The screensharingd bug that was killed on latest updates, is a pre-auth, contrary to what the company that disclosed it to Apple is writing. This is an amazing bug that allows to pwn any unpatched Mac that has Screen Sharing enabled. If you have it enabled go patch now. If you have old versions for which a 5T company doesn't bother to release patches, good luck!

Releasing a PoC that just allows to download any file from vulnerable machine.

https://reverse.put.as/2026/07/29/its-a-pre-auth-stupid/

I find this compelling, but my economic clue is subprime (pun intended). I would love to read critique on their arguments.

https://www.groundbrkr.com/p/the-second-derivative-why-no-one

#ai #aiboom

Been there.

As promised, DarkSword Kernel Exploit writeup is now live at https://therealclarity.github.io/blog/clearsword/
This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented.
Hope it helps anyone looking to understand it! :)

Vegas in August = Hacker Summer Camp.
We'll be at Black Hat, B-Sides LV, and DEF CON 34.

Highlights: a demo of our upcoming Malware Analysis Add-On, a hands-on DLL sideloading workshop (40 seats, register now), a live look at Teams' new Git-native workflow, and recruiting. (Yes, we're hiring!)

👉 Find the full rundown and where to catch us: https://hex-rays.com/blog/hex-rays-hacker-summer-camp-2026

A new article by @XC3LL ! Yes, we are live again! 🦉

In this post we RE a sound protocol (yes soundwaves!) used by Eufy to sync its security video doorbell and also we recover wifi credentials from its flash memory.

From your doorbell to your home network => https://adepts.of0x.cc/eufy-doorbell-hacking/

CVE-2026-50469 - ProjFS File Delete

https://bad-jubies.github.io/projected-file-system-file-delete-cve-2026-50469

#windows #vulnerability #exploitation #exploit #cve #informationsecurity

🔥

Sources and bonus timelapse: https://www.peppercarrot.com/en/miniFantasyTheater/063.html

#webcomic #krita #miniFantasyTheater

I understand why EVs create a noise so they can't sneak up on pedestrians as easily, but why do they all sound like Mothman getting railed by a Yeti? There have to be other sound options to use.

I'd like to introduce Kuna, a new Rust-based decompiler that explores a highly experimental direction: self-refining decompiler development and usage. Or: a decompiler constantly improved by agents, made for agents.

Kuna rivals the best in structuring now. Let's talk about it.1/

I am baffled why people are going "oh no what is to be done" about openai breaking into a competitors computers, when it is incredibly obvious: Charge them under the CFAA. "Oh but their research". Sandbox it from the Internet. "Oh it's too hard to do that". Skill issue, get good.

As I said: Weird that Robert Morris got charged for all of the computers his worm broke into. After all, he didn't do it, the computer program did it, that's completely different, apparently. https://en.wikipedia.org/wiki/Morris_worm

Heh, Google now rubs your nose in it: they have a new report for webmasters that shows you how many times AI summaries / Gemini "cited" your website. There is no click count because of course there isn't.

Is that a metric I'm supposed to optimize for, against, or what

russia’s FSB reported bringing charges against Telegram founder Pavel Durov for facilitating terrorist activity and placing him on the international wanted list.

According to the security service, the administration of the messaging app fails to delete channels and bots that, according to the russian side, are used to coordinate terrorist attacks and acts of sabotage in russia.

https://en.interfax.com.ua/news/general/1188849.html

Ghidra SNES: Ghidra extension for loading and working with SNES ROMs #ReverseEngineering #SNES https://github.com/joshleaves/ghidra-snes