Pinned Tweet
I was supposed to present @InfiltrateCon on attacking chrome today. I may publish a post soon before the actual, complete talk in October. Meanwhile, you guys can check out my @doar_e articles as well as my @typhooncon talk 🙃 doar-e.github.io/tag/v8.html doar-e.github.io/pages/prese…
Jeremy Fetiveau retweeted
How’s that FOMO holding up one month on? 👀
Whether you missed out or just want to relive the best bits, the unprompted.au talks are now online!
All the AI. All the cyber. None of the FOMO. 🐙
youtube.com/@unpromptedAU
Jeremy Fetiveau retweeted
Apple's M6 brings a new gem: checked pointer arithmetic (CPA).
Let’s dig in: almamatertech.com/notes/chec…
Back from @UnpromptedAU after a short 2-days trip back to Europe!
I think @mdowd 's keynote was very on point. Makes the world understand what it takes to fly to/from Oz 😁🇦🇺
Jeremy Fetiveau retweeted
A big welcome to @epsilon_sec!
They’re joining the BSides Canberra sponsor family for the first time in 2026.
Thanks for getting behind BSides and supporting our community, great to have you on board!
epsilon-sec.com
Jeremy Fetiveau retweeted
Thanks guys!!
Thank you @epsilon_sec for supporting unprompted.au 2026.
Deep technical expertise, sharp security research and a team that knows how to tackle hard problems. We’re stoked to have Epsilon supporting the conference and the community around it!
Jeremy Fetiveau retweeted
Thank you @epsilon_sec for supporting unprompted.au 2026.
Deep technical expertise, sharp security research and a team that knows how to tackle hard problems. We’re stoked to have Epsilon supporting the conference and the community around it!
Jeremy Fetiveau retweeted
New terminology alert! Welcome to the multiverse of the half-day: margin.re/2026/08/introducin…
Jeremy Fetiveau retweeted
We’re excited to announce that @epsilon_sec is supporting Super Guesser’s participation in DEF CON CTF 2026!
Their support will help bring our international team together in Las Vegas and allow us to focus on the competition.
Thank you for supporting us!
Jeremy Fetiveau retweeted
youtube.com/live/iZE_iHcv7_0…
Our researchers spent several weeks developing a full Chrome exploit chain and wondered about the current state-of-the-art in this area.
For the benefit of the community, we invited the GOAT of browser exploitation, @5aelo, to share his perspectives on modern browser security and exploitation.
This event will be live-streamed on YouTube and open to everyone.
Submit your questions: forms.gle/5gDKBibS6WkDx3ck9
Add to Google Calendar: calendar.google.com/calendar…
Add to Outlook Calendar: outlook.office.com/calendar/…
Jeremy Fetiveau retweeted
📱 L'application Shindan est maintenant disponible sur le Google Play Store
Après iOS et iPadOS, vous pouvez désormais réaliser vos analyses de sécurité directement depuis vos terminaux Android.
Cette nouvelle application complète notre écosystème, incluant notre application iOS et nos plateformes SaaS et On-Premise, pour répondre aux besoins critiques de vos équipes opérationnelles.
Qu'il s'agisse des CERT et CSIRT ayant besoin de qualifier rapidement une menace mobile, ou des équipes support VIP devant vérifier l'intégrité d'un terminal en quelques instants, nos solutions assurent une analyse efficace, sans immobilisation de l'appareil et sans accès aux données personnelles.
L'objectif reste le même : vous fournir une visibilité immédiate sur l'état de sécurité de votre parc, quel que soit l'environnement de déploiement.
Si vous souhaitez intégrer nos capacités d’analyse à vos processus de sécurité, contactez-nous via le lien en premier commentaire. ⬇️
#CyberSecurity #Shindan #MobileSecurity #Android
Jeremy Fetiveau retweeted
Pour notre première rump acceptée, @angel_killah nous parlera de reverse de jeu d'arcade dans sa rump "A practical example of how arcade games cheat you"
Jeremy Fetiveau retweeted
Together with @pedrib1337 we just completed the HZED training! Was amazing and we learned a lot!
Jeremy Fetiveau retweeted
Episode 95: Vigilant Labs director Mark Dowd joins the show to shed light on the state of offensive research, the economics of the exploit market, and why "Mark Dowd in a box" isn't quite the threat the AI hype machine suggests.
He talks through the daily stresses of running an offensive shop, how AI is reshaping vulnerability discovery, exploit development, and the pricing of full exploit chains.
Plus, thoughts on Lockdown Mode and Apple's MIE, whether mitigations actually work or just push attackers toward less access, the rise of HarmonyOS and the Balkanization of device security, persistence, baseband attacks, GrapheneOS, and Samsung Knox.
We discuss customer vetting and OpSec fears, policymakers who've never written an exploit, and the strange afterlife of The Art of Software Security Assessment, the 20-year-old book now possibly training data for the very tools coming for his job.
@mdowd @juanandres_gs @craiu @wearetlpblack
YouTube youtu.be/NEDlOKHG8nY?si=19wE…
Sunday listening 👇🏽 podcasts.apple.com/us/podcas…
Jeremy Fetiveau retweeted
0x41con 7
Mad props to Anna and @qwertyoruiopz for hosting and organising this edition!
Kudos to all the speakers!
And thank you all for being part of it!
Jeremy Fetiveau retweeted
Après 4 ans d'absence, BeeRumP revient ! 🍻
Le concept : des rumps (~10min) et de la bière à volonté, l'occasion de présenter des projets perso avec humour !
La soirée aura lieu dans les locaux d'Epita à Paris, le vendredi 19 juin.
Envoyez vos rumps à [email protected] :)
Jeremy Fetiveau retweeted
Blog post: On the Coming Industrialisation of Exploit Generation with LLMs sean.heelan.io/2026/01/18/on…
TL;DR: I ran an experiment with GPT-5.2 and Opus 4.5 based agents to generate exploits for a zeroday QuickJS bug. They're pretty good at it.
Code: github.com/SeanHeelan/anamne…