Jay Turla

Two vulnerabilities in Advantech were found by our team during the SPIRITCYBER-24 IoT / OT Hackathon in Singapore: CVE-2025-48466 and CVE-2025-48470. Our Poc for CVE-2025-48470: github.com/shipcod3/CVE-2… Advisory: csa.gov.sg/alerts-and-adv…

Move from basic fuzzing to a high-performance workflow. Fuzzing 1001 ost2.fyi/Fuzz1001 bridges the gap between theory and practical research. Master AFL++, PCGUARD, LTO, and ASAN using real CVEs from Xpdf and tcpdump.

Bypassing eBPF evasion in state of the art Linux rootkits using Hardware NMIs (and getting banned for it) - Releasing SPiCa v2.0 [Rust/eBPF] github.com/0xKirisame/SPi…

I'm excited to announce my latest blog post: Boot ROM security on Silicon Macs! 🥾 This article marks the start of a 4-part series, detailing each stage of the boot process. My next post will be on the low level bootloader (LLB). oliviagallucci.com/boot-rom-secur…

PS5 Hypervisor exploit by flatz gist.github.com/flatz/620ddda6…

This will allow my ps5linux to run on FW < 5.00 (patched on 5.00).

For anyone dealing with RASP protected apps, frida-strace is now your first step. Trace the syscalls, find what the app checks, hook those specific functions, bypass. No more guessing. Frida 17.8.0+, kernel 6.1+ required. #Frida #MobileSecurity #AppSec

Here’s how you can build a Bluetooth scanner. It’s super easy to do and can be used to track nearby devices hackers-arise.com/digital-forens… @three_cube @_aircorridor #privacy

Yay, I was awarded a $10,000 bounty! #TogetherWeHitHarder #Bugbountytips #BugBounty

Actually you can flash firmware on a android tablet (

Announcing #Pwn2Own Berlin 2026! We've got 10 categories for targets, including an expanded #AI target list. We have 4 AI categories - including coding agents (looking at you #Claude). More than $1,000,000 in cash & prizes available. Read the details at zerodayinitiative.com/blog/2026/3/11…

Reverse engineering Claude's CVE-2026-2796 exploit red.anthropic.com/2026/exploit/

Open Source CLI Tools for Flash Allwinner Firmware to Devices. Support Windows, Linux, macOS github.com/YuzukiTsuru/Op…

Jailbreaking the F-35 Fighter Jet schneier.com/blog/archives/…

@GodfatherOrwa @Bugcrowd Haha has something to do with a WAF lol

@shipcod3 @Bugcrowd Congratulations mate, so interested to know what the bug 😂

I earned $300 for my submission on @bugcrowd #ItTakesACrowd

Starting today, we’re opening the Flipper One source code repositories step by step. The first repo is now public: MCU firmware: github.com/flipperdevices… Flipper One uses a dual-processor architecture: * Low-Power MCU (Raspberry Pi RP2350) Buttons, LCD display, touchpad, and LEDs are physically connected to the MCU. It also manages battery and power control. * High-Performance Linux CPU (Rockchip RK3576) This processor runs Linux, and all high-level peripherals are connected to it: USB, HDMI, M.2, Wi-Fi, Ethernet, and audio.

I ported Linux to the PS5 and turned it into a Steam Machine. Running GTA 5 Enhanced with Ray Tracing. 🤯

Your Openclaw / Agent can now control Drones via Mavlink on Dimensional. Programming physical space can now be done via natural language. Query: “Follow the next white car that comes through the intersection” Repo dropping soon stay tuned. Reply for early access.

From UV light to CPU register tracing: 8 years of tackling STM32 readout protection, quickly summarized. The latest? STM32-TraceRip achieves 100% flash recovery on STM32G0: no glitching, no decapping, just reading processor state during normal execution. Full state of the art on our community: 👇 community.penthertz.com/t/breaking-stm…