Security Research on Quadruped Robot Unitree Go2 Pro (part 2) blog.78researchlab.com/3eddb… by @78_lab

I spent way too long poking at MCP servers this last year, and as expected.. it's bad! (Well .. most times anyways :D). Sql injection, eval() RCE, path traversal. same stuff we were finding 15 years ago, just wearing an AI hat now. Some of them even handed over AWS creds through SSRF without much of a fight. Prompt injection one still bugs me though! I mean you just hide instructions in a tool response and the model most times just... runs with it? crazyy! Anyway.. wrote up the 5 that kept showing up. Payloads, fixes, all of that fun stuff. If you're running MCP near prod, go look. Got some more vulnerable samples also for you in here to play with. Check out : linkedin.com/pulse/top-5-way… #AISecurity #MCP #LLMHacking

Before you pull another giant AI LLM, check if Q4 even fits. Pick your hardware… it shows what runs, how fast it’ll feel, and if an upgrade is worth it. huggingface.co/spaces/0xSoja…​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​ #LLM

Watching people on here treat the lack of MTE like a remote root exploit on every Pixel is peak comedy. It was a runtime band-aid for legacy C with a 1-in-16 collision rate and zero intra-object defense that stock Android barely used anyway. Modern memory safety is won in Rust and pKVM. You'll survive without it… Breathe! #Pixel #infosec

Excellent post on Android Hardware Attestation and how to bypass it - blog.quarkslab.com/bypassing… #MobileSecurity #AndroidSecurity

New SecureROM exploit for Apple A12/A13 devices that achieves boot-chain compromise via a USB controller hardware flaw. Technical write-up + PoC: ps.tc/pages/blog-usbliter8.h… #MobileSecurity #infosec #Apple #DFIR

How Codex rooted a Samsung TV blog.calif.io/p/codex-hacked… #AndroidSecurity #MobileSecurity

uXSS on Samsung Browser [CVE-2025-58485 SVE-2025-1879] - blog.voorivex.team/uxss-on-s… #MobileSecurity #AndroidSecurity #samsung

CVE-2025-43530: Exploiting a private API for VoiceOver - jhftss.github.io/CVE-2025-43… #Apple #cve #infosec #dfir

Modern iOS Security Features – A Deep Dive into SPTM, TXM, and Exclaves arxiv.org/pdf/2510.09272 #MobileSecurity #iOS #DFIR

A Reverse Engineer’s Anatomy of the #macOS Boot Chain & Security Architecture - stack.int.mov/a-reverse-engi… #DFIR #infosec

Exploiting CVE-2025-21479 on a Samsung S23 - xploitbengineer.github.io/CV… #MobileSecurity #Android #infosec

One‑Click Memory Corruption in Alibaba’s UC Browser: Exploiting patch-gap V8 vulnerabilities to steal your data interruptlabs.co.uk/articles… by @InterruptLabs #MobileSecurity #Browser #exploit #infosec

CVE-2025-5419 POC Google Chrome heap corruption via a crafted HTML page github.com/mistymntncop/CVE-… #CVE #chrome #infosec by @mistymntncop

Android Physical Memory: CVE-2025-21479 Power-up Record - dawnslab.jd.com/android_gpu_… #MobileSecurity #infosec #dfir #Android

FiberGateway GR241AG - Full Exploit Chain - r0ny.net/FiberGateway-GR241A… #IoT #Exploit #infosec #forensic

PoC for bootchain exploit on the Nothing Phone 2a / CMF Phone 1 and possibly other MediaTek devices github.com/R0rt1z2/fenrir #MobileSecurity #DFIR #infosec by @r0rt1z2

CVE-2025-21479 Meta Quest 3 privilege escalation Exploit poc - github.com/FreeXR/eureka_pan… #root #MobileSecurity #infosec #dfir