Arnold Osipov

One day, my automation failed to unpack one of the #CHAES malware samples. I delved deeper to understand the reasons behind the glitch, revealing personal messages and code adjustments along the way. Enjoy the read 😁 morphisec.com/hubfs/Chae$_Ch…

⭐ RIFT Major Rearchitecture! Now more modular, extensible, and easier to use New experimental build 3 modes: file analysis, direct generation, HTTP API service Improved IDA Plugin! github.com/microsoft/RIFT #reverseengineering #malware #cybersecurity #infosec #RIFT

Wohoo my name is there 🥹

Proud to share that @smgoreli and my talk, “Signature of Destruction: Outlook RCE Strikes Again”, got accepted to BlackHat Canada (SecTor)! New Outlook RCE, new vector — details soon #sectorca @BlackHatEvents

@sim0nsecurity Thx! Ofc, a nice one 😉

@osipov_ar Great find! Congrats! Do these qualify for a bounty?

Yesterday, Microsoft patched two Remote Code Execution vulnerabilities in Outlook that we discovered. 🙃 1. CVE-2025-47171 --> msrc.microsoft.com/update-guide/e… 2. CVE-2025-47176 --> msrc.microsoft.com/update-guide/e… ⚠️ More findings on the way — stay tuned.

Joining the MCP trend with windbg-ext-mcp 🐛Now you can vibe debugging your Windows kernel: github.com/NadavLor/windb… Example of asking Claude to hide explorer.exe by unlinking it from EPROCESS + PspCidTable: #windbg #mcp

Day 2 of #ZeroDayQuest brought together brilliant minds from around the world for more hands-on hacking and meaningful community connections. Catch the energy in our recap video! @secbughunter @tinderj_ @ZenOneSec @0xdea

Day 2 of #ZeroDayQuest brought even more hacking, problem-solving, and unforgettable moments. We then went to Carmine’s for incredible food and even better conversation, connecting over exploits, defense strategies, and a shared passion for protecting customers.

Clippy is that you? 🍹🥃 @msftsecresponse #ZeroDayQuest

Day 1 of the Zero Day Quest Onsite Hacking Event is in the books and we’ve kicked off Day 2. We welcomed top security researchers from around the world to Microsoft’s Redmond campus for a day of live hacking, collaboration, and connection. Researchers worked side-by-side with Microsoft engineers and product teams to identify vulnerabilities across our AI and cloud platforms. Lots of amazing reports and discussions flowed throughout the day—with MSRC, product teams, and the researchers themselves all driving security forward together. After headshots and hacking, we wrapped the day with a Mariners vs. Tigers game in Seattle (tough loss, but the vibes were strong!). We’re incredibly grateful to the security researcher community. Your work makes a real impact in helping protect customers. #ZeroDayQuest

Having time off from a long exciting day hacking Microsoft products. With @osipov_ar and @shmuel_uzan at #ZeroDayQuest @msftsecresponse

@sapirxfed Nice one 😉👏🏻

My new 6 month project😱- I'm going to be the editor of the biggest Israeli security magazine(exists from 2009!).I've been in training for the last 2 months. Starting next month, I'll become the official editor-in-chief. Excited!🥹🥳

🚀 Thrilled to share that I’ve been invited to Microsoft’s Zero Day Quest event in Redmond, Washington in 2025! 🔥 Over the past year, I’ve reported 4 RCE vulnerabilities and several other security issues to MSRC. Big thanks to @msftsecresponse for organizing this unique event!

@HaifeiLi See you there 😉

Wow I was invited to the first-ever Microsoft Zero Day Quest! I hope to see all you hackers there!

@g0njxa @osint_barbie @L0Psec I wrote about the infection chain a bit here - morphisec.com/blog/captcha-c…

My first ever seen adaptation of #FakeCaptcha to MacOS downloading an infostealer Run: tria.ge/250128-kkmcpst… Sample: bazaar.abuse.ch/sample/3e5764a… C2: /82.115.223.9/contact Via fake Safeguard verification /lasso-security.com/1-93248234/macos2.html

📩 @osipov_ar & @smgoreli have uncovered and aided Microsoft in patching another Outlook vulnerability, CVE-2025-21357. 🔎 See the details in our brand new web experience: bit.ly/40AqTA3 #cybersecurity #outlook #microsoft #cyber #patchtuesday

@threatactress @d4rksystem On the contrary😉 You're a crypto beast

@threatactress @d4rksystem No chaes in there? 🤷🏽‍♂️ Super evasive msi

@Myrtus0x0 🔥 you're on fire

Happy to be done 😤ended up taking time off of work to focus 100% on flare. Was absolutely brutal to say the least, my last solve was at almost 5am before needing to be in a meeting at 7 🥲 future #flareon11's are gonna be a lot more chill, ill tell ya that 😅