Kaspersky: Mo Unpackers, Mo Problems.

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.

Part 1 of the Windows Registry Adventure series, introducing the research goals, methodology, and headline results from auditing how Windows parses registry data.

A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.

Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.

Part 6 of the Windows Registry Adventure series, examining kernel-mode registry objects and the additional attack surface they expose to privilege escalation research.

A deep dive into WebP image parsing and libwebp exploitation, tracing how memory corruption in the codec can be weaponized and why it became such a widely targeted surface.