Security Researcher
Joined May 2013
- Tweets2.5K
- Following691
- Followers2.5K
- Likes956
How abliterated models can get you pwned projectdiscovery.io/research…
Dimitri Fourny retweeted
Wrote up my attempt at deobfuscating Luraph-protected Lua: lifting Lua to LLVM IR , then using AI + partial evaluation to strip the VM, and checking it against the original.
nac-l.github.io/2026/10/12/d…
MagicWine: a Wine-based app for playing Windows games on macOS, with a native SwiftUI interface.
An experiment in AI-assisted development, built in 3 days with a $100 ChatGPT Pro plan.
github.com/DimitriFourny/mag…
Dimitri Fourny retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
Dimitri Fourny retweeted
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now.
back.engineering/blog/31/07/…
Dimitri Fourny retweeted
The bug itself is esoteric, it's a UAF but there is no alloc or free at all.
How is this possible? Simply put, the variable is allocated on the stack and freed by the OS itself whenever an esoteric condition happens by the OS.
I hope you'd enjoy this one
guysrd.github.io/futex-read-…
OffensiveCon 2026 talks: youtube.com/playlist?list=PL…
Dimitri Fourny retweeted
For a deeper look into this zero-day vulnerability, including the full root-cause analysis, proof of concept, exploitation, and patch analysis, check out our newly published blog post: zellic.io/blog/pwning-v8ctf
Dimitri Fourny retweeted
If you missed the talk at @1ns0mn1h4ck , our latest blog post is now available for you to explore.
In this post, researchers @Hacker_Chai and @SachaKozma detail their journey to a 1-click RCE exploit on the Samsung S25 phone.
Check it out here: bugscale.ch/blog/shoot-for-t…
Dimitri Fourny retweeted
In collaboration with Lookout and Google (thank you 🙏) we have been working on tearing down and building detections for DarkSword - iOS exploit chain for iOS 18.4 - 18.7. Super excited for this research 🎉. Please update your iPhones.
iverify.io/blog/darksword-io…
From virtio-snd 0-Day to Hypervisor Escape: Exploiting QEMU with an Uncontrolled Heap Overflow - osec.io/blog/2026-03-17-virt…
Dimitri Fourny retweeted
Want to learn more about Chrome exploitation?
In our latest article, we break down two critical Android GPU driver vulnerabilities that enabled Chrome sandbox escape from a compromised renderer and were used in full device exploit chains. Read the full technical analysis here: ssd-disclosure.com/chrome-gp…
Dimitri Fourny retweeted
🚀 Introducing the Qwen 3.5 Medium Model Series
Qwen3.5-Flash · Qwen3.5-35B-A3B · Qwen3.5-122B-A10B · Qwen3.5-27B
✨ More intelligence, less compute.
• Qwen3.5-35B-A3B now surpasses Qwen3-235B-A22B-2507 and Qwen3-VL-235B-A22B — a reminder that better architecture, data quality, and RL can move intelligence forward, not just bigger parameter counts.
• Qwen3.5-122B-A10B and 27B continue narrowing the gap between medium-sized and frontier models — especially in more complex agent scenarios.
• Qwen3.5-Flash is the hosted production version aligned with 35B-A3B, featuring:
– 1M context length by default
– Official built-in tools
🔗 Hugging Face: huggingface.co/collections/Q…
🔗 ModelScope: modelscope.cn/collections/Qw…
🔗 Qwen3.5-Flash API: modelstudio.console.alibabac…
Try in Qwen Chat 👇
Flash: chat.qwen.ai/?models=qwen3.5…
27B: chat.qwen.ai/?models=qwen3.5…
35B-A3B: chat.qwen.ai/?models=qwen3.5…
122B-A10B: chat.qwen.ai/?models=qwen3.5…
Would love to hear what you build with it.
Dimitri Fourny retweeted
It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊
The code is right here! Enjoy: github.com/googleprojectzero…
Dimitri Fourny retweeted
We’re releasing our analysis of ring-1.io, a major game cheat targeted by multiple studios in recent legal actions. We partially deobfuscated several Themida-protected components and document how it hijacks Hyper-V to inject and manipulate game code.
back.engineering/blog/04/02/…
github.com/backengineering/r…
Dimitri Fourny retweeted
We've found a high-severity zero-day vulnerability in Firefox using @WeAreAisle's autonomous AI security system. It's now going by the name of CVE-2025-13016.
If you're interested, here's my detailed technical blog post: aisle.com/blog/a-high-severi…
Dimitri Fourny retweeted
My first technical blogpost is out now!
Check it out: blog.dfsec.com/ios/2025/10/1…
Thanks for the DFF team for their support and to the dfsec people for posting it!
Special thanks to @iBSparkes for his assistence :)
Our newest @dfsec_com blog post is live, thanks to @tomitokics from @df_forensics for putting this together :-)
blog.dfsec.com/ios/2025/10/1…
Dimitri Fourny retweeted
Writeup for the 3rd hole exploitation technique :-).
github.com/mistymntncop/CVE-…
