←
Home
Blog
About
Press
Media
Talks
Subscribe
2026
Jul 13
The 1.2 ms Eigensolver That Never Ran
GPU MODE
NVIDIA B200
CUDA
cuSOLVER
PyTorch
Triton
Eigendecomposition
Benchmarking
Reward Hacking
AI Agents
Jul 5
A Windows Kernel in a Browser Tab, Part III: Debugging It, and the Crash Dumps It Writes Itself
nanokrnl
nanox
Rust
Windows Kernel
ntoskrnl
lldb
gdb
WinDbg
Debugging
Crash Dump
ELF
DWARF
KDBG
KDDEBUGGER_DATA64
MEMORY.DMP
DUMP_HEADER64
PDB
EPROCESS
9P
WebAssembly
Jul 3
A Windows Kernel in a Browser Tab: Running Unmodified Microsoft Console Tools
nanokrnl
nanox
Rust
Windows Kernel
ntoskrnl
cmd.exe
PE
Handles
CreateProcess
WebAssembly
Jul 3
A Windows Kernel in a Browser Tab, Part II: A Filesystem Over 9P, From a JavaScript Object
nanokrnl
nanox
Rust
Windows Kernel
ntoskrnl
9P
Plan 9
v9fs
Filesystem
WebAssembly
Jul 3
A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabytes
nanokrnl
nanox
Rust
Windows Kernel
ntoskrnl
Emulator
WebAssembly
Memory Management
Snapshot
9P
Jun 26
Fable 5's 38-Minute Kernel, Part II: The Token Math and the Boot Count
Fable 5
Mythos
Rust
Windows Kernel
ntoskrnl
AI Agents
Anthropic
Verification
Windows Internals
Jun 23
CVE-2010-2568: Stuxnet's .LNK Zero-Day, Line by Line in the Windows 2000 Source (GLM-5.2 Analysis)
CVE-2010-2568
Stuxnet
LNK
Shell
Logic Bug
Windows 2000
Source Audit
MS10-046
Jun 22
Fable 5 wrote a Windows kernel in 38 minutes
Fable 5
Mythos
Rust
Windows Kernel
ntoskrnl
AI Agents
Anthropic
Verification
Windows Internals
Jun 8
Windows 11 Hibernation on ARM64: the Boot Manager, winresume, and the hiberfil.sys Format
ARM64
Hibernation
hiberfil.sys
Windows Internals
Memory Management
Reverse Engineering
winresume
Boot Manager
Pointer Authentication
VBS
Forensics
Jun 8
SMBaloo, Part II: An AI Agent, the ARM64 Genericity Gap, and Windows 11 Kernel Internals
ARM64
SMBGhost
CVE-2020-0796
Exploit Development
Windows Kernel
Windows Internals
Memory Management
Reverse Engineering
Pointer Authentication
AI Agents
GICv3
May 26
autoextdetector: A Self-Improving Detection Agent for Supply-Chain Attacks
Supply Chain
autoextdetector
Static Analysis
OSV
GHSA
LLM
TrapDoor
Nx Console
Detection Engineering
Bumblebee
May 24
Supply-Chain Attacks Cluster: 230,000 Advisories, Five Patterns
Supply Chain
OSV
npm
PyPI
Browser Extensions
TeamPCP
Discord Webhooks
Telegram Bots
Postinstall
Wallet Drain
May 19
From Y2K to Patch Tuesday 2025: 25 Years of Bugs in the Windows 2000 Source Tree
Windows 2000
CVE-2006-5583
CVE-2013-3196
CVE-2023-21746
CVE-2025-24993
LocalPotato
NTVDM
NTFS
SNMP
Source Audit
May 10
Bleeding Llama: When AI Model Files Become Memory Leaks
CVE-2026-7482
Ollama
GGUF
LLM
Heap Overflow
Detection
Apr 21
Legacy Security Is the Real Enterprise AI Bottleneck
MCP
Lovable
Mercor
LiteLLM
Vercel
Delve
SOC2
Data Breach
OnDB
Trust
Agentic AI
Enterprise
OWASP
Glasswing
GPT-5.4-Cyber
Azure
CVE-2026-32173
HackerOne
Supply Chain
Apr 13
Seeing Sound: Generative Techno and DSP in Pure NumPy
Techno
Acid
DSP
Generative
NumPy
Synthesis
Sound Design
Apr 9
From La Fontaine to Lego: Characters as Ideological Delivery Systems
Psyops
GenAI
Propaganda
Iran
Sesame Street
USAID
Information Warfare
Apr 5
Local Models Within Reach: Everything That Changed in Eight Months
LLM
Local AI
MoE
Quantization
Gemma
Qwen
MLX
Unsloth
RISC-V
Mar 7
Odd Lots: Cyberwar in the Age of AI
cybersecurity
iran
ai
cloud
anthropic
ondb
2025
Dec 15
When Machines Pay Machines: The Economics of Agentic AI
x402
agentic-ai
http-402
tempo
micropayments
onchaindb
Oct 17
Porting CUDA FFT to Mojo: Achieving Bit-Exact Precision
Mojo
CUDA
FFT
PTX
Floating-Point
Precision
Oct 15
AMD GPU Support in Triton Gluon Framework
GPU
Triton
Gluon
AMD
ROCm
HIP
CUDA
Performance
Oct 15
RustBPE: High-Performance BPE Tokenizer Training in Rust
Rust
Machine Learning
Natural Language Processing
Tokenization
Performance Engineering
BPE
PyO3
Sep 30
Optimizing AlphaFold's Triangle Multiplicative Update: A First Look at GPU Performance Engineering
GPU Optimization
PyTorch
Triton
AlphaFold
Machine Learning
Performance Engineering
H100
Tensor Cores
Sep 28
Multi-GPU Programming with AMD's Iris Framework for Triton
AMD
GPU
Triton
Multi-GPU
Parallel Computing
Iris
Sep 23
Gluon: When Triton Isn't Low-Level Enough
GPU
Triton
Gluon
Performance
CUDA
Deep Learning
PyTorch
Sep 17
CVE-2025-21043: When DNG Opcodes Become Attack Vectors
CVE-2025-21043
DNG
zero-day
WhatsApp
Android
Samsung
ELEGANTBOUNCER
Sep 14
The Hidden Math Bug That Makes AI Unpredictable
determinism
floating-point
neural-networks
pytorch
mlx
Aug 27
Building Agents for Small Language Models: A Deep Dive into Lightweight AI
LLM
AI Agents
Small Models
Local AI
Edge Computing
Aug 24
ELEGANTBOUNCER: When You Can't Get the Samples but Still Need to Catch the Threat
FORCEDENTRY
BLASTPASS
TRIANGULATION
CVE-2021-30860
CVE-2023-4863
CVE-2025-43300
NSO
Pegasus
0-click
Detection
Aug 23
Detecting CVE-2025-43300: A Deep Dive into Apple's DNG Processing Vulnerability
CVE-2025-43300
DNG
JPEG
iOS
0-click
RCE
Detection
2024
Oct 14
Bob and Alice in Kernel-land - Part 3
bug
kernel
Aug 23
Bob and Alice in Kernel-land - Part 2
bug
kernel
Aug 18
Financial Forensics in a fragmented ecosystem
financial forensics
brics
Aug 10
Election Security - Friday Review
democracy
Jul 20
Bob and Alice in Kernel-land
bug
kernel
2023
Dec 30
Researching Triangulation: Detecting CVE-2023-41990 with single byte signatures.
bug
truetype
apple
Dec 24
Researching BLASTPASS: Analysing the Apple & Google WebP POC file - Part 2
bug
webp
apple
google
Sep 27
Researching BLASTPASS: Detecting the exploit inside a WebP file - Part 1
rust
2022
Dec 19
Researching FORCEDENTRY: Detecting the Exploit With No Samples
rust
Nov 10
POC 2022 - Korea - Keynote 🦀
rust
Aug 22
Vegas 2022 - A web3 security review
web3
May 5
Magnet Forensics Acquires Cybersecurity Software Firm Comae Technologies
acquisition
2020
Dec 25
SUNBURST & Memory Analysis
solarwinds
sunburst
Aug 12
Azure Sphere Internals - Overview
iot
bugbounty
arm
Jul 1
SMBaloo - Building a RCE exploit for Windows ARM64 (SMBGhost Edition)
exploit
arm64
Feb 12
Twitter's Information Operations - An OSINT Analysis
disinformation
twitter
Jan 11
Facebook's Coordinated Inauthentic Behavior - An OSINT Analysis
2019
Apr 24
How to Solve the Blindspots of Event-Driven Detection
2018
Feb 20
Rethinking Logging for Critical Assets
2017
Dec 27
Smart Contract Languages to Follow
web3
Jul 7
Porosity: A Decompiler For Blockchain-Based Smart Contracts Bytecode
security
ethereum
Jun 28
Petya.2017 is a wiper not a ransomware
Jun 27
Petya— Enhanced WannaCry ?
Jun 10
Lessons from TV5Monde 2015 Hack
security
dfir
May 19
WannaCry — Decrypting files with WanaKiwi + Demos
May 15
WannaCry — Links to Lazarus Group
May 14
WannaCry — New Variants Detected!
May 12
WannaCry — The largest ransom-ware infection in History
Apr 20
PASSFREELY: Oracle & SWIFT at risk
Apr 14
ShadowBrokers: The NSA compromised the SWIFT Network
2009
Jan 29
Windows 7 and Windows Server 2008 R2 djoin (Offline Domain Join) utility.
dfir
ad
2008
Sep 17
Retrieving MmPhysicalMemoryBlock regardless of the NT version
dfir
Jul 28
Check your system virginity in less than 60 seconds.
dfir
Apr 3
X-Ways Forensics Beta 2 and hibernation file. (coincidence?)
dfir