Sitemap - 2026 - Calif Newsletter
WeWorm is calling. It's time to answer.
The Taking of FreeBSD One Two Three
Apple MIE exploitation challenge
Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343)
Journey to Root, Episode I: The Maglev King
MAD Bugs: My Cousin Vinyl (CVE-2026-50052)
Apple Internals: Swift in the Kernel
OOBdump: Relocation Oriented Programming
Codex Discovered a Hidden HTTP/2 Bomb
RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation
Needle in a haystack: measuring the impact of two nginx RCEs
First public macOS kernel memory corruption exploit on Apple M5
Using IDA to Find Bugs in IDA (with Claude)
CVE-2026-7270: How I Get Root on FreeBSD with a Shell Script
MAD Bugs: Finding and Exploiting a 21-Year-Old Vulnerability in PHP
MAD Bugs: An Apple Kernel Bug, Brought to You by Microsoft
MAD Bugs: All Your Reverse Engineering Tools Are Belong to US
MAD Bugs: "cat readme.txt" is not safe in iTerm2
We Asked Claude to Audit Sagredo's qmail. It found a RCE.
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude + Humans vs nginx: CVE-2026-27654
MAD Bugs: Feeding Claude Phrack Articles for Fun and Profit
MAD Bugs: Claude Found an Auth Bypass in NSA's Ghidra Server
MAD Bugs: Discovering a 0-Day in Zero Day
MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
MAD Bugs: vim vs emacs vs Claude
MAD Bugs: Month of AI-Discovered Bugs
Reverse engineering Apple’s silent security fixes
Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets