Mickey Jin @patch1t
Exploring the world with my sword of debugger : ) jhftss.github.io Joined August 2013-
Tweets313
-
Followers5K
-
Following273
-
Likes4K
@Peterpan980927 In the AI era, the list will be updated frequently. I’m gradually stepping back to devote myself fully to my new baby.
Cool 👍
🍎🐛 I got Claude making this, maybe it's useful for others as well. Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations. apple-cve.com
I got the latest iOS and macOS 27 booting in Qemu (with SPTM!) - Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported - Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able - Boots directly to root shell in seconds - Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required - SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs - Automated setup; get running in just a few minutes - Runs anywhere qemu runs... no ARM CPU required 😉 Try it here: github.com/jprx/darwin-vm
Empty vessels make the most noise. Barking dogs seldom bite.
CVE-2026-28910 just saw the CVE information has been updated. Im the first one who found this vulnerability, on 5/8/25, five months before you did. And the impact was underestimated, it could do more things than your PoC.Easily weaponized. Keep calm. Your post made it sound like
@Guluisacat That makes sense now.
@mysk_co This one is similar to my CVE-2026-20633, patched in macOS 26.4 too. However, my bug doesn’t require any user interaction. I can’t disclose the details right now because I have already submitted a bypass report 🫣
The screensharingd bug is a pre-auth, and an amazing bug that LLM enabled clowns killed without understanding it. Releasing a PoC that allows to download files from vulnerable macOS. It’s not super reliable, but the real one is very much. Patch asap! reverse.put.as/2026/07/29/its…
@Coiffeur0x90 @0xjohnny After reading @lateralusd_ blog: ns-echo.com/posts/cve_2023… I found the same bug that you found here, and then I reported to the ZDI. Finally, it was disclosed as 0-day: zerodayinitiative.com/advisories/ZDI…
🍎🌁 Big changes to user TCC.db in macOS Golden Gate! It seems that it finally got the protection it deserves. It was moved to: /private/var/containers/Data/ProtectedSystem/[UUID]/Data/Library/Application Support/com.apple.TCC/ You can't access it even with FDA, and likely need "com\.apple.private.security.protected-system-container" entitlement to write to it.
Some observations from disassembly that might be related to iOS 27 performance boost codecolor.ist/posts/2026-06-…
IMO Mysk is not trustworthy. They tried to hype low impact vulns as critical in the past (HTTP icon download). Also... duplicates happen, and Apple always credits you for those. If you can't trust the vendor's decision about first submitter, then don't submit. I did cross check a few of these duplicates with researchers in the past, and Apple was always right.
@theevilbit @gergely_kalman @theJoshMeister Yes, agreed. I don’t think mysk’s report is a real vulnerability.
@mysk_co The CVE-2026-28910 requires the access to a protected plist file first, this shouldn’t be considered as a real vulnerability, in my humble opinion.
@mysk_co Maybe the trick of social engineering is the vulnerability here. But you can get access to any protected file (not only the plist file) by convincing the victim to drag&drop.
@mysk_co The CVE-2026-28910 requires the access to a protected plist file first, this shouldn’t be considered as a real vulnerability, in my humble opinion.
@mysk_co This one is similar to my CVE-2026-20633, patched in macOS 26.4 too. However, my bug doesn’t require any user interaction. I can’t disclose the details right now because I have already submitted a bypass report 🫣
@gefrorenerapfel @Apple Independent researcher
Love the gifts from @Apple Product Security! ❤️❤️❤️
Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices. projectzero.google/2026/01/pixel-…
chompie @chompie1337
91K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
simo @_simo36
7K Followers 132 Following
0xor0ne @0xor0ne
95K Followers 507 Following Cybersecurity | Reverse Engineering | Vulnerability Research | Embedded & Silicon Security | My Tweets, My Opinions :)
Alex Plaskett @alexjplaskett
14K Followers 596 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Wojciech Reguła @_r3ggi
6K Followers 869 Following iOS/macOS app security researcher & blogger. 🍎 Black Hat / DEF CON / TyphoonCon speaker. Head of mobile appsec @SecuRingPL
LiveOverflow 🔴 hex... @LiveOverflow
164K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
ϻг_ϻε @steventseeley
23K Followers 565 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
Ivan Fratric 💙💛 @ifsecure
19K Followers 211 Following Tech lead and security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
Julien | MrTuxracer �... @MrTuxracer
40K Followers 441 Following CEO @rcesecurity | #BugBounty | @Hacker0x01 MVH && H1-Elite | $1,5+ Mio in Bounties | Mobile Hacker | @[email protected]
Saagar Jha @_saagarjha
5K Followers 158 Following
Csaba Fitzl @theevilbit
9K Followers 1K Following macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://t.co/Xf7KDW5fKu
Haifei Li @HaifeiLi
9K Followers 151 Following For contact in the security community. NOTE: All the tweets are totally my personal opinions, not about any of my current employer stuff.
axi0mX @axi0mX
59K Followers 3K Following Bootrom exploit philanthropist. Apple silicon hacker. iOS jailbreaker. Join us as we dance madly on the lip of the volcano.
b1ack0wl @b1ack0wl
15K Followers 664 Following 0day Researcher / Baker / 0wl / Founder of @team_h00terz
codecolorist@infosec.... @CodeColorist
6K Followers 1K Following
서호진 @seohojin648131
3 Followers 75 Following
Jack @Jackkxf5
0 Followers 20 Following
Azrael @azraelxuemo
345 Followers 35 Following Talks: Black Hat EU'24/USA'25/Asia'26 · DEF CON 33/34 · Zer0Con '25/'26 · Off-by-One '25 · SAFACON '26 · deepsec . Hexacon '26
Isha Sangpal @betigetin
6 Followers 117 Following
Will @iwilliw
2 Followers 97 Following
Santi Cazorla @SantiCazorla41
1 Followers 270 Following
John Smithy @JohnSmithysr8i
1 Followers 143 Following
이석훈 @koon0975
1 Followers 41 Following
redbeans @redbeans86
1 Followers 265 Following
TH∑0SIS @The0sis_
56 Followers 1K Following ◇Veteran◇ 🇺🇸 | Offensive Security ⚔️ | Reverse Engineering 👨🏿💻 | Malware Analysis 🐞
sudi @sudhanshur705
6K Followers 1K Following If there's non zero chance, the effort is infinite, anything is possible
AV ICII @newmemberx1
6 Followers 493 Following
mohd haji @mohdhaji87
1 Followers 35 Following
Merabytes Cybersecuri... @merabytes
24 Followers 218 Following Bring light to adversary tactics across your network and cloud environments.
toxic greek @greek_toxi54800
0 Followers 62 Following
jc @3jc27
24 Followers 480 Following
renniepak @renniepakpur
289 Followers 303 Following
banana @banana_kkcc
0 Followers 69 Following
S0nG0ku @s0ng0k_u
10 Followers 170 Following
Onespanmobile @onespanmob33734
0 Followers 3 Following
orin chan @orinchan869081
10 Followers 73 Following
Tỉnh Tran @TnhTrantf
0 Followers 51 Following
Hw.Cho @y0ny0ns0n
12 Followers 292 Following pickpocketing computer’s secret. researching @epsilon_sec. Opinions are my own. Prev @SecuriTeam_SSD Hobby + CTFs @null2root
Ruben Babaev @14zy
1K Followers 5K Following 💻 RubeTON Studio ▪ TON Blockchain ▪ Founder of @RubetonWorld
Flody Li @7feilee
20 Followers 133 Following Attention is all you need. Sharing is Caring. https://t.co/uaQTGNvYN3
chad @froggy_dep
61 Followers 875 Following
Nathan @calysteon
136 Followers 278 Following
silo @silo_sec
0 Followers 7 Following macOS Security Researcher | Freelancer No talent. Just showed up every day.
Daniel Davis @DanielDavis0s
0 Followers 52 Following
Talence @TalenceSecurity
627 Followers 1K Following Security Research (more than 200 CVEs) & Training
kddc @kddcwnoa88
1 Followers 84 Following
Texuguinho123 @Gabriel52489026
13 Followers 82 Following
chompie @chompie1337
91K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
simo @_simo36
7K Followers 132 Following
Project Zero Bugs @ProjectZeroBugs
38K Followers 0 Following A bot that posts the latest blog posts and disclosures from Google's Project Zero
Saar Amar @AmarSaar
18K Followers 359 Following
Alex Plaskett @alexjplaskett
14K Followers 596 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Wojciech Reguła @_r3ggi
6K Followers 869 Following iOS/macOS app security researcher & blogger. 🍎 Black Hat / DEF CON / TyphoonCon speaker. Head of mobile appsec @SecuRingPL
ϻг_ϻε @steventseeley
23K Followers 565 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
Ivan Fratric 💙💛 @ifsecure
19K Followers 211 Following Tech lead and security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
starlabs @starlabs_sg
10K Followers 15 Following A Singapore company that discovers vulnerabilities to help customers mitigate the risks of cyber attacks. Organisers of @offbyoneconf
Saagar Jha @_saagarjha
5K Followers 158 Following
Mobile Security @mobilesecurity_
31K Followers 1K Following Mobile Security ✌🏻 #MobileSecurity #AndroidSecurity #iOSsecurity
tihmstar @tihmstar
61K Followers 220 Following Finding offsets since 2017 Email: [email protected] Patreon: https://t.co/FdMYUYWbqr
Csaba Fitzl @theevilbit
9K Followers 1K Following macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://t.co/Xf7KDW5fKu
Samuel Groß @5aelo
25K Followers 524 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
Objective-See Foundat... @objective_see
20K Followers 2 Following 🍎 🛡️ 🛠️ Open-Source Tools 📚 "The Art of Mac Malware" books 🫂 "Objective by the Sea" conference Support us on https://t.co/tuGceSeyiC 🙏
Haifei Li @HaifeiLi
9K Followers 151 Following For contact in the security community. NOTE: All the tweets are totally my personal opinions, not about any of my current employer stuff.
Azrael @azraelxuemo
345 Followers 35 Following Talks: Black Hat EU'24/USA'25/Asia'26 · DEF CON 33/34 · Zer0Con '25/'26 · Off-by-One '25 · SAFACON '26 · deepsec . Hexacon '26
Ilya Andr @andrd3v
182 Followers 100 Following Middle iOS R&D engineer @ Positive Technologies | apple bug hunter | 19 y. o.
mayllart @ThiagoMayllart
267 Followers 485 Following
Guilherme Rambo @_inside
57K Followers 2K Following I know a thing or two about AirPods. App developer, security researcher.
Josh Parnham @joshparnham
802 Followers 1K Following
Huy Nguyen @Little_34306
28K Followers 369 Following Employee of @Calif_io, opinions are my own. Others platform: https://t.co/qY3jaBjkDn
Boris Larin @oct0xor
19K Followers 729 Following Former console hacker (PS3/PS4). Hunting in the wild 0-days at Kaspersky GReAT. All tweets are my own.
Paradigm Shift @prdgmshift
1K Followers 0 Following Premium European cybersecurity research provider, powered by a world-class team with a decade-long track record.
lateralusd @lateralusd_
256 Followers 365 Following Just a person trying to hack iOS related things. stop using medium for your blog posts
slinafirinne @slinafirinne
2K Followers 374 Following Security Researcher (macOS & iOS) with the occasional post about literature or golf.
johnny @0xjohnny
9K Followers 251 Following iOS & MacOS Researcher (AI-Driven) Open to full-time/contract roles. DMs open.
Ashish Kunwar @D0rkerDevil
13K Followers 6K Following ex @Microsoft | Vulnerability Research | ios/mac research 🙂/baseband researcher
Bruce Dang @brucedang
5K Followers 1K Following Sweeping the floor at https://t.co/CM8ErzxC5z (we are hiring). Previously at Microsoft/Veramine/Apple. author of Practical Reverse Engineering.
Calif @calif_io
14K Followers 33 Following We're https://t.co/KTEDnC3tKt. Join us to make the Internet safer for your mum and everyone else: https://t.co/eUFMLkWHiA.
Mysk 🇨🇦🇩🇪 @mysk_co
21K Followers 535 Following We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 📝https://t.co/69k7WAphKl 🇨🇦🇩🇪 Current Project: @psylo_app
Luke Roberts @rookuu_
841 Followers 495 Following Red Team. macOS Security. Ex-@mwrlabs. Building @phoriontech
mezone @Mezone0
260 Followers 350 Following
Mas0n @Mas0nShi
2K Followers 900 Following Former CTFer @Nu1L_Team. Binary security padawan🌱 "The more I learn, the less I realize I know"
Tony Gorez @tonygo_
1K Followers 623 Following offensive security researcher | iOS - macOS | build Bare runtime at @holepunch_to
DARKNAVY @DarkNavyOrg
6K Followers 78 Following Cybersecurity enthusiasts from https://t.co/hhfYFEA92x
Speedyfriend67 @speedyfriend433
3K Followers 7K Following Owner of Flero Client, Apple Bug Hunter | https://t.co/rnAAL7l7Ow | https://t.co/My3XKpHeMb
John Woodman @JohnWoodman15
588 Followers 395 Following @Mandiant consultant | https://t.co/2vEK0dpwNN | https://t.co/Q3OKimQNfL
Thomas King - @thomas... @ThomasKing2014
2K Followers 522 Following Android/Browser Vulnerability Research, Reverse Engineering. Mastodon: @[email protected]
Michael Reeves @IntegralPilot
1K Followers 69 Following Teenage security researcher & systems developer. CVE-2025-43539, making rustc_codegen_jvm, working on Asahi Linux https://t.co/0NPoFmrES7 🇦🇺
Morris Richman @morrisinlife
639 Followers 400 Following @codevapor fan. I make cool apps and swift packages. Swift Student Challenge Winner. Cybersecurity Researcher. Views are my own.
Ryan Dowd @_rdowd
622 Followers 104 Following Principal @HuntressLabs | Former Detection & Response Principal @CrowdStrike | macOS Security Enthusiast
Duy Tran @khanhduytran0
14K Followers 393 Following AngelAuraMC(was @PLaunchTeam),LiveContainer; mess w/ iOS internals. JB repo: https://t.co/2ytwlbwGIx [email protected] https://t.co/6W1ngT0prC
Sharvil Shah @sharvil
531 Followers 2K Following Security Stuff — #osquery Technical Steering Committee member, likes macOS internals
Yarden H @yarden_ha
260 Followers 299 Following
clearbluejar @clearbluejar
2K Followers 484 Following Security Researcher | Founder @clearseclabs | Author of #ghidriff | Agentic #PatchDiffing | Stuck in a loop: Build • Reverse • Learn • Share
Vector 35 @vector35
10K Followers 2K Following Makers of the Binary Ninja - Reverse Engineering Platform. https://t.co/opkys50srq Also posting at https://t.co/2HEfgOtSSR
Yarden Shafir @yarden_shafir
27K Followers 332 Following A circus artist with a visual studio license
Bill Demirkapi @BillDemirkapi
22K Followers 412 Following preparedness research | ex @xai, @microsoft, @zoom
Renwa @RenwaX23
10K Followers 64 Following
VMware Fusion @VMwareFusion
22K Followers 449 Following Develop, Test and Run Apps for nearly any OS right from your Mac
Pedro José Pereira V... @pvieito
811 Followers 637 Following Data & Electronics Engineer. Swift Developer. 🇪🇺
Lyutoon @Lyutoon_
1K Followers 355 Following PhD student | CTF @Nu1L_Team & @StrawHat_CTF | AI + Security | Collecting xx HoF | BlackHat Speaker | LLM4Shell
Mark Rowe @bdash
614 Followers 109 Following Pinball, pinball, pinball. And some computer security nonsense too. https://t.co/4NkQsMtiG6
Oligo Security @OligoSecurity
279 Followers 23 Following
@0xilis @0xilis
579 Followers 210 Following left this site for a while, contact me on other platforms if needed
deepsec.cc @deepsec_cc
556 Followers 0 FollowingYou might like
