56,966 blogs · [ { "id": "01a0872d-f7c5-70b7-8d96-3b664a7a6d4e", "title": "0day: libpng APNG OOB Write", "url": "https://arielkoren.com/vulnerabilities/libpng-apng-write-fuzzing/", "published_at": "2026-08-06T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc6f1b01b", "title": "Skia RenameFont OOB. Google Won't Fix It.", "url": "https://arielkoren.com/writing/skia-renamefont/", "published_at": "2026-07-17T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc7b5408e", "title": "AI Slop Is a Leadership Problem", "url": "https://arielkoren.com/writing/ai-slop-leadership/", "published_at": "2026-07-12T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc8298ffc", "title": "Anvil: An Autonomous Vulnerability-Research Platform", "url": "https://arielkoren.com/writing/anvil-architecture/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc8fba173", "title": "LLMs Are Probabilistic. Agent Authority Cannot Be.", "url": "https://arielkoren.com/writing/agentic-boundaries/", "published_at": "2026-06-10T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc94482ea", "title": "OmniBoard: The Board Game Console That Didn't Pencil Out", "url": "https://arielkoren.com/writing/omniboard/", "published_at": "2026-05-13T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dc96f6e03", "title": "CVE-2026-48029: Two Grid-Decode Vulnerabilities in libheif", "url": "https://arielkoren.com/vulnerabilities/cve-2026-48029/", "published_at": "2026-05-02T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dca51b9e8", "title": "Forging malicious DOC, undetected by all VirusTotal static engines", "url": "https://arielkoren.com/archive/forging-malicious-doc/", "published_at": "2020-12-24T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dca872f38", "title": "Finding CVE-2020-1321: Fuzzing Microsoft Office's 3D Model Parser", "url": "https://arielkoren.com/vulnerabilities/cve-2020-1321/", "published_at": "2020-01-30T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dcb83e52e", "title": "Fusion - Level 06 solution", "url": "https://arielkoren.com/archive/fusion-level-06-solution/", "published_at": "2017-11-14T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dcbd5ea4b", "title": "Fusion - Level 05 solution", "url": "https://arielkoren.com/archive/fusion-level-05-solution/", "published_at": "2017-06-14T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dcbd5f60b", "title": "Nymaim malware: deep technical dive - adventures in evasive malware", "url": "https://arielkoren.com/archive/nymaim-deep-technical-dive/", "published_at": "2016-11-02T00:00:00+00:00" }, { "id": "01a0872d-f7c6-714e-8e65-c37dcc30e6e5", "title": "Ursnif malware: deep technical dive", "url": "https://arielkoren.com/archive/ursnif-malware-deep-technical-dive/", "published_at": "2016-11-01T00:00:00+00:00" } ] posts Claim your blog

Back to arielkoren.com

Blog · corpus.blog/blogs/arielkoren.com/posts

arielkoren.com

arielkoren.com

2026

0day: libpng APNG OOB Write original ↗

6 Aug 2026

Skia RenameFont OOB. Google Won't Fix It.original ↗

17 Jul 2026

AI Slop Is a Leadership Problem original ↗

12 Jul 2026

Anvil: An Autonomous Vulnerability-Research Platform original ↗

7 Jul 2026

LLMs Are Probabilistic. Agent Authority Cannot Be.original ↗

10 Jun 2026

OmniBoard: The Board Game Console That Didn't Pencil Out original ↗

13 May 2026

CVE-2026-48029: Two Grid-Decode Vulnerabilities in libheif original ↗

2 May 2026

2020

Forging malicious DOC, undetected by all VirusTotal static engines original ↗

24 Dec 2020

Finding CVE-2020-1321: Fuzzing Microsoft Office's 3D Model Parser original ↗

30 Jan 2020

2017

Fusion - Level 06 solution original ↗

14 Nov 2017

Fusion - Level 05 solution original ↗

14 Jun 2017

2016

Nymaim malware: deep technical dive - adventures in evasive malware original ↗

2 Nov 2016

Ursnif malware: deep technical dive original ↗

1 Nov 2016