Passkeys, parser differentials, and another week full of fun content!
Trail of Bits walks us through how passkeys work and what their limitations are: The cryptography behind passkeys.
A keynote from Joern Schneeweisz on parser differentials, featuring plenty of fun bugs and clever exploits. If you still think all parsers behave the same, check these slides: Parser Differentials.
The journey of reversing Windows Security Center to disable Windows Defender: How I ruined my vacation by reverse-engineering WSC.
A bit of fun with the macOS permission pop-up: Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250).
Want to build these skills hands-on?
PentesterLab has 700+ real-world labs on web hacking, code review, and vulnerability analysis. Start with a free account.