iiinova — where your digital self keeps evolving

Alexandre Borges @alexandreborges.bsky.social · 30/09/2026

Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: www.blackstormsecurity.com/research/ Hope you enjoy the read!

020

Alexandre Borges @alexandreborges.bsky.social · 30/09/2026

Branch Target Reuse, BTR: New Spectre V2 Attack Targeting JIT Compilers: www.vusec.net/projects/btr/ #cybersecurity #infosec #exploitation #vulnerability #jit #cpu

Branch Target Reuse, BTR: New Spectre V2 Attack Targeting JIT Compilers:

https://www.vusec.net/projects/btr/

#cybersecurity #infosec #exploitation #vulnerability #jit #cpu

041

Alexandre Borges @alexandreborges.bsky.social · 29/09/2026

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution: google.github.io/security-res... #cybersecurity #vulnerability #infosec #exploitation #linux #bluetooth #rce

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution:

https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html

#cybersecurity #vulnerability #infosec #exploitation #linux #bluetooth #rce

131

Alexandre Borges @alexandreborges.bsky.social · 29/09/2026

Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 1: pgj11.com/posts/Window... Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 2: pgj11.com/posts/Window... #cybersecurity #exploit #exploitation #vulnerability #drivers

Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 1:

https://pgj11.com/posts/Windows-NCSI-Proxy-Auth-Coercion-Part-1/

Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 2:

https://pgj11.com/posts/Windows-NCSI-Proxy-Auth-Coercion-Part-2/

#cybersecurity #exploit #exploitation #vulnerability #drivers #infosec #informationsecurity #windows

010

Alexandre Borges @alexandreborges.bsky.social · 22/09/2026

Malwoverview 8.2.0 is out: github.com/alexandrebor... To install it: python -m pip install -U malwoverview[all] New: --nist 6 lists all CVEs associated with a component #malware #cybersecurity #informationsecurity #vulnerability #cve #threathunting #threatintelligence

000

Alexandre Borges @alexandreborges.bsky.social · 21/09/2026

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute: blog.sentry.security/beyond-promp... #apple #vulnerability #cybersecurity #informationsecurity #cve

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute:

https://blog.sentry.security/beyond-prompt-injection-hacking-apples-private-cloud-compute/

#apple #vulnerability #cybersecurity #informationsecurity #cve

121

Alexandre Borges @alexandreborges.bsky.social · 19/09/2026

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill: heyitsas.im/posts/lpe-qu... #cybersecurity #vulnerability #exploit #infosec #linux

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill:

https://heyitsas.im/posts/lpe-quartet/

#cybersecurity #vulnerability #exploit #infosec #linux

000

Alexandre Borges @alexandreborges.bsky.social · 07/09/2026

CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining: mrtiz.github.io/cet-callstac... #cybersecurity #programming #infosec #hacking #redteam

CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining:

https://mrtiz.github.io/cet-callstack-spoofing-thread-pool-trampoline

#cybersecurity #programming #infosec #hacking #redteam

000

Alexandre Borges @alexandreborges.bsky.social · 01/09/2026

The articles already published in the Exploiting Reversing series (ERS) are now hosted on a new website: blackstormsecurity.com/research/ Future articles will be published primarily at this new address, and for a time, I will also publish them on my personal blog. #exploit #vulnerability

The articles already published in the Exploiting Reversing series (ERS) are now hosted on a new website:

https://blackstormsecurity.com/research/

Future articles will be published primarily at this new address, and for a time, I will also publish them on my personal blog.

The series will continue with many more articles, which some are coming soon. Stay tuned.

Have an excellent day.

#exploit #vulnerability

000

Alexandre Borges @alexandreborges.bsky.social · 29/08/2026

[0-Day] Windows USB Print Out-of-Bounds Read Vulnerability - The String Descriptor That Wasn’t zeifan.my/usbtersakiti/ #cybersecurity #windows #vulnerability #infosec #exploitation

[0-Day] Windows USB Print Out-of-Bounds Read Vulnerability - The String Descriptor That Wasn’t

https://zeifan.my/usbtersakiti/

#cybersecurity #windows #vulnerability #infosec #exploitation

000

Alexandre Borges @alexandreborges.bsky.social · 21/08/2026

A "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF: nebusec.ai/research/cve... #cybersecurity #infosec #informationsecurity #lpe #linux #kernelctf #exploitation

020

Alexandre Borges @alexandreborges.bsky.social · 20/08/2026

It is with great pleasure that I announce I am a co-author of the Seventh Edition of Gray Hat Hacking, alongside outstanding cybersecurity minds such as Stephen Sims, Valentina Palmiotti, Natalie Silvanovich, Luna Tong, Pavel Yosifovich, Moses Frost, and Huascar Tejeda! Stay tuned!

043

Alexandre Borges @alexandreborges.bsky.social · 19/08/2026

Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day: www.gendigital.com/blog/insight... #cybersecurity #infosec #informationsecurity #rootkit #vulnerability

Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day:

https://www.gendigital.com/blog/insights/research/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day

#cybersecurity #infosec #informationsecurity #rootkit #vulnerability

000

Alexandre Borges @alexandreborges.bsky.social · 16/08/2026

Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse www.akamai.com/blog/securit... #edr #programming #cybersecurity #informationsecurity

Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse

https://www.akamai.com/blog/security-research/bring-your-own-edr-turn-commercial-edr-trojan-horse

#edr #programming #cybersecurity #informationsecurity

000

Alexandre Borges @alexandreborges.bsky.social · 08/08/2026

Malwoverview version 8.1.0 is available: github.com/alexandrebor... To install it: $ python -m pip install -U malwoverview The number of changes is significant, so it is recommended reading the README.md: #malware #threathunting #vulnerability #informationsecurity #infosec #cybersecurity

Malwoverview version 8.1.0 is available:

https://github.com/alexandreborges/malwoverview

To install it:

$ python -m pip install -U malwoverview

The number of changes is significant, so it is recommended reading the README.md:

#malware #threathunting #vulnerability #informationsecurity #infosec #cybersecurity

152

Alexandre Borges @alexandreborges.bsky.social · 01/08/2026

SPIR-V on ROCm: A Portable IR for AMD GPUs: A follow-up post will discuss a real-world SPIR-V deployment at scale: PyTorch." rocm.blogs.amd.com/software-too... #cybersecurity #informationsecurity #processors #architecture #infosec

SPIR-V on ROCm: A Portable IR for AMD GPUs:

A follow-up post will discuss a real-world SPIR-V deployment at scale: PyTorch."

https://rocm.blogs.amd.com/software-tools-optimization/spir-v-rocm/README.html

#cybersecurity #informationsecurity #processors #architecture #infosec

010

Alexandre Borges @alexandreborges.bsky.social · 29/07/2026

FirmBurn: How Firmware Zero‑Day & SCSI PassThru Burned Iran Banks aleeamini.com/firmburn-fir... #cybersecurity #reverseengineering #informationsecurity #firmware #zeroday #exploitation #infosec

FirmBurn: How Firmware Zero‑Day & SCSI PassThru Burned Iran Banks

https://aleeamini.com/firmburn-firmware-zero-day-scsi-passthru-burned-iran-banks-hack/

#cybersecurity #reverseengineering #informationsecurity #firmware #zeroday #exploitation #infosec

010

Alexandre Borges @alexandreborges.bsky.social · 27/07/2026

SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode vanbulck.net/files/woot26... #cybersecurity #smm #platformsecurity #informationsecurity #infosec

000

Alexandre Borges @alexandreborges.bsky.social · 10/07/2026

The work continues... a third vulnerability in just a few days, and like the other two, this one also affects iOS 26.5 and iOS 26.5.2. The challenge, as usual, centers on the next steps for exploitation. #ios #vulnerability #apple

000

Alexandre Borges @alexandreborges.bsky.social · 09/07/2026

Redis 8.6: Remote Code Execution via Stream PEL Use After Free: zerotistic.blog/posts/redis-... #linux #vulnerability #exploitation #informationsecurity #infosec #cybersecurity

010

Alexandre Borges @alexandreborges.bsky.social · 05/07/2026

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503): research.jfrog.com/post/dissect... #cve #linux #cybersecurity #informationsecurity #exploitation #vulnerability

010

Alexandre Borges @alexandreborges.bsky.social · 03/07/2026

A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabytes: www.msuiche.com/posts/nanokr... #kernel #infosec #programming #rust #windows #hacking

141

Alexandre Borges @alexandreborges.bsky.social · 01/07/2026

Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215): cyberstan.co.uk/drm-lpe-linux/ #linux #kernel #vulnerability #cybersecurity #exploitation

110

Alexandre Borges @alexandreborges.bsky.social · 19/06/2026

Another vulnerability in iOS 26.5 with a clear and reproducible crash, registers control, primitive and PoC confirmed, and possibly a working exploit... who knows... ;)

010

Alexandre Borges @alexandreborges.bsky.social · 02/06/2026

Malwoverview 8.0.2 has been released: github.com/alexandrebor... To install it: python -m pip install -U malwoverview[all] #malware #threathunting #informationsecurity #infosec #vulnerability #cve #dfir

010

Alexandre Borges @alexandreborges.bsky.social · 27/05/2026

GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095): securitylab.github.com/advisories/G... #vulnerability #cybersecurity #informationsecurity #exploitation #cve

011

Alexandre Borges @alexandreborges.bsky.social · 27/05/2026

Arbitrary Kernel Address Increment via NtQuerySystemInformation: pwn2nimron.com/blog #vulnerability #informationsecurity #exploitation #cybersecurity #exploit #windows

010

Alexandre Borges @alexandreborges.bsky.social · 21/05/2026

FatGid+4: A four-byte type, an eight-byte stride, one root shell. fatgid.io #vulnerability #exploit #cybersecurity #informationsecurity #freebsd

010

Alexandre Borges @alexandreborges.bsky.social · 11/05/2026

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection: s4dbrd.github.io/posts/how-ke... #reverseengineering #informationsecurity #cybersecurity #game #windows #kernel #debugging

052

Alexandre Borges @alexandreborges.bsky.social · 28/04/2026

Today I am releasing the nineth article in the Exploiting Reversing Series (ERS), which I provide a 106-page deep dive and a comprehensive roadmap for vulnerability exploitation: exploitreversing.com/2026/04/28/e... Enjoy the reading and have an excellent day. #exploit #exploitdevelopment

000

Alexandre Borges @alexandreborges.bsky.social · 17/04/2026

Malwoverview 8.0.1 is available: github.com/alexandrebor... To update it: python -m pip install -U malwoverview #threathunting #malware #cve #vulnerability #cybersecurity #informationsecurity #incidentresponse

011

Alexandre Borges @alexandreborges.bsky.social · 14/04/2026

The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets: exploitreversing.com In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors. #exploit #exploitation

The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets:

https://exploitreversing.com

In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors.

#exploit #exploitation

010

Alexandre Borges @alexandreborges.bsky.social · 14/04/2026

CFPsec is program to list Call For Papers or upcoming Hacking/Security Conferences based on cfptime.org website. github.com/alexandrebor... To install it: python -m pip install -U cfpsec #cybersecurity #informationsecurity #conferences

030

Alexandre Borges @alexandreborges.bsky.social · 31/03/2026

The eighth article of the Exploiting Reversing Series (ERS) is now live. Titled “Exploitation Techniques | CVE-2024-30085 (Part 02)” this 91-page technical guide offers a comprehensive roadmap for vulnerability exploitation: exploitreversing.com/2026/03/31/e... #exploit #exploitation

021

Alexandre Borges @alexandreborges.bsky.social · 22/03/2026

Malwoverview v8.0 (codename: Revolutions) has been released: github.com/alexandrebor... To install its complete version: pip install malwoverview[all] #threathunting #malware #vulnerability #ai #informationsecurity #cybersecurity #cve

042

Alexandre Borges @alexandreborges.bsky.social · 04/03/2026

Exploiting Reversing (ER) series: article 07 | Exploitation Techniques | CVE-2024-30085 (part 01) exploitreversing.com/2026/03/04/e... Enjoy your reading and have an excellent day. #exploit #vulnerability #cve #exploitation #infosec #informationsecurity #windows

011

Alexandre Borges @alexandreborges.bsky.social · 16/02/2026

I am excited to release the extended version of the sixth article in the Exploiting Reversing Series (ERS). Titled "A Deep Dive Into Exploiting a Minifilter Driver (N-day)" this 293-page deep dive offers a comprehensive roadmap for vulnerability exploitation: exploitreversing.com/2026/02/11/e...

001

Alexandre Borges @alexandreborges.bsky.social · 11/02/2026

The sixth article in the Exploiting Reversing Series (ERS), "A Deep Dive Into Exploiting a Minifilter Driver (N-day)", a 251-page article provides a comprehensive look at a past vulnerability in a mini-filter driver, is available: exploitreversing.com/2026/02/11/e... #exploit #vulnerability

021