#JSCeal didn't give up its secrets willingly.
Following our #BlackHat2026 talk, we're releasing Breaking the Seal: our research on statically deobfuscating compiled, obfuscated #V8#malware.
Inside: the methodology, the open-source toolkit, and the malware capabilities recovered along the way.
research.checkpoint.com/2026…
Not sure if someone noticed, the animation is inverted. The bug is fixed! The challenge we took for this phone is to virtualize it without actual phone. Want to see how further we can push without the actual phone! At some point we might need the actual phone as many specs are NDA guarded!
My #BHUSA 2026 slides are online!
It was an honor to share our AFD research and how a different perspective led to 30+ Windows kernel vulnerabilities.
Blog post coming soon — check out the slides here:
i.blackhat.com/BH-USA-26/Pre…
Here are the slides for my Scudo talk yesterday for the MobileHackingLab Con: github.com/3sjay/talks/blob/… it has two extra slides I haven't addressed in my talk. One describing two common misconceptions and one showing the shuffle count for each class.
Started a blog series on writing a minimal ARM hypervisor from scratch — boots as a UEFI app, claims EL2, identity-maps everything through Stage 2.
Chapter 0 just dropped: ARM vs x86 virtualization, UEFI internals, EDK2 setup, first app at EL2.
0xabe.io/hypervisor/arm/2026…
While y’all discounting your mediocre courses, @zerodaytraining is doubling down on my pro offers:
- Foundations + Hypervisor = Escape Bundle (new)
- Foundations + Browser = Remote Bundle (new)
- Foundations + Hypervisor + Browser = Elite Bundle (new)
That’s a full roadmap from zero to zero day engineer.
Winter Bundles are here ✨🎄✨
Bundles are one of our most requested features.
Today, we've put together our best self-paced trainings
to keep one's head cool on Christmas
and well into 2026.
Limited availability through mid January
Details: zerodayengineering.com/winte…
Watch XOR’s talk CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits
Kernel + driver bugs aren’t just a LPE problem, they’re a cloud problem. With the explosion of AI in the cloud, NVIDIA’s GPU drivers have become a valuable attack surface
piped.video/Lvz2_ZHj3lo
My HEXACON talk video is out! It covers a small race condition in the Linux kernel’s io_uring. I recommend watching it at 1.25× speed since I’m still not great at speaking 😅
piped.video/watch?v=Ry4eOgLC…
Here is the slide!
u1f383.github.io/slides/talk…
Made a pwn challenge for this year’s HITCON CTF, which required participants to bypass PAC, BTI, and deal with relative vtables. Here’s the write-up:
bruce30262.github.io/hitcon-…
Check it out if you're interested🙂
I posted a short blog about how a Samsung GPU vulnerability (CVE-2025-21479) can be leveraged for an LPE on affected devices
xploitbengineer.github.io/CV…