Splintersfury @Splintersfury

Malware analyst and cybersecurity professional focused on Windows kernel internals and reverse engineering. Singapore Joined October 2021

Tweets

12K
Followers

205
Following

1K
Likes

14K

Alex Plaskett @alexjplaskett

a day ago

Unleashing the Hound: How AI Agents Find Deep Logic Bugs in Any Codebase by @muellerberndt muellerberndt.medium.com/unleashing-the…

0 27 80 7K 60

Download Image

this is your LAST warning to buy used optane drives while they are still cheap No modern SSD comes close. In 2 years you’ll be telling people about the time you could have bought alien technology for pennies but didn’t.

436 463 12K 1.2M 10K

Download Image

Elastic Security Labs @elasticseclabs

2 days ago

#ElasticSecurityLabs gets to the root cause of an Authenticode signature error, reverse-engineering an undocumented Microsoft function in the process. Learn how we solved the problem here: go.es.io/3K2vG7u

2 25 91 7K 37

urlscan.io @urlscanio

3 days ago

Thanks to the awesome work by our team we can finally announce our official urlscan cli tool: urlscan.io/blog/2025/09/0… - Submit scans, run searches, find domains, get creative. Feel free to share your use-cases with us on X! Download on Github or homebrew.

6 95 336 24K 172

Download Image

BlackSnufkin @BlackSnufkin42

2 days ago

CVE-2025-52915 assigned - my first vulnerability!🥳 A classic BYOVD case: kernel driver with unrestricted process termination. Vendor coordination turned out more challenging than the exploit itself. Technical write-up: blacksnufkin.github.io/posts/BYOVD-CV… #ExploitDev #CVE #BYOVD #RedTeam

0 45 130 8K 42

Panos Gkatziroulis 🦄 @netbiosX

2 days ago

Terminate any active process on the system via Kernel-mode Driver github.com/alex3O/BYOVD-D…

0 28 106 6K 67

Compass Security @compasssecurity

3 days ago

Kerberos powers auth in Windows and hides big security risks. We’re launching a 6-part deep dive: from protocol basics to attacks plus how to stop them. Starts today → blog.compass-security.com/2025/09/taming… → Subscribe to our channel! #Kerberos #ActiveDirectory

2 37 106 7K 68

Download Image

V @orlof_v

3 days ago

🧵 New research: What happens when bulletproof hosting gets sanctioned? intelinsights.substack.com/p/a-stark-conn… Tracked Stark Industries Solutions from EU sanctions → infrastructure migration to Netherlands via WorkTitans B.V. Sanctioned Russian linked operators moved INTO stricter EU…

4 20 60 7K 31

Download Image

Virus Bulletin @virusbtn

2 days ago

A recent report from the Sekoia TDR team provides an overview of the commercial surveillance vendors ecosystem between 2010 and 2025, analysing their spyware offerings, business models, client base, target profiles, and infection chains. blog.sekoia.io/predators-for-…

0 11 19 2K 3

Download Image

Hexacon @hexacon_fr

3 days ago

We’re thrilled to announce Donncha Ó Cearbhaill (@DonnchaC) as our keynote speaker for HEXACON 2025! 💥 No doubt he has plenty of juicy stories up his sleeve 👾

0 8 30 4K 6

Download Image

moly @morimolymoly2

3 days ago

JPCERTCC/rust-binary-analysis-research-ja: Rustで作成されたバイナリのリバースエンジニアリング調査レポート github.com/JPCERTCC/rust-…

2 11 65 4K 33

Mandiant (part of Google Cloud) @Mandiant

3 days ago

The Ransomware Data Leak Dashboard in Google Threat Intelligence gives a direct view into extortion activity. Filter leaks (incl. your supply chain), then pivot to group profiles, infrastructure, and campaigns for the full ransomware picture. Watch ⬇️

0 11 50 4K 22

Download Video

Shanholo @ShanHolo

3 days ago

#Offtopic Sometimes looking for #Opendirs I can find weird people like him... hxxp://100.27.187.56/

2 4 24 2K 8

Download Image

Alexander Popov @a13xp0p0v

3 days ago

My new article: "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel"⚡️ I tell a bug collision story and introduce my pet project kernel-hack-drill, which helped me to exploit the hard bug that received @PwnieAwards 2025 a13xp0p0v.github.io/2025/09/02/ker…

4 81 219 20K 114

Download Image

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

3 days ago

Yesterday I had my first day at @_CPResearch_! It is truly a blessing to be able to work with a team of such talented reverse engineers and have the opportunity to do malware research full time 🙏

19 7 136 13K 11

Robin @D4mianWayne

5 days ago

Teaming with @gh0stbyt3, we built DiffRays for headless IDA (@HexRaysSA) decompilation. It stores decompiled code in a SQLite DB and provides a Web UI for diffing between the stored functions. Built for vuln research. github.com/pwnfuzz/diffra… #pwnfuzz

4 39 133 12K 84

Download Image

Virus Bulletin @virusbtn

4 days ago

Nextron Systems researcher Pierre-Henri Pezier uncovers a phishing campaign targeting organizations in India with Linux environments, leveraging spear-phishing techniques reminiscent of Operation Sindoor. nextron-systems.com/2025/08/29/sin…

0 17 51 5K 8

Download Image

Vivek Galatage @vivekgalatage

5 days ago

The five-part memory profiling blog series is a great read - save and share. easyperf.net/blog/2024/02/1…

Vivek Galatage @vivekgalatage

5 days ago

The five-part memory profiling blog series is a great read - save and share. easyperf.net/blog/2024/02/1… https://t.co/qUNXFWlJHS

1 30 182 28K 128

Download Image

1 49 409 23K 410

Download Image

blackorbird @blackorbird

5 days ago

The watering hole campaign evolving tactics of APT29 aws.amazon.com/it/blogs/secur…

0 28 91 8K 42

Download Image

db @whokilleddb

5 days ago

So verifier.dll exposes a function called VerifierDestroyRpcPageHeap() which has this opcode RIGHT AT THE BEGINNING of the function - which we can use to fetch the PEB without calling something like __readgsqword(0x60) directly. PoC: github.com/whokilleddb/fu…