Csaba Fitzl

📣 MAJOR ANNOUNCEMENT!! 📣 Our very first public training with @gergely_kalman will be at Zer0Con If you want to get into macOS Vulnerability Research, then: This Is The Way. 👇👇👇

I need a sticker (and pin, mug, etc...) with the new Apple 50 logo. #apple50

iOS PAC!!! youtu.be/6IeUdc_AoC8

Proud to share that Iru has been named one of @Forbes Best Startup Employers 2026. 🎉 If you're looking for a place where your work matters and the people around you make you better every day, we're hiring and we'd love to meet you. 👉 iru.com/company/careers

Looks like iOS remote kernel debugging is working well with Binary Ninja and a virtual iPhone running iOS 26.3

#Zer0Con2026 Training will close at 23:59 on March 26 (KST). If the training gets full before then, it might close earlier. Cheers! 😎 For more: zer0con.org

New macOS LPE, bypassing the fix for the 3rd time. Or 4th? Something like that. This also showcases the O_RESOLVE_BENEATH bypass in production. Since this is a double-race, this is a lucky run, usually it takes 2-3 minutes, but that's pretty acceptable to me. Writeup comes as usual: when the bug is fixed and I have no further bypasses to report.

Kremlin has reportedly tasked Social Design Agency, an influence operations agency, with running an influence operation in Hungary's election in support of Hungarian political party Fidesz. The operational brief proposal calls for content designed in Russia and distributed through Hungarian intermediaries, including via hired influencers. The whole thing is meant to look native, Hungarian, domestic. Ideally grassroots. The proposal document itself notes that the operation cannot appear artificial and must not be traceable to Russia. Direct Russian support could, it states, produce the opposite effect. European intelligence services have confirmed the presence of a three-person GRU team at the Russian embassy in Budapest.

@speedyfriend433 @gergely_kalman TCC bounties were not removed but reduced to 1k$/5k$ to my understanding.

@gergely_kalman within the TCC bypass bounty removal, i heard it

Does apple still pay for stable macOS LPE?

@_Sn0rkY Thanks!

@theevilbit Excellent 🤩 good luck and keep us posted on your progress

After long time planning, last week I have started my UIMLA International Mountain Leader training, which will take minimum of 2 years. I will be around IT for long time, but I eventually plan to take people to the mountains as well. IFMGA/UIAGM (guides) and UIMLA (leaders) are the only two globally recognized, international certifications for mountain professionals. IFMGA covers technical, glacial, and high-altitude mountaineering, whereas UIMLA focuses on trekking, hiking, and snowshoeing in non-technical terrain.

@gergely_kalman Thanks!

@theevilbit Good luck mate!

@OliviaGalluccii @datadoghq Congrats!

I'm happy to share that I've been promoted to Security Engineer II (SE2) at @DatadogHQ! 🐶

@sneakernet72 Thanks!

@theevilbit From humble beginnings - hosting 10ks on flat boardwalks 😊 Excited for you on this journey of journeys!

@howardnoakley Thank you!

@theevilbit I wish you success - and pleasure in getting there too!

@_xpn_ Thanks!

@theevilbit Congrats dude, enjoy the journey!!

techcrunch.com/2026/03/09/an-… Latest from @lorenzofb/@TechCrunch ...'confirming' Coruna's origins 📲🐛

@xct_de @gergely_kalman See you there!

Really looking forward to this one! See you in Seoul, @theevilbit and @gergely_kalman :)

Last week we piloted our "macOS Vulnerability Researcher" training with @gergely_kalman privately at @officiallyiru . We delivered the training for our entire Threat Intel team, and some of our Solution Engineers. It was super cool, all the students were amazing and we had plenty of interactions. We, as trainers also learned a lot. We are looking forward now to our first public offering, which will be in Seoul, South Korea, at Zer0Con. This will be the only training this year in Asia, and there are still a few places left, if you are interested you can sign up here: zer0con.org

@PeteMarkowsky @sharvil @northpolesec Congrats to both! :)

So much good stuff in 2026.2 with more to come. Process tree rules with Workshop is something we've been trying to get into Santa for years it is amazing to finally have it here! Also big shout out to @sharvil who joined @northpolesec recently. He's great and we're so glad he's here.