PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A look back at Hardwear.io USA 2025

eshard.com | research | #cloud | #vulnerability-research | #hardware-security | #reverse-engineering | #fault-injection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Highlights from Hardwear.io USA 2025: EMFI on Google Wifi Pro, STM32 flash extraction, PowerG protocol reverse engineering, and Rowhammer in cloud servers.
Published
Collected

Related coverage

research · eshard.com
MCUBoot Under (good) Pressure | Part 2: From the too-much to the achievable
Assessing the strength of MCUBoot against fault injection attacks thanks to simulation.
research · eshard.com
MCUBoot Under (good) Pressure | Part 1: Walk Around the Code
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
research · eshard.com
ALPhANOV and eShard's Laser Fault Injection Lab
Joint laser fault injection lab combining ALPhANOV optical systems and esDynamic. Single, dual, and quad laser sources for IC security evaluation, photoemission analysis, and picosecond fault injection.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
Back