sam4k (@sam4k1) / X

sam4k

353 posts

sam4k

@sam4k1

head of vr @bynar_io 🌱 pwning kernels & blogging on os internals

London, United Kingdom

Joined January 2020

sam4k
@sam4k1
Jul 29
here's a writeup on a cool macos screensharingd rce @__rev found 🍎🤓
bynario
@bynar_io
Jul 29
Apple patched an incredible number of bugs in this July release (26.6). We like our CVEs served with a side of PoC, especially those that provide a shell and not just a crash. We believe this one is of particular interest because, well, it gives you a root remote shell on the
sam4k
@sam4k1
Jul 8
My team is hiring! 🙌 Check out the link below for more details, feel free to ping me if you have any Qs :)
bynario
@bynar_io
Jul 8
We're hiring a vulnerability researcher! If you're interested in working at the intersection of security research & AI, check out the role below or reach out to @sam4k1 if you have any questions. wellfound.com/jobs/4424689-v…
sam4k
@sam4k1
May 20
in this post i explore how small local models handle discovery and validation of a couple of kernel vulns 🤓
bynario
@bynar_io
May 20
To wrap-up the series, @sam4k1 puts local models running on a Mac Studio head-to-head with Opus 4.6 on the kernel bugs, CVE-2026-31532 & CVE-2026-31694, from parts 1 & 2. bynar.io/blog/discovery…
sam4k
@sam4k1
May 12
that's right, part 2 is already out (my personal blog could never), this one focuses more on what an LLM written kernel LPE looks like 🤖🐧
bynario
@bynar_io
May 12
Continuing the series: @sam4k1 digs into CVE-2026-31694, a page cache overflow in the kernel's FUSE subsystem that our pipeline surfaced and validated with an LPE on Ubuntu 26.04 using Opus 4.6. bynar.io/blog/discovery…
sam4k
@sam4k1
May 8
here's a technical write-up i wrote on one of the kernel bugs we've found :)
bynario
@bynar_io
May 8
In the first of a three-part series, @sam4k1 does a technical deep dive on CVE-2026-31532: a race condition in the Linux kernel's SocketCAN subsystem discovered, validated, and patched by our pipeline. bynar.io/blog/discovery…