Got my first Apple CVE! CVE-2026-20654 At the age of 19, I have finally achieved my goal. Weird thing is, the 2025 CVE isn't addressed yet haha More exciting news coming soon! Thank you everyone for the support 🥹🙏
16
10
284
23,963
I have a tiny bit of feeling about getting another iOS exploit targeting newer versions… sooner or later
5
4
45
4,083
RT @evilcos: ⚠️最近一些 iPhone 用户的钱包被盗,是因为安装了 FomoPeek 这个 App,v1.1-1.2 主要版本引入了恶意 SDK,其包含一套专业的 iOS 内核攻击框架,集成 8 种漏洞利用方案,可根据设备型号及系统版本自动选择攻击方式,已知受影…
127
31
Just received a $1,000 bounty from a non CVE report. Is that normal ASB behavior? I thought only CVE reports could get bounties.
14
2
89
6,332
4 more credits were added as additional recognition! The copyfile one was done in collaboration with @morrisinlife! It was a fresh research opportunity 😊
Two CVEs were published in iOS 27 security update! CVE-2026-43664 (AirPods info leak) CVE-2026-84636 (WiFi info leak) Busy with military service these days 😓
2
3
25
3,582
Two CVEs were published in iOS 27 security update! CVE-2026-43664 (AirPods info leak) CVE-2026-84636 (WiFi info leak) Busy with military service these days 😓
5
4
58
13,390
CVE-2026-84636
2
58
13,241
age++; Today’s my 20th birthday 🎉
30
2
90
3,652
Found a bug in iOS 27 folder animation
4
1
56
6,791
Speedyfriend67 retweeted
Imagine using 32-bit apps on modern iOS like Apple never dropped it
56
133
1,629
72,372
Disclosing an old zsh PoC that could have been LPE, but mission failed 😞
Replying to @speedyfriend433
Another LPE got into additional recognition… 😭
1
1
23
3,918
Speedyfriend67 retweeted
sptm panic (iPhone 17, iOS 26.5.2)
11
15
188
37,416
I'm happy to see my previous CVEs were not discovered by the same people and stand as a standalone credit. But due to AI agents, handwritten discoveries are now outdated… I guess
3
2
69
8,827
Time to use AI agents a lot to discover vulnerabilities in Apple after seeing the 26.6 security note…
5
1
33
4,425
First time joining a Claude Cyber Program and it got approved within 10 minutes haha I guess CVEs are helpful for that. Let’s see what I can do with AI agents in 2027 🫡
5
2
49
6,311
2026 is a great year, 2027 will be greater.
5
1
44
4,573
Wait, does this mean an iOS RCE just happened?
kimi k3 also did a zero-click arbitrary command execution in Telegram Desktop and iOS app (aslr pinned, one gadget away from full rce).
4
1
98
26,205
My future plans In October 2027: - Get out of military service - Build an Android emulator for native iOS - Contribute something to the jailbreak community In 2028: - Work at L3Harris on security research - Reach a total of 10 Apple CVEs - Learn Assembly for reverse engineering
7
2
76
5,272
Here’s the PoC of CVE-2026-28867! Finally recovered from an old backup after 90 days of responsible disclosure.
Received my first Apple Bounty in my life! Couldn’t check the status in real time, but now I can 🙂
2
2
71
11,387