Step right up! 📢 We’re serving up a Windows kernel exploit that never goes stale. 🍿 Forget patches, this forever-day is popping off and it's here to stay. Grab a bucket and watch the show! elastic.co/security-labs/…

Were you ever frustrated with your AI model for refusing finding vulnerabilities for you?
What if I told you that you could still use it to find vulnerabilities, automatically?
Welcome to Guardrail-based Vulnerability Discovery (GbVD)!
crowdstrike.com/en-us/blog/whe…

5.5 dropped me to 4.8. Fine, but even 4.8 won’t touch it with a 10 ft pole.

-----BEGIN RSA PRIVATE KEY-----
4
-----END RSA PRIVATE KEY-----

Last week some of South Korea's biggest banks were hit by a cyberattack. Thanks to a report from CrowdStrike tonight, we now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek ok 4.6, and Claude Code.

Red Dead Redemption 2 is running at 30+ FPS on an iPhone 18 Pro.

No PC, no streaming, fully on-device via Madeira.

x86-64 → arm64 with FEX
Windows → iOS syscalls with Wine
DX12 → Metal with the madeira-d3d12 runtime

What AAA game should we get running next?

Fil-C on Windows.

⚒️ BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive

⚠ Trusted Remediation Primitives with Undocumented Internals.
🔓 15+ years. Unchanged. Unblockable.
🤔 What if an attacker learned its language? We did.

👇
research.checkpoint.com/2026/btr-refor…

Very interesting. Is Windows finally getting Hardened Runtime?

Everyone's trying to make CPUs faster.

I’m trying to make them worse.

New project: CPU deoptimization.
Searching for the slowest possible machine instructions

x86 single instruction record:
198,002,498,236 cycles, 62 seconds

The assembly hall of shame: github.com/xoreaxeaxeax/a…

I saw Claude use a clever trick in bash and thought, “that’s nice, I should remember that.” And then I realised because of Claude, I never have to. I feel sad.

VibeOS is both hilarious and awesome. youtu.be/z3pV6FHvcgM

okay, now tell them that their vulnerability doesn't qualify for a bounty, but then patch it in the next release.

My last submission to MSRC was for a Device Guard bypass.  I learned my lesson from prior drawn-out submissions, so I included a 90 day window this time.  MSRC responded saying that it met their bar and they would fix it, but asked me to withhold disclosure well past 90 days because they needed a few extra months to fix it.  I agreed on the condition that they issue a CVE, to which they agreed. 

After the agreed-upon Patch Tuesday a few months later, I couldn’t find any mention in the CVE list, so I reached out to MSRC to inquire. It turns out - they changed their minds, deciding it did not meet their bar for servicing, yet they patched it anyway.  Since it didn’t meet the bar, they didn’t issue a CVE. MSRC strung me along for a few extra months to keep me quiet, then broke their word.

They could have at least bought me dinner first.

The interaction left such a bad taste in my mouth that I don’t really feel like interacting with them again. That’s why I didn’t publish any exploits/tools last year. #MeTooMSRC

Ok, confession time: I use agentic coding *all the time* and *every day*. And have been doing so for many months.

I am *terrified* of skill deterioration on my side. I see the studies, I can feel it myself. The agents make me much more productive, but I feel I need to force...

There’s something ominous about the speed with which the entire world has marched to require identification on platforms and, as I expected, begin the process of banning anonymous VPNs.

Modern DRAM is based on a brilliant design from IBM.

But, we're still paying for a latency penalty that's existed since the 60s!

In this video, I'm introducing my research project (Tailslayer) that immensely reduces p99.99 latency on traditional RAM!

By implementing a hedged vantage of (undocumented!) channel scrambling offsets, I've gotten as much as 15x reductions in tail latency.

The technique works across Intel, AMD, Graviton, DDR4, DDR5, x86, ARM, you name it.

Check out the C++ lib I wrote, watch the video, and try it yourself!

Patch Diff to SYSTEM - using LLMs to exploit a LPE vuln on Windows. More importantly, some thoughts on model capabilities the implications on our security industry elastic.co/security-labs/…

🔺NEW: iPhone and iPad are now the first and only generally-available devices to meet the exacting security requirements for handling classified NATO information. apple.com/newsroom/2026/…