Cybersecurity blog posts, writeups, papers, and tools

https://github.com/0xor0ne/awesome-list

#infosec

Great 3-parts series on 0-click exploit chain targeting Android Pixel 9
Arbitrary code execution in mediacodec -> kernel privilege escalation

Part 1: https://projectzero.google/2026/01/pixel-0-click-part-1.html
Part 2: https://projectzero.google/2026/01/pixel-0-click-part-2.html
Part 3: https://projectzero.google/2026/01/pixel-0-click-part-3.html

Research by Natalie Silvanovich and Seth Jenkins

#infosec

Apple SEAR is hiring offensive security researchers!

We’re looking for talented researchers across multiple areas of security.

Check out the job description here:
https://jobs.apple.com/en-us/details/200623813-2911/offensive-security-researcher?team=SFTWR

If you’re interested in low level systems like RTOS, firmware, coprocessors, embedded components, or microkernels, my team would especially like to hear from you.

Feel free to reach out if you have any questions.

#infosec

"Challenges and Pitfalls while Emulating Six Current Icelandic Household Routers"

Evaluation of different tools for routers firmware emulation
(FACT, QEMU, EMUX, Qiling, Firmadyne, FAT, FirmAE, Pandawan, and EMBA)

https://skemman.is/bitstream/1946/50456/1/Challenges_and_Pitfalls_while_Emulating_Six_Current_Icelandic_Household_Routers.pdf

#cybersecurity #embedded

"My Emulation Goes to the Moon... Until False Flag" by Retooling

Exploring the re-implementation of APT41 Scatterbrain's obfuscation

https://retooling.io/blog/my-emulation-goes-to-the-moon-until-false-flag

#malware #cybersecurity

"Compromise of Fuse Encryption Key for Intel Security Fuses"

https://swarm.ptsecurity.com/last-barrier-destroyed-or-compromise-of-fuse-encryption-key-for-intel-security-fuses/

#infosec #intel

Beginners introduction to Fault Injection (voltage glitching) attacks (esp32)

https://security.humanativaspa.it/fault-injection-down-the-rabbit-hole/

#hardware #cybersecurity

Exploiting uc-httpd to achieve RCE

https://modzero.com/en/blog/roping-our-way-to-rce/

#infosec

"CTF" challenge introducing Linux kernel exploitation

https://gum3t.xyz/posts/a-gau-hack-from-euskalhack/

#infosec #Linux

Bypass Linux kernel isolation technique using BPF infrastructure

https://cs.brown.edu/~vpk/papers/epf.atc23.pdf

#Linux #cybersecurity