Security Research @intel · kAFL : HW assisted feedback fuzzer for x86 VMs · tsffs : Coverage guided fuzzer built on SIMICS · OSWatcher: Git for OS

Paris
Joined October 2010
🚀 OSWatcher is finally out ! github.com/OSWatcher/oswatch… docker compose up -d And open http://localhost ⚡️Web UI, GraphQL API and Neo4j, all running locally 👉2,4GB Windows/Ubuntu graph corpus included Download requests for Windows binaries forwarded to Winbindex @m417z 👏
Some news: I'm open sourcing OSWatcher 🎉 First piece is neogit ⚡️ Commits entire OS filesystems into Neo4j as a content-addressed graph. Polishing the repo rn, here's a sneak peek 👇
1
5
15
1,988
Mathieu Tarral retweeted
LLMs are great at finding bugs, but so are fuzzers. @5aelo compared the vulnerabilities found in V8 by BigSleep, an agentic system, with those found by the Fuzzilli fuzzer. projectzero.google/2026/10/f…
6
46
3
173
11,435
Best commu !!! 🤜🤛. J’adore de comment avec juste un post sur X on arrive à faire des choses !! Merci encore @Numerama @juliencdt d’avoir host cette première. On itère et la prochaine fois on fait 3 fois plus grand encore !! On va transformer ça en event d’IA régulier 😍.
14
15
4
209
13,090
Mathieu Tarral retweeted
The ugly truth about France and some of the other European countries currently in turmoil - and which none of the politicians want to admit because it'd be political suicide - is that you can't solve the problem by going after immigrants (as the right asserts) or the rich (as the left asserts), but you could solve it by going after the old. One extraordinary statistic for you: people over 60 in France, a quarter of the population, own 60% of France's wealth, non-financial and financial (ofce.fr/pdf/revue/2025/3-192…). And here is another crazy statistic: that same quarter of the population, those above 60, receive nearly two-thirds of all social spending by the French government (previssima.fr/actualite/prot…) - which is famously among the highest in the world (France's government spending is an insane 57.3% of GDP). Last statistic: they make up about 40% of voters because they're a third of registered voters (insee.fr/fr/statistiques/266…), and they turn out far more than anyone else (franceinfo.fr/elections/sond…). Put our 3 statistics together and there's almost a bit of an apartheid situation here: the old own most of the country's wealth, collect most of the social spending and have the political power to keep it that way. Which makes them a de-facto rentier class, living off assets and transfers paid for by younger generations. And, of course, at the risk of stating a truism, the future is built by the young. Yet France keeps effectively taking money away from them to give it to those whose working lives are already behind them - and need the money far less since they already own the country's wealth. What about inheritance, I hear you ask? That's the funniest/saddest aspect: given that life expectancy has kept rising, the French now inherit a home at 54 on average. The most common case is someone in their 80s leaving it to heirs in their 50s, in effect the very old transferring wealth to the about-to-be old (insee.fr/fr/statistiques/fic…). You can add this to our earlier apartheid statement: on top of all the rest, even when the old finally let go of their wealth, it stays within their own "camp". That's my personal situation, incidentally: I'm 42, my father is 71 and he is starting to look at ways to pass things on to me and my siblings, when our professional lives are already well settled, so it'll arrive when it changes things the least, which is pretty much the French system in a nutshell. Now, I get that there'd be some unfairness in going after them: they paid into the system their entire working lives, playing by the rules of a social contract that told them if they paid up they'd collect at the end. Changing the rules now means breaking that promise, which is admittedly unfair. But there's no magic wealth tree in any society: you can only take it where it is. That's the way most major societal transformations end up happening. They're often triggered by a catastrophic event (the so-called "four horsemen": mass-mobilisation war, revolution, state collapse, plague) BUT what really drives change is a transfer: wealth gets pried from the privileged class who've been sitting on it and handed to those who'll build what comes next. So, in theory and in an ideal world, you can do without the catastrophic event and directly proceed with the transfer... The fact that in France, and elsewhere in Europe, it's the youth protesting is probably no coincidence - even though they don't frame it as a generational fight. And even though, cruel irony, the left politicians many of them march behind promise to bring the retirement age back to 60 (lcp.fr/actualites/legislativ…), which would make the situation even worse. Let's say they understand intuitively that the system is stacked against them, even if they haven't yet figured out how. And politicians are obviously doing what politicians do, meaning pandering to the people who actually vote, while pointing the young towards easier - and politically convenient - scapegoats. To be clear I'm not saying it's the only problem in France, VERY far from it. I'm also not saying that all old people in France live a lavish lifestyle at the expense of younger generations: there are also plenty of very poor retirees who, if anything, would deserve more. What I am saying is that it's probably the biggest elephant in the room: everyone can see it, nobody dares mention it - no politician, from any side, wants to run on cutting grandma's pension - and it makes every other problem harder to fix.
910
2,049
412
11,399
1,560,412
Mathieu Tarral retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
907
15,122
1,225
246,087
8,149,035
Mathieu Tarral retweeted
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
248
4,002
330
42,385
1,098,052
Mathieu Tarral retweeted
Just watched the @netflix Instadocs about the @OpenAI cyberattack on @huggingface. Super disappointing, as they went for maximum anthropomorphism of the technology and full doomer mode. I spent more than two hours with them trying to correct all their mistakes and ground this in reality, explaining that agents are technological systems, not aliens. But it looks like the drive to scare people for maximum views was too strong. Also, they didn’t mention the lack of containment and monitoring of the agents, how closed-model safeguards blocked our defensive work, or how we defended ourselves with AI using an open model. And that we still lack a lot of information and transparency, including full agent traces and that companies need to remain accountable for what their agents do. It ends up being a fun sci-fi movie though!
249
343
99
2,319
193,726
Mathieu Tarral retweeted
Have to give the EU regulators credit where it’s due for making all Apple products use USB-C
3,587
5,865
602
168,178
8,150,084
Mathieu Tarral retweeted
Replying to @elonmusk
From a high-pressure belly, your fart might propel you upward and forward. Come to think of it, that's exactly how your car is powered: A 700 bar, 600 liter, 3 second, noisy fart 😆 [Hopefully without the methane and the smelly compounds]
319
323
77
6,026
427,984
Everybody LOVES French history until the French start history-ing
154
28,172
242
205,391
1,365,920
Mathieu Tarral retweeted
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
169
559
116
4,857
696,178
Mathieu Tarral retweeted
This hacker news thread is absolutely heart-breaking. Whoever thinks “humans will find a way” ought I read it.
668
917
411
15,128
2,662,535
Mathieu Tarral retweeted
Hi friends, I’m looking for work in threat intel / vulnerability research. I’m based in the UK and open to relocation or remote. Most recent work is CVE-2026-58532 in the Windows kernel, and many contributions to OpenJDK. DMs open, RTs are appreciated :) aprl.pet/writing/cve-2026-58…
5
24
122
6,173
Joint statement of the foreign minister of Canada, Denmark, Germany, France, Italy, Japan, The Netherlands, United Kingdom
202
1,136
79
3,710
155,155
Mathieu Tarral retweeted
As I promised, Exploiting Reversing (ER) series: article 10 | iOS Security Research (part 01) is available on my blog now: exploitreversing.com/2026/10… The primary source for new articles is blackstormsecurity.com/resea…, but articles will continue to be published on my blog with a one-week delay. Enjoy the reading and have an excellent day. #iOS #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #KernelSecurity
2
66
1
335
14,639
Mathieu Tarral retweeted
Meet Mistral Large 4, aka Le Chonk. • 1T parameters, natively multimodal. 49B active. It is the best open weights model from US or Europe on aggregated benchmarks. • State-of-the-art on critical workloads, including cyber defense, manufacturing and finance and it surpasses closed frontier models on visual grounding. • Forged in Europe end-to-end and is deployable from Europe via our own Mistral Cloud infrastructure. • Available to all via API today. Working with cybersecurity partners privately. Open weights release end of October.
🤖 Made with AI
2,036
4,570
2,807
40,657
5,729,743
Mathieu Tarral retweeted
The official IDA MCP Server is here. It's free, open source, and works with any LLM. Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time. 𝚞𝚟𝚡 𝚒𝚍𝚊-𝚑𝚌𝚕𝚒 𝚖𝚌𝚙 𝚒𝚗𝚜𝚝𝚊𝚕𝚕 hex-rays.com/blog/hex-rays-i… (copy-paste: uvx ida-hcli mcp install)
33
219
16
1,412
144,773
Mathieu Tarral retweeted
I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR). Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up. jobs.nvidia.com/careers?quer…
12
84
7
468
45,943
Mathieu Tarral retweeted
Turns out waiting for a good time to upgrade my PC was a terrible idea
588
6,956
559
161,706
2,315,088
Mathieu Tarral retweeted
Pete Hegseth: “Europe needs the Strait of Hormuz more than we do. Get on a boat. This is their fight, not ours.” This is the dumbest and most disgraceful U.S. administration in American history. They started the war themselves, and now it’s: “This is your problem — go clean up the mess.”
1,891
5,708
475
23,154
804,055