Things got busier than expected, but everything’s going well. 👍

DEF CON 34 with Jinddabi’s 6th in quals, 7th in finals Learned a lot and took away a lot from this experience :) #DEFCON34 #DEFCON

This is exactly what I needed claude.com/form/cyber-use-ca… chatgpt.com/cyber

Wrapped up BOB14 grabbed some bounty on the way. Not bad at all.

🍎 CVE-2026-28817 @G1uN4sh, with @4ncientH @leegn4a @DQPC_lover @R4mbb1 @gap_dev Discovered by BoB 0xb6 team.

🍎CVE-2026-28868 XNU :)

🍎CVE-2026-20695 XNU bug! [ZDI-CAN-28499]

Received $1,000 from Apple’s bug bounty program! Old report, but a nice surprise🎁

Getting ready to try something academic🎓 tkips.kips.or.kr/digital-lib…

I’m not affiliated with Talos. I’m an independent security researcher, so I don’t really know the details of the other bug. For my bug, I found it quite a while ago, and it looks like the credit process got missed after I reported it (it’s being sorted out now lol). As for exploitation: at least when I analyzed it back then, I didn’t see a viable way to get a shell. Even though it’s a stack overflow, I couldn’t find a memory layout that I could realistically overwrite in a useful way.

CVE-2025-23339 My first NVIDIA CVE🎉 (found via grammar-based fuzzing)

CVE-2025-10500 (+15000 usd) When will they update my credit?😂

🍎CVE-2025-43511 (+1000 usd)

4th place🙃