDSecLabs

4 days ago

This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌

1 23 110 20K 38

Download Image

3 14 101 13K 18

DebugPrivilege @DebugPrivilege

6 days ago

New blog post: Laptop froze on hibernate, because an Intel driver bailed during power transition and left a power IRP hanging. This can be an interesting one for those that are interested in how I maneuver through a crash dump and how I think, etc. medium.com/@Debugger/hibe…

2 26 84 18K 44

b33f | 🇺🇦✊ @FuzzySec

6 days ago

Slowly getting through the BHEU selections. Really excited to see the great talks that have already been picked an just the last stretch of reviews to do 💪💪

0 1 9 3K 0

SinSinology @SinSinology

7 days ago

Spent the weekend teaching my "Basic .NET Exploitation workshop" at BSides Tirana (@BSidesTirana), and wow, what an experience! Massive shoutout to Rio (@0x09AL) & Paulina (@CakalliPaulina ) for organizing hands-down the best BSides I've ever been part of 💜🔥 Here are some of…

4 9 112 10K 17

Download Image

Andrey Konovalov @andreyknvl

3 weeks ago

Wrote a trigger for CVE-2025-38494/5 (an integer underflow in the HID subsystem) that leaks 64 KB of OOB memory over USB. Still works on Pixels and Ubuntus (but the bug is fixed in stable kernels). github.com/xairy/kernel-e…

4 71 453 45K 179

Download Image

hackyboiz @hackyboiz

a week ago

Hello! Today’s 1day1line is about CVE-2025-53770 (RCE) & CVE-2025-53771 (Auth bypass) in SharePoint — linked to earlier CVE-2025-49704 & 49706. These vulnerabilities affect on-premises Microsoft SharePoint. Check out the post! hackyboiz.github.io/2025/09/20/bek…

1 32 98 7K 45

b33f | 🇺🇦✊ @FuzzySec

a week ago

Whoever said you couldn't push a build pipeline at night on the weekend and go to sleep. You're chatting breeze bruv, pattern up ✅😌

0 0 5 2K 0

Merill Fernando @merill

a week ago

📖 From Dispensing Pills to Dismantling Cyber Threats: One Woman's Epic Pivot In 2009, @IAMERICAbooted was ordering drugs with shared passwords—fast-forward to 2022, and she's pen-testing Azure tenants like a boss. This week on Entra.Chat, Erica recounts her DEFCON…

10 29 143 32K 76

Download Image

Ken Gannon (伊藤剣) @Yogehi

2 weeks ago

I'm working on a new Android hacking course together with Mobile Hacking Lab It will review the current record holder of "most amount of bugs used in a single Pwn2own entry" For a limited time, you can pre-order the course for 50% off Check it out here: mobilehackinglab.com/course/advance…