Marco

@pwncollege is doing Advent of Pwn ! Everyone should check it out 🤓 We’re excited to announce that our first-ever Advent of Pwn kicks off on Sunday, November 30, 2025 at 7:00 PM (in 5 days) at pwn.college/advent-of-pwn!

@FelixCLC_ What else do you need besides pshufb

It's hard to imagine, but some developers only know between 3 and 5 SIMD instruction mnemonics off hand

@spendergrsec memfd_secret is enabled by default for more than 2 years now I think. Does syzkaller explicitly disable it? Also, the race window is a bit too small, I think it would take a long time for syzkaller to hit it (and reproduce it).

Interesting find, though I guess syzkaller would have found this long ago if instances were run with secretmem enabled on the kernel commandline.

Achievement Unlocked: ser acusado de ser un LLM. youtu.be/uc6f_2nPSX8

@4Dgifts @argvee They are manually triaged by the team before reporting.

Today as part of our commitment to transparency in this space, we are proud to announce that we have reported the first 20 vulnerabilities discovered using our AI-based "Big Sleep" system powered by Gemini — goo.gle/bigsleep

New from our security teams: Our AI agent Big Sleep helped us detect and foil an imminent exploit. We believe this is a first for an AI agent - definitely not the last - giving cybersecurity defenders new tools to stop threats before they’re widespread.

👉Hasta el 30 de junio podés anotarte para participar de la Escuela de Primavera sobre Deep Learning 2025. 📅Será del 20 al 24 de Octubre en el Cero Más infinito. 🟢Para abordar temas como evaluación de sistemas de machine learning, procesamiento de lenguaje natural y grandes modelos de lenguaje, modelos de difusión, optimización, transporte óptimo, resolución de problemas inversos, neurociencia computacional y métodos de cuantificación de incertidumbre, entre otros. 💪¡Hay becas disponibles! exactas.uba.ar/agenda/?mc_id=…

@angealbertini Why not both ??? 😁😁😁

What would be interesting in a book about file formats ? Or streaming myself exploring file formats ? Just come tell me - I have stickers #38C3.

@domenuk youtube.com/watch?v=G6ywLO…

Nothing to see, just AI subtitles for a video about AI

@jduck There's a similar bug if the set-user-ID binary is writable (when you write to it, it loses the set-user-ID bit), but nobody does that.

Linux kernel race between chmod and suid-exec. github.com/google/securit… Reminds me of halfdog's works

@argvee 😬

What’s better than a complex OS with a massive attack surface that’s hard to secure? TWO complex OSs with a massive attack surface that are hard to secure. 1+1=200

@4Dgifts Empezaste con las LLMs

Project Zero blog: LLMs find 0days now! 👀 And: our fuzzer setup did *not* reproduce it! googleprojectzero.blogspot.com/2024/10/from-n…

Un recordatorio de que están abiertas las aplicaciones para Khipu! El formulario no es solamente para estudiantes. Profesores y miembros de la industria interesados también deben postular eligiendo la opción correspondiente en el mismo formulario.

Applications for KHIPU 2025 are now open! There are no registration fees, and numerous scholarships for accommodation and transportation are available. More info at khipu.ai Please spread the word!

@domenuk This happened to me at the office.. 😅 That's the real reason why I moved to a different team

I can sit on my computer headphones on 🎧 coding 🧑‍💻 noticing that they haven't been connected for 30 minutes

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models googleprojectzero.blogspot.com/2024/06/projec…

@AlejandroSena Ese 1.5x de exp juega