Renaud Bidou

The Exploiting Reversing Series (ERS) currently features 1051 pages of exploit development based on real-world targets: [+] ERS 09: exploitreversing.com/2026/04/28/exp… [+] ERS 08: exploitreversing.com/2026/03/31/exp… [+] ERS 07: exploitreversing.com/2026/03/04/exp… [+] ERS 06: exploitreversing.com/2026/02/11/exp… [+] ERS 05: exploitreversing.com/2025/03/12/exp… [+] ERS 04: exploitreversing.com/2025/02/04/exp… [+] ERS 03: exploitreversing.com/2025/01/22/exp… [+] ERS 02: exploitreversing.com/2024/01/03/exp… [+] ERS 01: exploitreversing.com/2023/04/11/exp… Now is the time to take a break to dedicate all my energy and focus to security research and new projects that will be announced in the coming weeks and months. Have a great day and enjoy reading. #exploit #exploitation #windows #chrome #macOS #iOS #hypervisors #vulnerability #research

VectorSmuggle: What Embedding Stores Trust, and Why That's a Problem research.thirdkey.ai/blog/vectorsmu…

We beat Google’s zero-knowledge proof of quantum cryptanalysis blog.trailofbits.com/2026/04/17/we-…

EDR Tradecraft: Internals, Detection, Evasion & Advanced Research 0xdbgman.github.io/posts/edr-inte…

The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords blog.gitguardian.com/the-bot-finger…

AI Agents Traps papers.ssrn.com/sol3/papers.cf…

Everything about JWT security in 18 articles... rmrf.tips/en/

MAD Bugs: "cat readme.txt" is not safe in iTerm2 blog.calif.io/p/mad-bugs-eve…

Stealthy RCE on Hardened Linux: noexec + Userland Execution PoC hardenedlinux.org/blog/2026-04-1…

[REVIEW] Security Review #302 is out! paracyberbellum.io/resources/revi…

A Cryptography Engineer’s Perspective on Quantum Computing Timelines words.filippo.io/crqc-timeline/

Cracking a Malvertising DGA From the Device Side buchodi.com/cracking-a-mal…

Containers Escape Telemetry catscrdl.io/blog/container…

Unwind Data Can't Sleep - Introducing InsomniacUnwinding lorenzomeacci.com/unwind-data-ca…

The Atmosphere Attack: Postural Manipulation and the Hidden Threat in Agentic AI shapingrooms.com/atmosphere-att…

Digital Red Queen: Adversarial Program Evolution in Core War with LLMs sakana.ai/drq/

[REVIEW] Security Review #300 is out! paracyberbellum.io/resources/revi…

Elevating Low Vulnerabilities to Critical in CMSs and E-Commerce Platforms, nice step-by-step introduction to advanced XSS exploitation by Hudson Nowak nowak0x01.github.io/papers/76bc083…

Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense arxiv.org/pdf/2601.05887

DOOM over DNS blog.rice.is/post/doom-over…