GanaSec

The same bug class Google Project Zero's Ian Beer reported in 2017 as CVE-2017-13847. Apple patched it then. The fix regressed. Nine years later, the ghost came back. Read here : ganasec.com/blog/the-2017-… Patched across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. #GanaSec

New blog from GanaSec: The 2017 Ghost in the Time Machine Hunting IOTimeSyncFamily on macOS Our Researcher Ashish Kunwar (@D0rkerDevil) independently discovered CVE-2026-28969 - a use-after-free race condition in Apple's IOTimeSyncFamily kernel extension.

Sometimes the biggest risks aren't zero-days. They're the passwords nobody remembered to change. Do you agree on this? #offensivesecurity #ganasec #vulnerabilityassessment #cyberrisk #defaultcredentials #firewallbypass #securitytesting #breachprevention #compliance

Default credentials on a forgotten service bypassed it all. Straight through the firewall, into AD. Real movement. Real impact. Pre-IPO. They fixed it fast. IPO went ahead.

A while back, we were quietly brought in to pentest one of India's top health and nutrition brands. They were preparing for their IPO. Firewall properly configured. AD structured correctly. On paper, audit-ready. But you wont believe the next-

Proud moment for GanaSec X Apple 🍎 Our researcher @D0rkerDevil responsibly disclosed a security vulnerability in Apple’s IOKit framework, contributing to a safer ecosystem through responsible security research. Acknowledged by Apple Security Team under CVE-2026-28969.

#hacking #cybersecuritytips #CybersecurityNews #security #bugbounty #HackerNews #hackingevent

FYI : A pentest is NOT the same as a vulnerability scan. One finds known issues. The other thinks like an attacker. A pentest is when we try to hack your business on purpose to find the holes before real hackers do. DO YOU AGREE?

We’ve been quiet, not idle. We’ve been building for the dropouts, the self-taught, the doubted. Cracking how people learn - not just what. Visual, auditory, kinesthetic -we’re designing cybersecurity for real learners. Not just teaching. Unlocking minds. 💡🧠 #cybersecurity