Pulling Gemini Secrets and Windows HVPT

Day[0]

Content provided by dayzerosec. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by dayzerosec or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.

12d ago 1:33:22

MP3•Episode home

A long episode this week, featuring an attack that can leak secrets from Gemini's Python sandbox, banks abusing private iOS APIs, and Windows new Hypervisor-enforced Paging Translation (HVPT).

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/280.html

[00:00:00] Introduction

[00:00:18] Doing the Due Diligence - Analyzing the Next.js Middleware Bypass [CVE-2025-29927]

[00:29:20] We hacked Google’s A.I Gemini and leaked its source code (at least some part)

[00:44:40] Improper Use of Private iOS APIs in some Vietnamese Banking Apps

[00:55:03] Protecting linear address translations with Hypervisor-enforced Paging Translation (HVPT)

[01:06:57] Code reuse in the age of kCET and HVCI

[01:13:02] GhidraMCP: LLM Assisted RE

[01:31:45] Emulating iOS 14 with qemu

Podcast episodes are available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

281 episodes

#Tech #dayzerosec