clem1 @_clem1

tail -f internet | grep exploit Joined June 2010

Tweets

860
Followers

7K
Following

535
Likes

9K

Hexacon @hexacon_fr

5 days ago

We’re thrilled to announce Donncha Ó Cearbhaill (@DonnchaC) as our keynote speaker for HEXACON 2025! 💥 No doubt he has plenty of juicy stories up his sleeve 👾

0 8 30 4K 6

Download Image

Ivan Fratric 💙💛 @ifsecure

4 weeks ago

If you've been keeping track on the Big Sleep bug tracker at goo.gle/bigsleep you might have noticed it lists more bugs now compared to last week. Including a "High impact issue in V8" :)

3 21 101 21K 39

xvonfers @xvonfers

2 months ago

Exploited ITW (CVE-2025-6558)[427162086]Incorrect validation of untrusted input(transform feedback buffer modification) chromium-review.googlesource.com/c/angle/angle/… chromereleases.googleblog.com/2025/07/stable… Reported by Clément Lecigne(@_clem1) and Vlad Stolyarov(@vladhiewsha)

2 26 69 15K 36

DARKNAVY @DarkNavyOrg

2 months ago

Leak hole PoC for Chrome in-the-wild vulnerability CVE-2025-6554 published yesterday: github.com/DarkNavySecuri…

5 55 183 30K 102

Download Image

After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_ CVE-2025-23095 to CVE-2025-23107 📍 semiconductor.samsung.com/support/qualit…

2 22 158 21K 33

xvonfers @xvonfers

3 months ago

Qualcomm June 2025 Security Bulletin docs.qualcomm.com/product/public… "There are indications from Google TAG that CVE-2025-21479, CVE-2025-21480, CVE-2025-27038 may be under limited, targeted exploitation"

12 12 53 22K 22

Download Image

Billy Ellis @bellis1000

4 months ago

This Video Can Exploit Your iPhone (CVE-2025-31200) youtu.be/nTO3TRBW00E?si…

2 110 555 53K 327

Download Image

Alex Plaskett @alexjplaskett

5 months ago

🍏iOS 18.4.1 dropped fixing a CoreAudio memory corruption and PAC bypass stating “that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.” support.apple.com/en-gb/122282

0 11 54 5K 19

Ivan Fratric 💙💛 @ifsecure

6 months ago

I found 2 UAF bugs in libxslt with Jackalope, let's find more together! The harness is now included in examples (link below). This also serves as a demo for two not very commonly used modes in Jackalope: grammar mutational fuzzing and sanitizer coverage. github.com/googleprojectz…

0 34 153 14K 72

Donncha Ó Cearbhaill @DonnchaC

6 months ago

🚨 UPDATE YOUR DEVICES 🚨: Amnesty International uncovers sophisticated zero-day exploit affecting billions of Android devices. Cellebrite's Linux USB exploit was used to unlock the phone of a Serbian youth activist, targeted in December 2024 **after** previous reports abuses

4 200 502 46K 164

Download Image

Ivan Fratric 💙💛 @ifsecure

6 months ago

I tweeted before about the Apple CoreAudio issues found by Google TAG. Well, the fuzz harness used to find these issues is now included in Jackalope examples, see github.com/googleprojectz… . Happy fuzzing! :)

Ivan Fratric 💙💛 @ifsecure

7 months ago

1 20 95 46K 36

2 40 184 29K 68

Drop Site @DropSiteNews

7 months ago

BREAKING | WhatsApp has revealed that nearly 100 journalists and civil society members were targeted by Israeli spyware company Paragon Solutions, which used a “zero-click” method to secretly infect devices. The spyware, Graphite, provides full access to compromised devices,…

156 2K 3K 208K 485

Download Image

Ivan Fratric 💙💛 @ifsecure

7 months ago

The latest Apple security update contains fixes for three CoreAudio issues (CVE-2025-24160, CVE-2025-24161, CVE-2025-24163). These were found by Google Threat Analysis Group using Jackalope fuzzer.

1 20 95 46K 36

Ivan Fratric 💙💛 @ifsecure

8 months ago

As a New Year resolution, consider applying to Project Zero :)

Tim Willis @itswillis

8 months ago

As a New Year resolution, consider applying to Project Zero :)

4 95 274 48K 87

3 6 49 7K 9

Donncha Ó Cearbhaill @DonnchaC

9 months ago

🚨 BREAKING: Amnesty’s latest report on digital surveillance in Serbia: new *NoviSpy* spyware discovered; zero days identified and patched; and first evidence showing use of Cellebrite UFED forensic products to unlock phones to then infect with spyware. 🧵

9 339 893 173K 211

Download Image

Tim Willis @itswillis

9 months ago

If you've ever wondered if one can determine a vuln from just the kernel panic logs, @__sethJenkins (feat. @tehjh & @benoitsevens) have something to share: googleprojectzero.blogspot.com/2024/12/qualco… Great to collaborate with @amnesty, find vulns and get them fixed: securitylab.amnesty.org/latest/2024/12…

0 10 37 7K 19

Ryan Naraine @ryanaraine

10 months ago

Apple patches two 0days marked as exploited on Intel-based Macs. Also fixed in new iOS 18.1.1 securityweek.com/apple-confirms…

2 8 23 5K 10

Samuel Groß @5aelo

10 months ago

Another big step towards becoming a security boundary: today we’re expanding the VRP for the V8 Sandbox * No longer limited to d8 * Rewards for controlled writes increased to $20k * Any memory corruption outside the sandbox now in scope bughunters.google.com/about/rules/ch… Happy hacking!

1 42 153 17K 38

Axel Souchet @0vercl0k

10 months ago

The #HEXACON2024 talks have started to trickle in on YouTube, go check them out 🔥: youtube.com/playlist?list=…

2 44 104 14K 38

Cyber Statecraft @CyberStatecraft

a year ago

🚨New Report🚨 Mythical Beasts and Where to Find Them: Mapping the Global Spyware Market and its Threats to National Security and Human Rights. Explore connections between spyware vendors, suppliers, & supply chains in 42 countries 🌎 Dive deep here: dfrlab.org/2024/09/04/myt…