Calif

Our own Bruce Dang and Thai Duong went on the Bloomberg Odd Lots podcast to discuss AI, cyber and php2shell. Highly recommended to get a glimpse of what’s going on at the frontier of hacking with AI! https://lnkd.in/eRWAxBup

Just in time for Halloween: Rust in Peace 🎃 We often share how we break software. Today, we show how we help defend it, replacing vulnerable C++ code with Rust, without a full rewrite. A practical look at turning exploitation knowledge into stronger defenses. Links in the comments.

KEYNOTE // Adapting to the Brave New World of Computer Security Bruce Dang // Calif.io AI capabilities in bug discovery, exploitation and reverse engineering are advancing at remarkable speed. But does that mean computer security is becoming a “solved” problem for AI? Bruce Dang will share Calif.io’s experience applying frontier models to difficult computer security problems — including where they have succeeded, where they continue to fail, and the challenges security researchers and defenders need to prepare for next. Bruce brings a unique perspective developed over a career that has included the Microsoft Security Response Center, analysis of Stuxnet, co-authoring Practical Reverse Engineering, security work at Apple, and now research into AI and computer security at Calif.io. Read about the keynote: https://lnkd.in/ge9X-8vK

Calif researchers are at [un]prompted SF, presenting zero-click attacks and php2shell. You don't want to miss this! Tue Oct 27, Stage 1, 16:45, "0-Click Remote Exploits in an AI World" with @pwnlambda and Bruce Dang. Wed Oct 28, Stage 1, 14:45, "PHPocalypse: Finding, Exploiting, and Disclosing php2shell" with @lcfr_hax and Thai Duong.

Apple Watch, Pyongyang special version, by Stefan Esser. Order yours here!

We hacked the iPhone Duo on release day, adding a much needed feature, inspired by our own php2shell hacker Ryan Austin! What else to hack? Wrong answers only.

Calif was founded with a mission to make the Internet a more secure place for everyone. In the last few months, we have been seeing significant advances in AI model capabilities, especially in the domain of offensive security research. In addition to publishing our research and learnings, we wondered what else we could do to help defenders. While large corporations and government agencies have the dedicated budget and human resources for incident response and forensics, there are non-profit organizations –- collectively known as civil society organizations –- investigating digital threats affecting vulnerable groups and they are funded entirely by volunteers. In order to perform their job, the civil society researchers may need to extract data from mobile devices for forensic purposes, reverse engineer malware, and conduct similar security tasks. This work can be challenging given the restricted environments on some mobile devices. We understand these technical challenges and will offer our research services and capabilities to these organizations, free of charge. We support them and their mission. If you represent such an organization and need assistance, contact us at help@calif.io.

4/ And, finally, APT stands for Apple Persistent Threat

3/ Can your iPhone do this?

2/ But who cares about a third-party app when everyone uses iMessage!