The Curious Engineer

All blogs / Security

Calif

calif.io

Calif secures the AI you use every day. Red teaming and security engineering from the hackers trusted by OpenAI, Anthropic, Google, Cursor and xAI.

SecurityReverse engineeringOS / kernel

’23’24’25’26
Posts
73 from 2 Apr 2023 to 29 Oct 2026
Posting
weekly (58 in the last year)
Kind
company blog

2026 58

  1. memory-safety research
  2. rust research
  3. Rust in Peace
  4. PHP2Shell by Calif Research
  5. Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
  6. madbugs research
  7. openbsd research
  8. apple research
  9. CVE-2026-86950: The Great Glyph Grift
  10. zero-click research
  11. Apple Internals: Endpoint Security ships in iOS 27.2 beta
  12. android research
  13. Weworm
  14. OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root
  15. Password Fiction
  16. freebsd research
  17. The Taking of FreeBSD One Two Three
  18. linux research
  19. The WordPress Chain Massacre
  20. Apple MIE Exploitation Challenge
  21. Dark Elevator (CVE-2026-50343)
  22. windows research
  23. chrome research
  24. Journey to Root, Episode I: The Maglev King
  25. My Cousin Vinyl (CVE-2026-50052)
  26. Apple Internals: Swift in the Kernel
  27. Squidbleed (CVE-2026-47729)
  28. How to format a ciphertext
  29. crypto research
  30. OOBdump: Relocation Oriented Programming
  31. Read the research →
  32. Codex Discovered a Hidden HTTP/2 Bomb
  33. RedSun: Exploiting Windows Defender's Remediation Workflow
  34. An AI audit of FreeBSD
  35. Using IDA to Find Bugs in IDA (with Claude)
  36. reversing research
  37. CVE-2026-7270: How I Get Root on FreeBSD with a Shell Script
  38. php research
  39. Finding and Exploiting a 21-Year-Old Vulnerability in PHP
  40. QEMU and UTM Escape
  41. RCE in Ladybird
  42. An Apple Kernel Bug, Brought to You by Microsoft
  43. All Your Reverse Engineering Tools Are Belong to US
  44. "cat readme.txt" is not safe in iTerm2
  45. We Asked Claude to Audit Sagredo's qmail. It found a RCE.
  46. Learning to Jailbreak an iPhone with Claude (Part 1)
  47. safari research
  48. samsung research
  49. Codex Hacked a Samsung TV
  50. Claude + Humans vs nginx: CVE-2026-27654
  51. Feeding Claude Phrack Articles for Fun and Profit
  52. Claude Found an Auth Bypass in NSA's Ghidra Server
  53. Discovering a 0-Day in Zero Day
  54. Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
  55. vim vs emacs vs Claude
  56. Reverse engineering Apple's silent security fixes
  57. Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
  58. A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets

2024 8

  1. CVE-2024-10382: Arbitrary code execution in Android Auto and various apps
  2. Wormable Substack XSS
  3. web research
  4. Type confusion attacks in ProseMirror editors
  5. Dissecting LockBit v3 ransomware
  6. ransomware research
  7. Ransomware Response Strategy
  8. Microsoft Exchange 2010 Arbitrary User Impersonation

2023 5

  1. CraftCMS RCE
  2. Reproducing CVE-2023-38646: Metabase Pre-auth RCE
  3. Redash SAML Authentication Bypass
  4. cloud research
  5. Privilege escalation in AWS Elastic Kubernetes Service

Undated 2

  1. Company
  2. Jobs