正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

nafiez

2,432 subscribers

25,164 次观看 • 2 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

7 条评论

Herb Page 的头像

Herb Page2 个月前

which model did you use to find this?

nafiez 的头像

nafiez2 个月前

Initially found via manual audit and then I throw the rest of analysis to Opus 4.6. It does the job from verifying the bug to PoC.

Mark 的头像

Mark2 个月前

Why won't they fix? Don't they know how?

nafiez 的头像

nafiez2 个月前

I have no idea 😅

Dirt Jordan 的头像

Dirt Jordan2 个月前

I'd call this more than moderate. A deterministic kernel crash over TCP from a Linux box gets moderate severity, no CVE, no bounty. The servicing bar only moves for RCE.

nafiez 的头像

nafiez2 个月前

Its their decision. We can’t do much from our side 😅

Dirt Jordan 的头像

Dirt Jordan2 个月前

I'd still call a remote kernel crash over TCP more than moderate. MSRC's bar is RCE-or-bust now. Your writeup proves the real impact.

相关视频

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

25,347 次观看 • 1 年前

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 次观看 • 1 年前

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

BBC Breakfast

116,558 次观看 • 3 年前

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

McCaulay

292,756 次观看 • 3 年前

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

nyxgeek

41,729 次观看 • 10 个月前

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

Yoshua Bengio

15,550 次观看 • 1 个月前

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

93.7 The Fan

20,297 次观看 • 5 个月前

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Arcee.ai

21,934 次观看 • 1 年前

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

NVIDIA AI Developer

244,885 次观看 • 11 个月前

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

Dominik Koch

17,125 次观看 • 5 个月前

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

OpTic Crimsix

525,877 次观看 • 2 年前

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Derrick Evans

71,980 次观看 • 5 个月前

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

Emily Campbell ✿

34,946 次观看 • 6 个月前

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

Overton

298,258 次观看 • 1 年前

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

Sky News

318,017 次观看 • 7 个月前

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

Guillem Balague

28,979 次观看 • 23 天前