deepsec.cc | Chapter III
AI rises, old ways falter; they say security research nears dusk.
When the world no longer believes in knights—shall we still be Quixote?
📧 [email protected]
🌐 deepsec.cc
📅 July 24, 2026
📍 Shanghai, China
#deepsec "IsolatOS: A Fast Kernel TOCTOU Harness for AI Training" by Haowei Yang, Yingjie Cao & @bestswngs. AI can fuzz its way into plenty of bugs, but TOCTOU races stay invisible — no crash, no signal, no reward. They built the harness that puts TOCTOU in the training loop.
#deepsec "A Journey to Break Apple's PPL". PPL's been the kernel's last line of defense on A12+ for years, and it's held up. @pattern_F_ shares two ways through — and maybe one opens the door to an iOS 26 jailbreak…? 🙊 deepsec.cc/202607/speaker-pa…
#deepsec "One Chain to Own Them All: Breaking AI Infrastructures". weights_only is the protection everyone leans on. @azraelxuemo & @llfamsec got past it — one heap overflow (CVE-2026-24747) hitting vLLM, ComfyUI, Elasticsearch & more, on default configs. deepsec.cc/202607/speaker-ji…
#deepsec "Tearing Down DarkSword". An iOS one-click chain, all in JavaScript — breaks PAC via SPRR-protected dyld, takes read/write in GPUProcess, rides to kernel r/w. @WHW_0x455 unpacks it link by link. 👉deepsec.cc/202607/speaker-ha…
#deepsec "The Latest In-the-Wild Qualcomm GPU Vulnerability: Cross-Version Exploitation Details". Same code, but it only fires on some versions. It digs into why — and how the exploit stays reliable across them. 👉deepsec.cc/202607/speaker-re…
#deepsec "Design-Based Vulnerabilities on macOS: 0ops, Not a One-Shot Fix". Patching one exploit path doesn't kill a design-based bug — a new path just brings it back. @Guluisacat shares flaws that reach LPE on any app, even the ones Apple signs itself. 👉deepsec.cc/202607/speaker-zh…
[Official Announcement]
Deep Security Closed-door Conference
Chapter Ⅲ. All roads lead to Rome.
Call for Papers Now Open!
(Submission deadline: June 24, 23:59 UTC+8)
📧 [email protected]
🌐 deepsec.cc
📅 July 24, 2026
📍 Shanghai, China
So glad to have friends like you joining us.😺 See you at #deepsec 12/16/2025 Shanghai!
Hello security folks! I missed @0x41con 🥹, but this December I finally arranged trip to another nice and warm security conference in Shanghai. It’s my first time watching my friend @CodeColorist speak in person, im super excited. See you there!
deepsec.cc
2025 | Chapter Ⅱ
Deep Security Closed-door Conference
SEVEN TOPICS & TWO DEBATES
Where Technology Speaks Loudest
📧 [email protected]
🌐 deepsec.cc
📅 December 16, 2025
📍 Shanghai, China
#deepsec 12/16/ 2025 "Do not omit function return values: Bug hunting and exploitation in the Kirin GPU kernel module" by @hzshang15 shows how missed return checks in Huawei Kirin GPU cause page UAF escalations, HKIP bypass, and EL1 code execution. deepsec.cc
#deepsec 12/16/ 2025 "Parcel Security in Android: From Mismatch to Use-After-Free" by @yang_is_here reviews Parcel hardening and shows Parcel UAF exploits that steal Binder tokens and reach code execution, with lessons and new mitigations. deepsec.cc
#deepsec 12/16/2025 "Privilege Is the Prelude: Chaining an LPE to Two Root-Required Bugs for Full TCC on macOS" by @Y1nKoc @binary_fmyy @Mas0nShi will present a practical vulnerability chain that crosses the TCC boundary using 3 vulnerabilities.👉 deepsec.cc
#deepsec 12/16/ 2025 "Attacking Apple Display Co-processor" by Ye Zhang maps Apple’s DCP attack surface, shows firmware analysis and fuzzing that led to 14 CVEs and code execution on the display coprocessor, and reviews Apple’s fixes and new mitigations. deepsec.cc
[Official Announcement]
Deep Security Closed-door Conference
Chapter II. Ignite Again!
Call for Papers Now Open!
(Submission deadline: November 16, 23:59 UTC+8)
📧 [email protected]
🌐 deepsec.cc
📅 December 16, 2025
📍 Shanghai, China
