Featured · Debrief 002
WebKit memory disclosure, Splunk, and LiteLLM
Original WebKit research, two lab-rebuilt control-plane flaws, June's wider signal, and six actions for Australian security leaders.
Offensive security research.
// Research index
-
14–16 OCT
Upcoming talk
The new control plane of macOS security
How code-signing, entitlements, and policy daemons combine to enforce trust on modern macOS. Australian Cyber Conference 2026, Melbourne.
↗ -
21.07.2026
Vulnerability research
An authenticated SSH denial of service in SFTPGo
How a client engagement led to GHSA-q7pc-356p-hggc, affecting SFTPGo through 2.7.4 and fixed in 2.7.5.
→ -
29.06.2026
Apple advisory
CVE-2026-43740 · Apple WebKit
Out-of-bounds read in WebKit's YARR JIT regex engine. Case-insensitive backreferences could disclose process memory through crafted web content; the fix adds the missing bounds check.
↗ -
04.06.2026
Debrief 001
Palo Alto, Exchange OWA, and the exposure numbers that matter
GlobalProtect authentication override, Exchange OWA mitigation limits, and a measured Australian exposure snapshot.
→ -
16.03.2026
Post
Heap out-of-bounds in decompression loops
The bug class behind a chunk of recent zero-clicks. Integer overflows, missing bounds checks, and why hardened codebases still fall over the same edge.
→ -
2026
Advisory
CVE-2026-28922 · Apple CoreMedia
An Apple CoreMedia privacy issue that could allow an app to access private information.
↗ -
2026
Advisory
CVE-2026-28990 · Apple ImageIO
An Apple ImageIO memory-corruption issue triggered by a maliciously crafted image.
↗ -
2026
Advisory
CVE-2026-28859 · Apple WebKit
An Apple WebKit issue that could let malicious websites process restricted web content outside the sandbox.
↗ -
2025
Talk
From patch panic to proactive defence
Managing edge device vulnerabilities in 2025. Melbourne Cyber Conference, invited speaker.
↗
// Next step
Send the context.
Link the article or issue you are referring to and tell us what you need. We reply within one Australian business day.