Romaiη 

This is sick you can see the wind shear profile

@TiinoX83 @aaronp613 github.com/blacktop/ipsw

⚠️ Je ne pourrai plus (pour l’instant ?) vous donner les nouveautés des carrier/country bundles d’iOS ! Dans iOS 26.5, l’outil que j’utilise pour « décrypter » les firmwares ne fonctionne plus (github.com/dhinakg/aeota) Je vous tiens au courant si ça bouge Cc @aaronp613

Deep dive into the provisionning an on-prem low-privileged #LLM stack, with air-gapped networking and GPU-isolation, hardened down to kernel modules. What could possibly go wrong? Read the full article here: synacktiv.com/en/publication…

log (😅) = 💧log 😄

At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller. Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit. 🔍 Full technical write-up 👇 synacktiv.com/en/publication…

High quality steganographers @r3kapig @kalmarunionenDM @smiley_ctf

An unskippable ad

🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.

🔥 #Synacktiv’s 2026 internship book is out! Whether you're into pentest, reverse engineering, incident response or development, you’ll find our full list of internships plus practical tips to boost your chances. 📬 Send us your CV: synacktiv.com/book_stage_syn…

[ZDI-25-1039|CVE-2025-12686] (Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8; Credit: @Tek_7987 and @_Anyfun (both working @Synacktiv)) zerodayinitiative.com/advisories/ZDI…

At #Pwn2Own2025, our experts @Tek_7987 & @_Anyfun remotely compromised a Synology Beestation Plus via a pre-auth exploit, leading to full system takeover. The vuln is now tracked as CVE-2025-12686 🔍 🔗 Full write-up: synacktiv.com/en/publication…

If you missed HEXACON 2025 or want to rewatch some of the talks, they’re now available on our YouTube channel 📽️ Enjoy the content, and see you in 2026! youtube.com/playlist?list=…

@0xf4b Nice PP!

Participate in the qualifiers for a chance to play the finals tonight 🏆! Hope you'll enjoy the show 🎤

I have a spare hexacon ticket if anyone wants it

A technical look at @GrapheneOS Hardened Malloc, a memory allocator designed to mitigate heap corruption vulnerabilities (UAF, overflows) and break common exploit primitives. Deep dive for security researchers & exploit developers by @iksocin synacktiv.com/en/publication…

The latest Synacktiv Summer Challenge was in 2019, and after 6 years, it's back! Send us your solution before the end of August, there are skills to learn and prizes to win 🎁 synacktiv.com/en/publication…

While performing security research on IoT control applications, @Areizen_ and @Anatharrr discovered critical vulnerabilities in the mobile app for the Eachine E58 drone. These flaws could potentially lead to remote code execution on the user's smartphone. synacktiv.com/en/publication…

There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot 😉 Conference tickets are also still available if you register for a training.

0x2bad 🫠

Azure intrusion for red teamers by Paul Barbé & Matthieu Barjole (@aevy__) hexacon.fr/trainer/barbe_…