Alexandre Borges

The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets: exploitreversing.com In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors. #exploit #exploitation

Exploiting Reversing Series (ERS) | Article 11: Windows: Missing Bounds in the Print Spooler 60 pages, free. An unpatched heap overflow in spoolsv.exe, taken from a missing bounds check to SYSTEM — without crashing the service. www.blackstormsecurity.com/research/ #Windows #ExploitDevelopment

A story of wifi secrets, UART lockdowns and a damaged flash memory chip: adepts.of0x.cc/eufy-homesta... #cybersecurity #hardware #hardwarehacking #infosec #informationsecurity

Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: www.blackstormsecurity.com/research/ Hope you enjoy the read!

Branch Target Reuse, BTR: New Spectre V2 Attack Targeting JIT Compilers: www.vusec.net/projects/btr/ #cybersecurity #infosec #exploitation #vulnerability #jit #cpu

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution: google.github.io/security-res... #cybersecurity #vulnerability #infosec #exploitation #linux #bluetooth #rce

Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 1: pgj11.com/posts/Window... Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 2: pgj11.com/posts/Window... #cybersecurity #exploit #exploitation #vulnerability #drivers

VM guest escape via 9p filesystem exploit: gitlab.com/qemu-project... #qemu #exploitation #vulnerability #informationsecurity #infosec #cybersecurity

Malwoverview 8.2.0 is out: github.com/alexandrebor... To install it: python -m pip install -U malwoverview[all] New: --nist 6 lists all CVEs associated with a component #malware #cybersecurity #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute: blog.sentry.security/beyond-promp... #apple #vulnerability #cybersecurity #informationsecurity #cve

Qualcomm’s Adreno X2 GPU: chipsandcheese.com/p/qualcomms-... #gpu #infosec #qualcomm #engineering

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill: heyitsas.im/posts/lpe-qu... #cybersecurity #vulnerability #exploit #infosec #linux

CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining: mrtiz.github.io/cet-callstac... #cybersecurity #programming #infosec #hacking #redteam

The articles already published in the Exploiting Reversing series (ERS) are now hosted on a new website: blackstormsecurity.com/research/ Future articles will be published primarily at this new address, and for a time, I will also publish them on my personal blog. #exploit #vulnerability

[0-Day] Windows USB Print Out-of-Bounds Read Vulnerability - The String Descriptor That Wasn’t zeifan.my/usbtersakiti/ #cybersecurity #windows #vulnerability #infosec #exploitation

A "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF: nebusec.ai/research/cve... #cybersecurity #infosec #informationsecurity #lpe #linux #kernelctf #exploitation

It is with great pleasure that I announce I am a co-author of the Seventh Edition of Gray Hat Hacking, alongside outstanding cybersecurity minds such as Stephen Sims, Valentina Palmiotti, Natalie Silvanovich, Luna Tong, Pavel Yosifovich, Moses Frost, and Huascar Tejeda! Stay tuned!

Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day: www.gendigital.com/blog/insight... #cybersecurity #infosec #informationsecurity #rootkit #vulnerability

Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse www.akamai.com/blog/securit... #edr #programming #cybersecurity #informationsecurity

Linux Bridge STP Timer Use-After-Free: ssd-disclosure.com/linux-bridge... #linux #exploit #exploitation #vulnerability #informationsecurity #cve #patch #cybersecurity

Malwoverview version 8.1.0 is available: github.com/alexandrebor... To install it: $ python -m pip install -U malwoverview The number of changes is significant, so it is recommended reading the README.md: #malware #threathunting #vulnerability #informationsecurity #infosec #cybersecurity

The WordPress Chain Massacre: blog.calif.io/p/the-wordpr... #cybersecurity #informationsecurity #vulnerability #exploitation #infosec

SPIR-V on ROCm: A Portable IR for AMD GPUs: A follow-up post will discuss a real-world SPIR-V deployment at scale: PyTorch." rocm.blogs.amd.com/software-too... #cybersecurity #informationsecurity #processors #architecture #infosec

FirmBurn: How Firmware Zero‑Day & SCSI PassThru Burned Iran Banks aleeamini.com/firmburn-fir... #cybersecurity #reverseengineering #informationsecurity #firmware #zeroday #exploitation #infosec

CVE-2026-50469 - ProjFS File Delete bad-jubies.github.io/projected-fi... #windows #vulnerability #exploitation #exploit #cve #informationsecurity

SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode vanbulck.net/files/woot26... #cybersecurity #smm #platformsecurity #informationsecurity #infosec

Frag Gap: blog.qwerty.or.kr/en/posts/cdf... #kernel #network #cybersecurity #informationsecurity #exploitation #vulnerability #cve

Hunting Memory Leaks in bsnmpd with DTrace: oshogbo.com/blog/92/ #dtrace #cybersecurity #informationsecurity #infosec #performance

The work continues... a third vulnerability in just a few days, and like the other two, this one also affects iOS 26.5 and iOS 26.5.2. The challenge, as usual, centers on the next steps for exploitation. #ios #vulnerability #apple

Redis 8.6: Remote Code Execution via Stream PEL Use After Free: zerotistic.blog/posts/redis-... #linux #vulnerability #exploitation #informationsecurity #infosec #cybersecurity

Malwoverview 8.0.5 (Revolutions): github.com/alexandrebor... #cybersecurity #malware #threathunting #informationsecurity #dfir

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503): research.jfrog.com/post/dissect... #cve #linux #cybersecurity #informationsecurity #exploitation #vulnerability

BitLocker downgrade attacks: archives.pass-the-salt.org/Pass%20the%2... #windows #bitlocker #infosec #informationsecurity #cybersecurity #crypto

A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabytes: www.msuiche.com/posts/nanokr... #kernel #infosec #programming #rust #windows #hacking

TrigonLegacy - Deterministic iOS 7-9 tfp0: therealclarity.github.io/blog/trigon-... #ios #apple #exploitation #informationsecurity #cybersecurity #vulnerability #reverseengineering

(remember) Introducing usbliter8: ps.tc/pages/blog-u... #cybersecurity #ios #exploitation #exploit #bootrom #iphone #informationsecurity #infosec

Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215): cyberstan.co.uk/drm-lpe-linux/ #linux #kernel #vulnerability #cybersecurity #exploitation

Spiteful Fruit - AppleRAID Kernel Heap OOB Write: ret2p.lt/2026/06/30/s... #cybersecurity #informationsecurity #iOS #apple #vulnerability #informationsecurity #infosec #exploitation

Another vulnerability in iOS 26.5 with a clear and reproducible crash, registers control, primitive and PoC confirmed, and possibly a working exploit... who knows... ;)

Zombie COTables: Resurrecting Freed Memory to Escape VirtualBox: blog.exodusintel.com/2026/06/15/z... #vulnerability #exploitation #exploit #virtualbox #cybersecurity #infosec #informationsecurity

Malwoverview 8.0.2 has been released: github.com/alexandrebor... To install it: python -m pip install -U malwoverview[all] #malware #threathunting #informationsecurity #infosec #vulnerability #cve #dfir

Bypassing SSL Pinning on Play Store AVDs without Frida www.mfumis.com/posts/bypass... #cybersecurity #informationsecurity #frida #mobiledevice #infosec #mobilesecurity #mobile

Authenticated RCE via Argument Injection in Gogs (NOT FIXED): www.rapid7.com/blog/post/ve... #cybersecurity #vulnerability #rce #informationsecurity #exploitation

Striga: Lifting x86 to LLVM IR with Python: secret.club/2026/05/21/s... #python #reversing #llvm #informationsecurity #infosec #cybersecurity

GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095): securitylab.github.com/advisories/G... #vulnerability #cybersecurity #informationsecurity #exploitation #cve

Arbitrary Kernel Address Increment via NtQuerySystemInformation: pwn2nimron.com/blog #vulnerability #informationsecurity #exploitation #cybersecurity #exploit #windows

CVE-2026-28910: Breaking macOS App Sandbox Data Containers, TCC, and Hijacking Apps Using Archive Utility: mysk.blog/2026/05/19/c... #macOS #exploitation #infosec #informationsecurity #vulnerability #cve #exploit

FatGid+4: A four-byte type, an eight-byte stride, one root shell. fatgid.io #vulnerability #exploit #cybersecurity #informationsecurity #freebsd

New Age of Collisions: Reading Arbitrary Files Pre-Auth as root in cPanel (CVE-2026-29205): (blog) slcyber.io/research-cen... (tool) github.com/assetnote/cp... #cve #vulnerability #cybersecurity #informationsecurity #authentication

Kernel-Exploit-Dojo: github.com/mito753/Kern... #kernel #ctf #informationsecurity #infosec #exploitation #cybersecurity #vulnerability

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection: s4dbrd.github.io/posts/how-ke... #reverseengineering #informationsecurity #cybersecurity #game #windows #kernel #debugging