Analysis and exploitation of GhostLock (CVE-2026-43499) nebusec.ai/research/ion... nebusec.ai/research/ion... #infosec

Mercusys MB115-4G router: reverse engineering and vulnerability research rotcee.github.io/posts/analyz... #infosec

Hardening BLE Against Software Compromise (ACM WiSec Paper '26) dl.acm.org/doi/pdf/10.1... #infosec #Bluetooth

Using LLMs to generate syzkaller descriptions for GPU user-space libraries (e.g., CUDA, Vulkan) to indirectly fuzz GPU kernel drivers (paper) www.cs.ucr.edu/%7Ezhiyunq/p... #infosec

TP-LINK TAPO security cameras: reverse engineering and exploitation labs.taszk.io/articles/pos... #infosec

Analysis of the Xiaomi's MJA1 proprietary secure chip (hardware identification, I2C sniffing, flash dumping, and firmware reverse engineering) blog.quarkslab.com/black-box-pr... Credits Mengsi Wu #infosec

3 part series on fuzzing the GPS service daemon (psd) using LibAFL Part 1: xchglabs.com/blog/fuzzing... Part 2: xchglabs.com/blog/fuzzing... Part 3: xchglabs.com/blog/fuzzing... #infosec

Taxonomy of Android software protection techniques + APKiD analysis of ~2.5M apps blog.quarkslab.com/practical-an... #infosec

Exploiting a page Use-After-Free in Qualcomm's AI Accelerator Linux Kernel Driver (qaic) lukasmaar.github.io/posts/qaic-p... Credits Lukas Maar #infosec

Single-stepping attack on TrustZone-M via interrupt-latency leakage (Usenix paper) www.usenix.org/system/files... #infosec

DirtyFree: Linux kernel Data-Oriented Programming ()DOP exploitation via the arbitrary free primitive (paper) leeyoochan.github.io/assets/pdf/D... #Linux #infosec

FreeBSD 14.x kernel local privilege escalation via setcred(2) fatgid.io #infosec

DirtyCBC: Local root shell on Linux using a page-cache poisoning primitive in AF_RXRPC’s RxGK path delphoslabs.com/blog/3614237... #infosec

Cisco Catalyst SD-WAN Controller auth bypass in vdaemon DTLS via spoofed vHub device type (CVE-2026-20182) www.rapid7.com/blog/post/ve... #infosec

HDD firmware hacking: dumping/analyzing/modifying the drive firmware and debugging via JTAG icode4.coffee?p=1465 Credits Ryan Miceli #infosec

HDD Firmware Hacking Part 1

Do you know how a hard drive works? Come find out with me as I dump, reverse engineer, and modify the firmware on various HDDs and SSDs.

icode4.coffee

Static Devirtualization of Themida back.engineering/blog/09/05/2... #infosec

Reverse engineering and exploiting TP-LINK TAPO security cameras labs.taszk.io/articles/pos... #infosec

TAPOcalypse Now: Exploiting TP-Link Smart Devices From Anywhere

Exploiting TP-Link Home Security Smart Cameras

labs.taszk.io

Trailmark: parse source code into a Claude queryable call graph Blog post: blog.trailofbits.com/2026/04/23/t... Repository: github.com/trailofbits/... #infosec #llm

Autonomous vulnerability research with Claude Code + MCP blog.zsec.uk/bullyingllms/ #infosec #llm

TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities (paper, '26) d-we.me/papers/treve... #infosec

Analysis of CVE-2025-4802: glibc 2.27-2.38 fails to sanitize LD_LIBRARY_PATH before dlopen() in statically linked SUID binaries, allowing arbitrary library loading and LPE. allelesecurity.com/libc-vuln-an... Infosec

Software-only timing side-channel leaking mm_struct without a memory-safety bug, pivoting via cross-cache reuse to msg_msg/pipe_buffer, effective even on MTE. lukasmaar.github.io/posts/heap-k... Credits: Lukas Maar #infosec

Using Claude Code for secure code review specterops.io/blog/2026/03... #infosec #llm

Leveling Up Secure Code Reviews with Claude Code - SpecterOps

Claud Code is a force multiplier when performing secure code reviews during an assessment. In this post, we discuss how to leverage Claude Code to produce digestible output that helps up better unders...

specterops.io

Reverse engineer and get full root access on the TP-Link Tapo C200 (2025) quentinkaiser.be/security/202... #infosec

Rooting the TP-Link Tapo C200 Rev.5

Let’s explore ways to mod a Tapo C200 Rev.5 firmware in order to gain root access to a running device.

quentinkaiser.be

Collection of paper related to LLM for vulnerability research/detection github.com/huhusmang/Aw... #infosec

GitHub - huhusmang/Awesome-LLMs-for-Vulnerability-Detection: Awesome Large Language Models for Vulnerability Detection

Awesome Large Language Models for Vulnerability Detection - huhusmang/Awesome-LLMs-for-Vulnerability-Detection

github.com

Collection of resources for getting started with IoT/embedded devices vulnerability research github.com/IamAlch3mist... #infosec

GitHub - IamAlch3mist/Awesome-Embedded-Systems-Vulnerability-Research: Resources to getting started vulnerability research on IoT/embedded devices.

Resources to getting started vulnerability research on IoT/embedded devices. - IamAlch3mist/Awesome-Embedded-Systems-Vulnerability-Research

github.com

Exploiting a use-after-free vulnerability in the Linux kernel’s packet socket subsystem, caused by a race condition between packet_set_ring() and packet_notifier() (CVE-2025-38617) blog.calif.io/p/a-race-wit... #infosec

A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets

A step-by-step guide to exploiting a 20-year-old bug in the Linux kernel to achieve full privilege escalation and container escape, plus a cool bug-hunting heuristic.

blog.calif.io

Bypassing Linux kernel CR Pinning to execute shellcode by placing a KProbe in the native_write_cr4 instruction gap. blog.zolutal.io/two-shot-ker... #infosec

Excellent blog post on reverse engineering and exploiting a Xiaomi C400 Smart Camera labs.taszk.io/articles/pos... Research by Botond Hartmann #infosec

Now You See mi: Now You're Pwned

Exploiting and jailbreaking Xiaomi Home Security Smart Cameras

labs.taszk.io

Exploiting CVE-2022-0995 (Linux kernel OOB write in watch_queue) using the PageJack technique to create a page level UAF and overwrite struct file to gain LPE. blog.quarkslab.com/pagejack-in-... Credits Jean Vincent #infosec