Google’s December Android update addresses 107 security flaws, including two Framework vulnerabilities already exploited in targeted scenarios. The release also patches a critical DoS issue and multiple vendor-specific components across major chipsets.

How should mobile ecosystems improve patch adoption across fragmented devices?
Follow us for more neutral, technical cybersecurity updates.

Source: https://thehackernews.com/2025/12/google-patches-107-android-flaws.html

#infosec #androidsecurity #zeroday #vulnresearch #mobilesecurity #threatintel #googlepatch #securitybulletin #technadu

Quote of the day: "Nicely done. It doesn’t undo all the (often rightly deserved) bad press that AI agents have received lately, but good news is good news."

https://www.vice.com/en/article/google-big-sleep-first-ai-to-ever-prevent-cyberattack/

#BigSleep #VulnResearch

Apparently I missed my original calling as a sociologist, so I’m making up for lost time by asking you about your thoughts on infosec! Do you feel you do meaningful work? How much is ritual compliance to appease the audit gods? Tell me your bullshit job stories.

https://cryptpad.fr/form/#/2/form/view/0LcyFXPJZeAxygGbkXq7T98f+mx2i6gJeaGpYZIy-AA/

Please reboost ❤️

#infosec #cyberSecurity #vulnResearch

Vulnerability hunting: it’s like hide-and-seek, but the bugs didn’t realize they were playing.

#VulnResearch #Infosec

#introduction

👋 Hi, I’m Alison Breacher (she/her), a cybersecurity researcher focused on finding vulnerabilities and helping make everyday systems more secure. I enjoy digging into the details to turn security gaps into solutions. When I’m not reverse engineering or testing systems, I’m usually learning new tools or collaborating on projects with the infosec community.

Always up for a good challenge and excited to see where this journey takes me next. #Cybersecurity #BugHunter #VulnResearch

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models

https://googleprojectzero.blogspot.com/2024/06/project-naptime.html

#llm #cybersecurity #vulnresearch

Great research, identifying nine vulns affecting the IPv6 stack in a UEFI implementation - exploitable during network boot (aka Pixie boot)
https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html

#ipv6 #vulnresearch

In July 2023, we reacted to an attempt to load a driver named pskmad_64.sys. This led to the discovery of three CVEs in the widely used security driver used by many Panda Security products:

https://news.sophos.com/en-us/2024/01/25/multiple-vulnerabilities-discovered-in-widely-used-security-driver/

List of CVEs also on my personal website: https://malwareandstuff.com/vulnerability-research/

#malware #cve #vulnresearch #infosec #cybersecurity