DAY[0]

We have a special episode this week, where we interview @JohnCarse of @getsquarex. We talk about John's industry experience, history of browser security, and the work SquareX is doing on detecting and mitigating browser-based attacks. Check it out: youtube.com/watch?v=GtFpxB…

IT'S NEWSLETTER DAY 📰 New information about Apple Exclaves @dayzerosec drops some Hypervisor RE Representing type lattices capactly from @tekknolagi @XenoKovah clarifies the ESP32 "backdoor" + Jobs and MORE 👇 blog.exploits.club/exploits-club-…

I've published a write-up on reversing and analyzing Samsung's H-Arx hypervisor architecture for Exynos devices, which has had a lot of changes in recent years and pretty interesting design. Hope you all enjoy :) dayzerosec.com/blog/2025/03/0…

Recon Training 23-26 June 2025: KVM to Mobile Security Platforms - Attacking Hypervisors with @SpecterDev and zi from @dayzerosec (4 days) For more details recon.cx/2025/trainingF…

My @dayzerosec co-host zi and I are giving our 1st training @ hardwear.io with a focus on attacking security hypervisors! Trainings are something we've wanted to do for a while. Take a look and share to those who would be interested :) hardwear.io/usa-2025/train…

@byt35tand3r @Freyxfi I (zi) made it kind of as a consequence of all the feeds I started following and filtering as part of prepping our podcast. Someone in our discord joked about the domain and I ran with it.

@Freyxfi Who made this 👀

@thedejectedone @Freyxfi Yup, its on the sidebar /feed.rss or .atom and its powered by RSS.

@Freyxfi Does it come w/RSS?

@defcon0007 @Freyxfi We sell the shirt on our shop, shop.spreadshirt.com/dayzerosec/ I now see I didn't add that link back on when I refactored the site over the summer

@Freyxfi lol I’d put that on a tshirt lol rights?

@yu5k3 Congrats! Any chance the PDF will be available?

Today I sent my PhD thesis for printing! 🎉 In my research, I classified code-reuse attacks and wrote some curious JS examples to demonstrate them. I'd love to share my findings through a micro-CTF: try solving my vulnerable JS code snippets, or repost it if you're stumped 😄 I'll be publishing it this week. Hope you find it exciting! #ctf #ornot

@garfie_d we plan to have an update out this week. we are going to be changing things up again

@thebigbadme Not really, it was sort of a lucky discovery due to crashes and observed side-effects. Nobody observed it from the commits or the code until after the fact, though it does help for analyzing after the fact.

But open source was supposed to keep us safe!?

I am once again beginning my search for cool hacks and security research for this weeks podcast. Come stop in and share your content or just hang out at twitch.tv/dayzerosec?_=2… ~zi

What a surprise, I'm going live again to prepare for this weeks podcast. Stop by and get a preview of this week's security research, ask questions or just hang out. twitch.tv/dayzerosec

Lets take a quick look at some more security research from the past week...going live in a few minutes to start going over podcast topics.Feel free to drop by with any links or just to ask questions. twitch.tv/dayzerosec

I'm (zi) going live on Twitch in a few minutes taking a look at another week's worth of security research, exploits, and vuln disclosures in preparation for the upcoming podcasts.

Hopefully we've got some fun hacks and vulns to take a look at this week. I'll be going live in a few minutes to start looking at topics for this weeks podcast episodes. twitch.tv/dayzerosec

Another week of security research to checkout on stream. Going live in a few minutes, stop by for a preview of the upcoming episode, or just to ask questions and share cool research. twitch.tv/dayzerosec

I'm going live again with another stream checking out vuln disclosures and research from the last week as I get topics together for this week's episodes. twitch.tv/dayzerosec