Director of Offensive Security @NVIDIA, architecting @RISC_V, @LKRG_org Founder, @BlackHatEvents & @Defcon Speaker, #Phrack author, @PwnieAwards nominee
Joined July 2015
- Tweets798
- Following345
- Followers3.5K
- Likes1.7K
Pinned Tweet
Happy to share I was elected a Vice Chair of @risc_v J-ext Task Group. My recent work:
-Author of RISC-V Pointer Masking extension
-Help driving I/D consistency extension
-Contributor to RISC-V Control Flow Integrity (CFI)
-HWASAN and Memory Tagging (MTE) on RISC-V
-CVE-2021-1104
I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR).
Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up.
jobs.nvidia.com/careers?quer…
Impressive @brucedang ;-)
Today we published WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android.
We call you on WeChat and, without you answering or doing anything, take over your account within seconds. Then we use your phone to call your friends.
Story and demos: calif.io/research/weworm
Adam 'pi3' Zabrocki retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
Adam 'pi3' Zabrocki retweeted
Submissions are still open!
If you've been sitting on a bug, technique, war story, weird research rabbit hole, or beautifully cursed idea: now is the time.
Write something worth archiving.
Phrack CFP closes June 30.
More details on how to submit at phrack.org/news
Adam 'pi3' Zabrocki retweeted
Linux Kernel Runtime Guard @lkrg_org 1.0.1 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.19 and 7.0, contains hardening changes and bug fixes openwall.com/lists/announce/…
Adam 'pi3' Zabrocki retweeted
Looks like @ProtonMail rate-limits incoming SMTP by simply blocking sending IPs. We got many sockets in SYN-SENT to them, which is slowing down mail queue processing for all other subscribers to oss-security and more. I'm starting to block ProtonMail on our end. :-( Any solution?
Adam 'pi3' Zabrocki retweeted
I absolutely love how the book cover turned out!
nostarch.com/spacecraft-hack…
@nostarch
Adam 'pi3' Zabrocki retweeted
2025-06-05
"Analyzing Baseboard Management Controllers to Secure Data Center Infrastructure"
By Adam 'pi3' Zabrocki @Adam_pi3 & Alex Tereshkin @alextereshkin
Added at darkmentor.com/timeline.html…
Pulling back the curtain on #NVIDIA GPUs - microcontrollers, isolation, threat models, and hardening. What it all means for real attackers? All of that and more in our DEF CON talk👇
youtube.com/watch?v=KhWtkZmO…
#DEFCON #GPU #Security #Firmware #Hardware
Forgot to mentioned that our talk "How to secure unique ecosystem shipping 1 billion+ cores?" has been accepted to @defcon #defcon33 as well!
defcon.org/html/defcon-33/dc…
Adam 'pi3' Zabrocki retweeted
Linux Kernel Runtime Guard (LKRG) 1.0 first mature release + talk slides openwall.com/presentations/N…
Adam 'pi3' Zabrocki retweeted
We've just published the slides of @solardiz's @Nullcon Berlin 2025 talk "Linux Kernel Runtime Guard (LKRG) 1.0" openwall.com/lists/announce/… #LKRG #nullconBerlin2025 #nullcon
ALT What is LKRG - Project of Adam 'pi3' Zabrocki - Brought under Openwall umbrella for its first public release in 2018 - (Post-)detection of (and response to) kernel rootkits and exploits - Linux kernel module that performs - Runtime integrity checking of the *kernel* and *modules* (including itself) <- "code" - and of *CPU* flags and *globals* and the kernel's view of running *processes* <- "data" - Sanity-checking of *control flow* (stack unwinding) and blocking some APIs - Response to (almost-)successful attacks and encrypted remote logging - 20+ contributors total, 4 very active this release cycle (0.9.9 to 1.0.0) - Also users contribute testing beyond what we could perform ourselves - Independent project with some corporate support - Remote logging research and initial implementation in 2022 by Binarly - Many general improvements, releases, packaging in 2023-2025 by CIQ
Adam 'pi3' Zabrocki retweeted
Did you miss our @defcon panel this year? It's hacker history storytime hosted by @richinseattle @netspooky @chompie1337 with special guests! Check it out: youtube.com/watch?v=TW-D1I27…
Adam 'pi3' Zabrocki retweeted
Linux Kernel Runtime Guard 1.0 Released For Security Vulnerability Exploit Detection
phoronix.com/news/LKRG-1.0-R…
Adam 'pi3' Zabrocki retweeted
Linux Kernel Runtime Guard @lkrg_org 1.0.0 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.13+ (tested to 6.17-rc4), forward-edge CFI (Intel CET IBT, KCFI), ..., reduces performance overhead, shrinks the codebase by ~2500 lines. openwall.com/lists/announce/…
Heading to Nullcon Berlin 2025? @solardiz will share his LKRG expertise by taking an in-depth look at kernel hardening challenges and what it takes to protect systems in the real world.
nullcon.net/berlin-2025/spea…
#NullconBerlin2025 #LinuxSecurity #RLC_H
Adam 'pi3' Zabrocki retweeted
At long last - Phrack 72 has been released online for your reading pleasure!
Check it out: phrack.org/
ALT The table of contents for Phrack 72 from phrack.org
Turns out that @phrack coins for authors are actually pretty cool :)
Cc: @richinseattle
Adam 'pi3' Zabrocki retweeted
What happens when attackers reach your Linux kernel?
The Linux Kernel Runtime Guard (LKRG) continuously monitors kernel integrity in real-time, detecting exploits as they happen - including zero-days that other security measures miss.
Key features:
• Runtime integrity checking
• Real-time exploit detection
• Minimal performance impact (2.5%)
• No reboot required for deployment
Read our technical brief written by Solar Designer (@solardiz): hubs.li/Q03zDVFb0
#LinuxSecurity #KernelSecurity #CyberSecurity #LKRG
