Research on CyFunhttps://cyfun.dev/categories/research/Recent content in Research on CyFunHugo -- gohugo.ioen-usTue, 30 Sep 2025 06:30:05 +0000CVE-2025-32324: Android ActivityManagerShellCommand Authentication Bypass Leading to LaunchAnyWherehttps://cyfun.dev/research/cve-2025-32324/Tue, 30 Sep 2025 06:30:05 +0000https://cyfun.dev/research/cve-2025-32324/Deep analysis of CVE-2025-32324, a critical authentication bypass vulnerability in Android’s ActivityManagerShellCommand that enables LaunchAnyWhere attacks through thread context manipulation.eBPF JIT Compiler Internals: Understanding Constant Blinding Implementationhttps://cyfun.dev/research/ebpf-jit-compiler-internals-understanding-constant-blinding/Tue, 03 Jun 2025 06:30:05 +0000https://cyfun.dev/research/ebpf-jit-compiler-internals-understanding-constant-blinding/Deep dive into eBPF’s constant blinding mechanism - a security defense against JIT-spray attacks in the Linux kernel.How Attackers Are Weaponizing OAuth to Silently Take Over Microsoft Outlook Accountshttps://cyfun.dev/research/oath-exploited-by-attackers/Tue, 26 Nov 2024 06:30:05 +0000https://cyfun.dev/research/oath-exploited-by-attackers/Investigation into sophisticated OAuth phishing campaigns targeting Microsoft Outlook accounts that bypass traditional security controls.Novel approach to tackle UAF Bugs in the Linux Kernelhttps://cyfun.dev/research/bucket-allocators/Sun, 15 Sep 2024 06:30:05 +0000https://cyfun.dev/research/bucket-allocators/Analysis of dedicated bucket allocators as a novel mitigation technique for use-after-free vulnerabilities in the Linux kernel.