Diffract-AI retweeted
Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM by @HototogisuTian and Gongming Wang
Diffract-AI retweeted
Dr. Zhiniang Peng (@edwardzpeng) reveals how he discovered 200+ confirmed vulnerabilities in Microsoft Windows with the help of AI. The game has changed completely. 🤯
We’ve published our analysis of CVE-2026-97798, a Windows Faultrep TTD option-injection vulnerability discovered and reported by Diffract. It allowed a standard user to execute native code as SYSTEM through a trusted broker.
Technical details and demo:
diffract-ai.com/research/cve…
Microsoft’s October 2026 security updates fixed 86 Windows CVEs reported by Diffract, spanning the Windows kernel, file systems, storage stack, device drivers, and other core components.
We’ll continue digging into underexplored Windows attack surfaces while expanding Diffract’s research to other operating systems. More research and technical write-ups are coming.
msrc.microsoft.com/update-gu…
Diffract-AI retweeted
I and @__wgg__ will be speaking at OffensiveCon Tokyo 2026 on October 27–28.
If you’ll be there, feel free to join our session and say hello. See you in Tokyo.
September was a milestone for Diffract: Microsoft patched 80 Windows CVEs identified by Diffract—11.1% of the 723 Windows CVEs addressed this month.
Diffract keeps moving forward as we expand it into new security research scenarios.
diffract-ai.com/
One standout Diffract finding is CVE-2026-69579: a Critical Windows Message Queuing RCE rated CVSS 9.8/10—near the top of the severity scale.
Microsoft patched it in September as part of this month’s Windows security release.
msrc.microsoft.com/update-gu…
Diffract (developed by @HototogisuTian @2st___) is an AI vulnerability research agent that goes beyond LLMs—we focus more on the nature of bugs than on AI engineering.
Q2 results:
• 37 Microsoft acknowledged CVE
• #1 on the MSRC Windows leaderboard
• #4 overall on MSRC