deepsec.cc | Chapter III
AI rises, old ways falter; they say security research nears dusk.
When the world no longer believes in knights—shall we still be Quixote?
📧 [email protected]
🌐 deepsec.cc
📅 July 24, 2026
📍 Shanghai, China
- #deepsec "IsolatOS: A Fast Kernel TOCTOU Harness for AI Training" by Haowei Yang, Yingjie Cao & @bestswngs. AI can fuzz its way into plenty of bugs, but TOCTOU races stay invisible — no crash, no signal, no reward. They built the harness that puts TOCTOU in the training loop.
- #deepsec "A Journey to Break Apple's PPL". PPL's been the kernel's last line of defense on A12+ for years, and it's held up. @pattern_F_ shares two ways through — and maybe one opens the door to an iOS 26 jailbreak…? 🙊 deepsec.cc/202607/speaker…
- #deepsec "One Chain to Own Them All: Breaking AI Infrastructures". weights_only is the protection everyone leans on. @azraelxuemo & @llfamsec got past it — one heap overflow (CVE-2026-24747) hitting vLLM, ComfyUI, Elasticsearch & more, on default configs. deepsec.cc/202607/speaker…
- #deepsec "Tearing Down DarkSword". An iOS one-click chain, all in JavaScript — breaks PAC via SPRR-protected dyld, takes read/write in GPUProcess, rides to kernel r/w. @WHW_0x455 unpacks it link by link. 👉deepsec.cc/202607/speaker…
