hands down the best talk I’ve ever seen. the slides are public now.
- Calif got permission from @OpenAI to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is ith the right prompting, skills, and primitives)
- the world is changing faster than expected
I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️
thank you so much for the presentation! @pwnlambda @brucedang @calif_io
- Calif got permission from @OpenAI to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is ith the right prompting, skills, and primitives)
- the world is changing faster than expected
I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️
thank you so much for the presentation! @pwnlambda @brucedang @calif_io
Finally back home! Slides from "0clicks in an AI World," the talk @brucedang and I gave at @unpromptedconf, are now up:
github.com/pwnlambda/talk…
5
43
488
32,890
Apple’s security advisories now available in JSON (CSAF 2.1). enables automation + integration with security workflows for customers worldwide
Huge shout-out to Apple Product Security and support.apple.com for making this a reality 🎉
iOS/iPadOS 27.2: support.apple.com/149230
Huge shout-out to Apple Product Security and support.apple.com for making this a reality 🎉
iOS/iPadOS 27.2: support.apple.com/149230
1
5
43
3,522
such fascinating timeline we’re living in (Oct 2026)
“/goal” + “3 hours later” - FORCEDENTRY++
incredible work @calif_io @pwnlambda @brucedang
“/goal” + “3 hours later” - FORCEDENTRY++
incredible work @calif_io @pwnlambda @brucedang
6
27
302
46,443
deven retweeted
We cracked the new hardware based UFP mitigation in the iPhone Duo on release day (UFP = unavailable for purchase)
CC @pwnlambda
20
69
720
65,277
deven retweeted
🍎🐛 I got Claude making this, maybe it's useful for others as well.
Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations.
apple-cve.com
Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations.
apple-cve.com
14
55
297
25,907
Apple Security Updates released today (July 27 2026) support.apple.com/en-us/100100
iOS 26.6 / iPadOS 26.6 - 87 CVEs
support.apple.com/en-us/128066
macOS Tahoe 26.6 - 155 CVEs
support.apple.com/en-us/128067
📲
iOS 26.6 / iPadOS 26.6 - 87 CVEs
support.apple.com/en-us/128066
macOS Tahoe 26.6 - 155 CVEs
support.apple.com/en-us/128067
📲
0
1
18
1,490
Apple is pushing security fixes ahead of schedule as AI shrinks the time threat actors need to weaponize known vulnerabilities reuters.com/business/apple…
iOS 26.5.2 and iPadOS 26.5.2 (support.apple.com/en-us/127594)
37 new CVEs 👀 📲
iOS 26.5.2 and iPadOS 26.5.2 (support.apple.com/en-us/127594)
37 new CVEs 👀 📲
0
2
10
805
📲 Released today: “About the security content of iOS 26.5 and iPadOS 26.5”
support.apple.com/en-us/127110
support.apple.com/en-us/127110
0
0
3
380
deven retweeted
We evaluated an early version of Claude Mythos Preview for risk assessment during a limited window in March 2026. We estimated a 50%-time-horizon of at least 16hrs (95% CI 8.5hrs to 55hrs) on our task suite, at the upper end of what we can measure without new tasks.
65
234
2,052
992,108
deven retweeted
🔺NEW: iPhone and iPad are now the first and only generally-available devices to meet the exacting security requirements for handling classified NATO information. apple.com/newsroom/2026/…
18
93
342
48,159
Today - About the security content of iOS 26.3 and iPadOS 26.3 (Feb 11 2026)
support.apple.com/en-us/126346
support.apple.com/en-us/126346
0
0
2
463
“A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research”
security.apple.com/blog/apple-sec…
security.apple.com/blog/apple-sec…
1
1
16
876