Mickey Jin @patch1t
Exploring the world with my sword of debugger : ) jhftss.github.io Joined August 2013-
Tweets285
-
Followers5K
-
Following243
-
Likes3K
For those missing the talk, Blog: jhftss.github.io/Exploiting-the… Slides: github.com/jhftss/jhftss.…
For those missing the talk, Blog: jhftss.github.io/Exploiting-the… Slides: github.com/jhftss/jhftss.…
A tiny timing flaw in Apple’s core file-copy APIs can put millions of devices at risk 📂🍏 Despite warnings, Apple thought it was “too hard to exploit”—until Mickey Jin developed an exploit that steals secrets in privileged services 👉nullcon.net/berlin-2025/sp… #NullconBerlin2025
Thank you @helpnetsecurity to mention us 👍 awesome research by @tsunek0h #macOS #applesecurity #NullconBerlin2025 helpnetsecurity.com/2025/09/04/mac…
🚨 New blog post: ELEGANTBOUNCER - Catch iOS 0-click exploits without having the samples. Features iOS backup forensics & messaging app scanning for iMessage, WhatsApp, Signal, Telegram & Viber attachments. 🔗 Link -> msuiche.com/posts/elegantb…
🍏 #AppleDevelopers use NSFileManager thinking it’s safe — but @patch1t found a race condition once thought “impossible to exploit.” At #NullconBerlin2025, he’ll show how it works, why CVE-2024-54566 failed, and Apple’s final fix. 👉 nullcon.net/berlin-2025/sp… #iOS #applesecurity
Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 github.com/b1n4r1b01/n-da…
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojectz… It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
Launch constraints are annoying as a security researcher. What if you didn't have to worry about them? wts.dev/posts/bypassin…
So CVE-2025-43268 was indeed my vuln in cryptexctl, but @0x3C3E found it first, kudos to him. Here's the "exploit", which makes sudo try and load an unsigned dylib from the current directory: /S*/L*/S*/u*/b*/c*.r* exec $PWD/ sudo ls
📢 Just dropped: the full #OBTS v8 talk lineup! objectivebythesea.org/v8/talks.html And for the first time we'll have 3 full days of presentations! 🤩 Congrats to the selected speakers and mahalo to all who submitted. With ~100 submissions, selecting the final talks was a daunting task! 😫
I lightly mentioned CVE-2025-31235, a double-free I found in coreaudiod/CoreAudio, during my OffensiveCon presentation last month. It's been derestricted now, so enjoy my writeup which includes a PoC and dtrace script to help understand the vulnerability! project-zero.issues.chromium.org/issues/4062711…
My "Finding Vulnerabilities in Apple Packages at Scale" talk is up on YT 🎉
My "Finding Vulnerabilities in Apple Packages at Scale" talk is up on YT 🎉
Woah, @WangTielei talk “Sending Me Your IOUserClients: A Bypass to Immovable Ports” at @deepsec_cc was insanely good! I enjoyed it! Super clever new discovery. feels awesome to see other researchers referencing my past work.
Stoked for Jaron Bradley's soon to be released 2nd-book: "Threat Hunting macOS" 😍📚 (And was honored to write its forward). Jaron is an outstanding researcher, speaker, trainer, & friend, and this book will become an essential macOS security resource. linkedin.com/feed/update/ur…
Our new blog post is live: blog.dfsec.com/ios/2025/05/30…
The slides for my OffensiveCon talk "Finding and Exploiting 20-year-old bugs in Web Browsers" docs.google.com/presentation/d…
Thrilled to announce my new Project Zero blog post is LIVE! 🎉 I detail my knowledge-driven fuzzing process to find sandbox escape vulnerabilities in CoreAudio on MacOS. I'll talk about this and the exploitation process next week @offensive_con! googleprojectzero.blogspot.com/2025/05/breaki…
XNU VM_BEHAVIOR_ZERO_WIRED_PAGES behavior allows writing to read-only pages project-zero.issues.chromium.org/issues/3915186…

chompie @chompie1337
83K Followers 1K Following hacker, weird machine mechanic, X-Force Offensive Research (XOR)
simo @_simo36
7K Followers 116 Following
0xor0ne @0xor0ne
81K Followers 514 Following | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
Alex Plaskett @alexjplaskett
12K Followers 571 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Wojciech Reguła @_r3ggi
6K Followers 863 Following iOS/macOS app security researcher & blogger. 🍎 Black Hat / DEF CON / TyphoonCon speaker. Head of mobile appsec @SecuRingPL
LiveOverflow 🔴 @LiveOverflow
155K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Ivan Fratric 💙💛 @ifsecure
18K Followers 207 Following Security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
Julien | MrTuxracer �... @MrTuxracer
37K Followers 443 Following Freelancer | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | ❤️ Reversing | Mobile Hacker | https://t.co/pcWduPOt0n
Saagar Jha @_saagarjha
5K Followers 159 Following
kmkz @kmkz_security
19K Followers 2K Following Offensive Security, pom-pom girl... Who cares ?? Bourbon Offensive Security Services | BOSS
Csaba Fitzl @theevilbit
8K Followers 1K Following macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://t.co/Xf7KDW5fKu
Haifei Li @HaifeiLi
8K Followers 151 Following For contact in the security community. NOTE: All the tweets are totally my personal opinions, not about any of my current employer stuff.
[email protected]... @axi0mX
61K Followers 2K Following Bootrom exploit philanthropist. Apple silicon hacker. iOS jailbreaker. Join us as we dance madly on the lip of the volcano.
codecolorist@infosec.... @CodeColorist
5K Followers 1K Following
Ted Rattei @tedrattei
187 Followers 3K Following Technology professional. Husband. Project Manager. Chinese 中文 speaker. Follower of Jesus
muchen @muchen28041
0 Followers 370 Following
Nic @nicolaipre
20 Followers 807 Following
soh @soh_satoh
4K Followers 576 Following security engineer @ st\.inc | ex. セキュリティベンダー, tweak developer/seller (iOS) | 何もRepしない個人としての意見感想見解
wsp75006 @wsp750063105
6 Followers 590 Following
Backd00r🐳 $XTER♦... @TTByaw
200 Followers 2K Following Just a n00b,Just 4 fun Retweeter of InfoSec/Offsec/Pentest/Red Team/DFIR web3 newbee
김태호 @gimtaeh95829849
2 Followers 93 Following
clash @clash47341568
7 Followers 106 Following
Miguel E. Gil Biraud @mgilbir
889 Followers 3K Following Software developer, telecommunication engineer, space geek, geo enthousiast and public speaker
Paul J M @RelentlessOODA
55 Followers 614 Following Executive Decision Support | Creative Force Multiplier | Organizational Nexus | Unconventional Problem Solver | Lifelong Learner
Babak Huseynov @BHuseynov33112
0 Followers 71 Following Passionate on Binary Exploitation, Reverse Engineering, Fuzzing binaries.
Raigeki @raigekiiiiiii
26 Followers 240 Following Cybersecurity Student 🏴☠️ | RE | Malware | Pwn | RedTeam | My cat probably watching you
z_alfaCat @z_alfaCat
1 Followers 52 Following security researcher | Bug hunter on a mission. Breaking barriers and learning from every exploit. #Hacking #BugBounty
Martinz Blazac @MBlazac
0 Followers 23 Following
Aidan H @thehappydinoa
1K Followers 894 Following Security Researcher, Developer, and Collaborator at @censysio
MG193_7 @MGAldys4
157 Followers 326 Following 21 y.o Fourth-year university student Blog:https://t.co/cTJ4ePTsdZ Github:https://t.co/DBzFGq62zR
Reza Zamiri @d3c0der
2K Followers 2K Following Computer science @Saar_Uni | Past @ CISPA | CyberSecurity Engineer
Larryxi @1arryx1
89 Followers 214 Following
Vibe Hacker @BinaryShogun1
12 Followers 165 Following Vulnerability Research, Forecasting, Exploitation
Utkarsh Yadav @Utkarshyadav_in
1 Followers 447 Following
Syed Anwaarullah @Anwaarullah
590 Followers 1K Following Generalist & Specialist; Keeping lights ON at @PotentialLabs & @Refflion; Product @AlAleemTech; Ingenieur, Maker, 🔊. ♥ Embedded, IoT, Electronics & ⚡💡
Zoro @n0000p4
70 Followers 827 Following
Philip Tsukerman @PhilipTsukerman
3K Followers 78 Following I sometimes tweet about security stuff. Pondering whether to turn this into a music-focused account instead...
Omar @orsoto
329 Followers 2K Following Computer Engineer working in Cybersecurity /* The opinions are expressed by my cat 🐱*/
Ⓜ 🅾 ⓗⓐ... @mohamedelshbly1
9K Followers 2K Following "سنك في البطاقه غير سنك في المرايا ، غير سنك مع حد بتحبه ،غير سنك و أنت فرحان، غير سنك و أنت زعلان، جوا عمرك عمر تاني
Daniel Macs @dannonen
50 Followers 185 Following
PossumSec @0xPossumSec
43 Followers 1K Following
badr eddine @ivarov54
512 Followers 4K Following
Manuel @Manbnuel
109 Followers 301 Following
민다린 @mindalin327888
0 Followers 6 Following
Tuan Dinh Van 🇻�... @tunadv
155 Followers 721 Following Security engineer | MSRC 2024 Q3/4 | MSRC 2025 MVR
Severus @Severustalin
43 Followers 330 Following Security Researcher | CTF Player | Noob in Bughunting
DeepVoid @DeepVoid_0
8 Followers 339 Following
Xin'an Emmanuel Zhou @zhouxinan
750 Followers 697 Following 🌐 Network Security PhD @UCRiverside | Advised by @pkqzy888 🏆 2x Pwnie Awards nominee (2023, 2025) | Pwn2Own winner 📢 Published @acm_ccs | PANW intern
Al-Muthanna @Al_Muthanna_0x8
7 Followers 231 Following
Femi @_femi_B
201 Followers 819 Following
NS @natanelsht
2 Followers 173 Following
Retard finder @Citizen4chang
1K Followers 4K Following I hate War Mongers,Perverts and Idiots ,I have a disdain for lazy minds
ergoproxy @_erg0sum
2K Followers 2K Following 16 year old whimsical wizard and part time fintech phantom. Red Team & Bug Bounty. CPTS,CRTP | Views are my own. Not affiliated with my employer.
chompie @chompie1337
83K Followers 1K Following hacker, weird machine mechanic, X-Force Offensive Research (XOR)
simo @_simo36
7K Followers 116 Following
Project Zero Bugs @ProjectZeroBugs
35K Followers 0 Following A bot that posts the latest blog posts and disclosures from Google's Project Zero
Alex Plaskett @alexjplaskett
12K Followers 571 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Wojciech Reguła @_r3ggi
6K Followers 863 Following iOS/macOS app security researcher & blogger. 🍎 Black Hat / DEF CON / TyphoonCon speaker. Head of mobile appsec @SecuRingPL
Ivan Fratric 💙💛 @ifsecure
18K Followers 207 Following Security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
starlabs @starlabs_sg
9K Followers 20 Following A Singapore company that discovers vulnerabilities to help customers mitigate the risks of cyber attacks. Organisers of @offbyoneconf
Saagar Jha @_saagarjha
5K Followers 159 Following
Mobile Security @mobilesecurity_
32K Followers 1K Following Mobile Security ✌🏻 #MobileSecurity #AndroidSecurity #iOSsecurity
kmkz @kmkz_security
19K Followers 2K Following Offensive Security, pom-pom girl... Who cares ?? Bourbon Offensive Security Services | BOSS
Csaba Fitzl @theevilbit
8K Followers 1K Following macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://t.co/Xf7KDW5fKu
Samuel Groß @5aelo
24K Followers 501 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
Objective-See Foundat... @objective_see
19K Followers 1 Following 🍎 🛡️ 🛠️ Open-Source Tools 📚 "The Art of Mac Malware" books 🫂 "Objective by the Sea" conference Support us on https://t.co/tuGceSeyiC 🙏
Haifei Li @HaifeiLi
8K Followers 151 Following For contact in the security community. NOTE: All the tweets are totally my personal opinions, not about any of my current employer stuff.
NULLCON @nullcon
22K Followers 2K Following International #Security Conference, Training & Exhibition Platform - the neXt security thing! ✈️Up next #NullconBerlin2025
Vector 35 @vector35
10K Followers 2K Following Makers of the Binary Ninja - Reverse Engineering Platform. https://t.co/opkys50srq Also posting at https://t.co/2HEfgOtSSR
Yarden Shafir @yarden_shafir
24K Followers 309 Following A circus artist with a visual studio license
Himanshu Bharti @xpl0itmE
451 Followers 2 Following 💻 Security researcher driven by curiosity and code. Sharing insights, learning every day. [email protected]
Renwa @RenwaX23
8K Followers 59 Following
VMware Fusion @VMwareFusion
23K Followers 454 Following Develop, Test and Run Apps for nearly any OS right from your Mac
Infosec In the City (... @Infosec_City
1K Followers 77 Following IIC is an international cybersecurity capability & capacity development network. IIC organises training, events & conferences tailored to the city it is hosted.
Pedro José Pereira V... @pvieito
814 Followers 611 Following Data & Electronics Engineer. Swift Developer. 🇪🇺
Lyutoon @Lyutoon_
922 Followers 289 Following PhD student | CTF @Nu1L_Team & @StrawHat_CTF | AI + Security | Fuzzing | Collecting xx HoF | BlackHat Speaker | LLM4Shell
Mark Rowe @bdash
625 Followers 110 Following Pinball, pinball, pinball. And some computer security nonsense too. https://t.co/4NkQsMtiG6
Oligo Security @OligoSecurity
245 Followers 23 Following
deepsec.cc @deepsec_cc
254 Followers 0 Following
p1tsi @p1tsist1p
56 Followers 275 Following (deny default)(deny connections-inbound (remote profile “spam”))(allow likes-*)(allow comments-*)(deny comments-inbound (content-type “spam”))(opinions mine)
Hichem Maloufi @hichem_ifpdz
4K Followers 5 Following Founder/CEO of iRemoval PRO Ltd. | Cybersecurity Researcher 🧑💻 | Developer / Programmer 🥷🏻
James D @0x4A616D657344
7K Followers 720 Following interested in all things *OS • Aspie • opinions expressed are my own.
quarkslab @quarkslab
12K Followers 9 Following Securing every bit of your data https://t.co/hqdd8jMkYM https://t.co/GOXPtukIXE
Dillon Franke @dillon_franke
1K Followers 398 Following Fuzzing, MacOS, vuln research @Google. Jesus Follower
Yiğit Can Yılmaz @yilmazcanyigit
3K Followers 605 Following Computer Engineer | Cyber Security Analyst
tsvik6 @tsvika_m
584 Followers 1K Following As my grandfather used to say «zero clicks, tons of charm» . research, 0-days, trainings, collaboration, fuzzers and more
Mateusz Krzywicki @krzywix
2K Followers 807 Following 🐛 bugs and 🤯 exploits (Opinions are my own and not my employer)
Eisw0lf @eisw0lf
121 Followers 400 Following 🇫🇷 | Vulnerability Researcher @ Lupus Nova | BlueSky : https://t.co/B8syMl6sFh
b33f | 🇺🇦✊ @FuzzySec
33K Followers 1K Following 意志 / Antiquarian @ IBM X-Force / t501 / Ex-TORE ⚔️🦅 / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs
Joseph Ravichandran @0xjprx
4K Followers 546 Following PhD Student studying Microarchitectural Security @MIT
Mykola Grymalyuk @khronokernel
5K Followers 123 Following Stuff at Fruit Co. Formerly OpenCore Legacy Patcher.
Hexacon @hexacon_fr
5K Followers 1 Following Offensive security conference in the heart of Paris. 10-11th October 2025 Join our Discord server! https://t.co/Btl15G8LsI
alden @birchb0y
3K Followers 2K Following sr threat researcher @ huntress • re/malware enjoyer • macOS security
Mikko Kenttälä @Turmio_
1K Followers 397 Following Hacking, Cyber and politics. Founder and CEO of @SensorFu. Board member: @KyberVPK / @JK_ry . InfoSec Specialist @effi_ry
Manfred Paul @_manfp
5K Followers 315 Following Security but not as in "national security". Playing CTFs with @redrocket_ctf (and @Sauercl0ud). Pwn2Own Vancouver 2020..=2024\{2023}. @[email protected]
Marc Newlin @marcnewlin
3K Followers 737 Following Hacker. Engineer. Burner. I'm a DARPA challenge junkie, and recently acquired a fourth pair of pants. #BlackLivesMatter.
风沐云烟 @binary_fmyy
559 Followers 41 Following
ApplSec @ApplSec
1K Followers 3 Following Stay up-to-date with security fixes to Apple's ecosystem! 📲 💻 - Not affiliated with Apple Inc. 🍎 - @[email protected] 🐘 - @applsec.bsky.social 🦋
Nathan @dedbeddedbed
7K Followers 413 Following minecraft and jailbreaking/messing with iOS Discord: pvpnathan My Jailbreak Repo/Site: https://t.co/18TzxHa8ag
AJ @justandrijana
597 Followers 402 Following Janai researcher. AJ around the world. RCEPECT. CEO of SAFA Team.