Passkeys, parser differentials, and another week full of fun content!
Trail of Bits walks us through how passkeys work and what their limitations are: The cryptography behind passkeys.
A keynote from Joern Schneeweisz on parser differentials, featuring plenty of fun bugs and clever exploits. If you still think all parsers behave the same, check these slides: Parser Differentials.
The journey of reversing Windows Security Center to disable Windows Defender: How I ruined my vacation by reverse-engineering WSC.
A bit of fun with the macOS permission pop-up: Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250).