Ivan Lozano

YouTube video by Hackceler8 Hackceler8 2025

Hackceler8 live stream will start on 2025-10-04 21:15 UTC / 14:15 PST

Schedule (PST)
14:15 - Live stream start
14:30 - Semifinals #1
16:30 - Semifinals #2
18:30 - Finals

www.youtube.com/watch?v=xN1W...

Today, my research group @ Georgia Tech released a paper on vulnerabilities in Tile --- the second largest device finding network after Apple's AirTags.

You can read about it in Wired, reporting by @kimzetter.bsky.social!
www.wired.com/story/tile-t...

GUIFuzz++ is the first general-purpose fuzzer for desktop GUI software! Fuzzing by translating AFL++ random input into user interaction with GUIs, leading to the discovery of 23 new bugs!

Paper: futures.cs.utah.edu/papers/25ASE.pdf
Source: github.com/FuturesLab/GUIFuzzPlusPlus

Go test some GUIs!

Some good news:

Yesterday, FDA granted accelerated approval for elamipretide, the drug my niece relies on for treatment of her rare disease.

This was the result of tireless advocacy by patients, caregivers, and allies.

THANK YOU to everyone who shared Hope’s story. I truly believe it helped.

Great write up on this from @lhn.bsky.social here! www.wired.com/story/apple-...

Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our adv...

Didn't have much time to look at this earlier in the week, but catching up on it now: Apple Corp's top-level overview on their "Memory Integrity Enforcement" technology designed to dramatically increase the cost of breaking into next-generation iPhones security.apple.com/blog/memory-...

Oh look, the iOS vulnerability is yet another weird subcase of image decompression, who could possibly have predicted.

Introducing Rusted Firmware-A (RF-A) - A Rust-Based reimagination of Trusted Firmware-A Why Rusted Firmware-A?

Very excited to see this

www.trustedfirmware.org/blog/rf-a-blog

#rust #memory-safety

@blackhoodie.bsky.social will be at @sec-t.bsky.social on September 10th with a training on Linux Malware Reverse Engineering, for women by women! We have very few seats left 😁 blackhoodie.re/SecT2025/

At USENIX Security? Then check out:

Studying the Use of CVEs in Academia, won distinguished paper award www.usenix.org/conference/u...

Discovering and Exploiting Vulnerable Tunnelling Hosts, won most innovative research Pwnie @ DEFCON www.usenix.org/conference/u...

Big thanks to all co-authors!!

Google's 'Big Sleep' Just Became the First-Ever AI to Prevent a Cyberattack Google's Big Sleep is just a year old, and for the first time it as able to detect and help close a vulnerability at risk of being exploited.

Quote of the day: "Nicely done. It doesn’t undo all the (often rightly deserved) bad press that AI agents have received lately, but good news is good news."

www.vice.com/en/article/g...

#BigSleep #VulnResearch

I rarely post personal things. But I need to talk about my 4-year-old niece, Hope.

She has a rare disease. A drug called elamipretide has helped her survive.

But the FDA recently denied its approval.

Now, her health hangs in the balance.

Please share her story & urge the FDA to reconsider. 🧵

Yes!

B

It has been genuinely moving — moved me to tears, actually — to see so much support for our work at @lawfaremedia.org.

Since yesterday, 3 additional donors have agreed to match contributions up to 5K each — thank you @judgeluttig.bsky.social for helping us get there! givebutter.com/journalism/a...

This is wonderful, but they are still far short of their goal. Please share and donate if you can. We need Lawfare more than ever.