Everything we find, we learn, we publish.

Deep dive on chaining three FreeRDP bugs to achieve RCE with Gnome Remote Desktop by popping a remote shell with some old school memory corruption shenanigans.

A legacy macOS Screen Sharing path allowed a VNC-password-authenticated viewer to read protected files and create files as root. We turned that primitive into post-authentication remote root command execution - without memory corruption and beyond MIE's threat model. This is the story of CVE-2026-43760.

In this final part of our series on Bynario's LLM-driven discovery and validation in the Linux kernel, I wanted to spend some time exploring how local models perform in these tasks.

Last time we discussed the goal for this three-part series and analysed how our LLM-driven pipeline at Bynario was able to discover and validate CVE-2026-31532 , a use-after-free in the Linux kernel's Controller Area Network (CAN) module.

In the last month at Bynario, our LLM-driven pipeline has autonomously discovered, validated and patched two vulnerabilities in the Linux kernel:

How AI is reshaping vulnerability research and the future of system security I've written my fair share of blog posts, but I think this is the first one about me - it's surprisingly harder than writing about kernel internals. From a young age I've been interested in computers and understanding how t

I didn’t come to systems security through a syllabus. I arrived in this world sideways, when my curiosity and my obsession with figuring stuff out merged with underground culture.

Security tooling keeps throwing off noise. Especially in the age of AI, we keep seeing nightmare stories about fake reports, and the complexity around triaging given the incredible amount of reports being generated.

The year of Autonomous Security What an incredible year 2025 has been for security. We are seeing real tangible progress across many aspects of autonomous security, something we deeply believe in.