Ossama

Excited to share our research on Process Parameter Poisoning with Max Hirschberger! We detail a novel process injection technique using parameters as an attack surface & released ⁠p3-loader⁠ (PoC). sensepost.com/blog/2026/proc… github.com/Orange-Cyberde… #Malware #WindowsIntetnals

FIFA :)

+ Weekend!!!! “I’ll finally fix my sleep schedule” - That irresistible binary waiting in IDA - World Cup = Sleep debt++.

bl4ck4rch cooking 🧑‍🍳:)

0x3lk.github.io/posts/xsskerne… a high quality blog post from @0x3lk about @ToulouseHacking's 2026 most infamous reverse challenge. Worth reading if you love kernel, drivers and reverse.

> be Zuckerberg > needs AI everywhere (apparently) > lays off a bunch of employees > replaces with AI > fast forward > AI is dog shit > AI tricked into stealing accounts > try to fix > fail like 5 times > product now leaking CEOs PII AI truly is the future, wow

NEW: Uber is reportedly capping employee use of AI vibe-coding tools at $1,500 per month after blowing through its AI budget.

@C2IRIS I used Ada at university in safety-critical programming courses, where we implemented basic safeguards for aeronautical systems.

@0x3lk I like Ada

What’s the most obscure programming language you’ve ever used?

VirtualQuery in the IAT : Hi darling

Themida turns a few lines of code into thousands of VM handler instructions. Completely unreadable. back engineering built a static devirtualizer that lifts it all to IR, resolves the control flow, and recovers the original logic. The before/after in the repo is genuinely shocking. Works on pretty much any VM obfuscator, not just Themida. Blog: back.engineering/blog/09/05/202… Devirt output: github.com/backengineerin… Author: @BackEngineerLab #ReverseEngineering #InfoSec #Malware

Who said GPUs are just for gaming? Guess they’ve never heard of VRAM shellcode spraying xD Plan tonight : Read OpenCL Doc :)

Haha i can’t handle all this drama on MSRC

Time to move to Entra Cloud Sync oofhours.com/2026/05/29/tim…

Chat, I don't want to be that guy, but I think Microsoft has really pissed off security researchers and we're approaching the tipping point. This Eclipse guy has really rocked the boat for Microsoft.

Ugh !

Last time I dealt with MSRC. Responsibly disclosed an issue with legacy auth that allowed me to spray passwords at and avoid smart lockout. Receives email.. 5 months after initial case opening. “Doesn’t meet the bar for servicing” Microsoft silently fixed. Closed case. microsoft.com/en-us/msrc/blo…

me debugging the "last" BSOD before going to sleep

Sleeping isn’t about resting anymore, it’s about escaping from reality.