The trainings' content is unique and exclusive to #offensivecon26, so don’t miss out! NEW: Get your training + conference ticket bundle and secure a conference ticket before the conference ticket shop opens! Tickets: buff.ly/z8YNgoY Don't worry, the conference ticket shop will open…at some point

I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation.... I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides). Fantastic conference as usual, big thanks to the PoC Crew!

Interested in #fuzzing the V8 heap sbx? Check out the paper from @nbars.bsky.social et. al. accepted at @acm_ccs 2025. arxiv.org/abs/2509.07757

Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection

We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security boundary between us...

arxiv.org

Excited to present my research at OffensiveCon on WebGPU security! Learn about finding memory corruptions in usermode graphics drivers via shader compiler fuzzing; including bugs in Mali, Adreno, DirectX and Mesa.

OffensiveCon@offensivecon.bsky.social · last yr.

2025 agenda is out! www.offensivecon.org/agenda/2025....