Research notes from 0sec, an applied cybersecurity research lab.https://0.security/en-ushttps://0.security/blog/fixing-the-linux-kernel/https://0.security/blog/fixing-the-linux-kernel/The same automated research pipeline that audits npm packages now reads kernel C and has landed 0sec-authored fixes in the mainline Linux kernel, each maintainer-reviewed and flowing into stable where applicable. Here's what merged, and how.Fri, 24 Jul 2026 00:00:00 GMThttps://0.security/blog/does-it-discover-or-recall/https://0.security/blog/does-it-discover-or-recall/The question that separates a real automated bug-finder from a demo. We ran the airtight version, bugs fixed after the model's training cutoff, stripped, no hints, and the honest 0/4 result maps the actual frontier of automated discovery better than any win would have.Wed, 22 Jul 2026 00:00:00 GMThttps://0.security/blog/finding-the-bug-is-the-easy-part/https://0.security/blog/finding-the-bug-is-the-easy-part/Our engine confirmed a real kernel-privilege primitive in a stripped, closed-source Windows driver. Machine-verified, no symbols. It called the bug novel. It was a CVE from 2024. Here is the failure mode that hides in every automated bug-finder, and the gate we built so it can't happen again.Tue, 21 Jul 2026 00:00:00 GMThttps://0.security/blog/the-drivers-nobody-fuzzed/https://0.security/blog/the-drivers-nobody-fuzzed/The signed Windows drivers that hand attackers kernel access are closed-source: no symbols, no source, invisible to every source-based fuzzer. We built a machine that locates the dangerous IOCTL in a stripped .sys and confirms the primitive on a live kernel, no human in the loop. Here is how, and the discipline that keeps it honest.Mon, 20 Jul 2026 00:00:00 GMThttps://0.security/blog/the-bug-with-no-source/https://0.security/blog/the-bug-with-no-source/Strip a binary of source, symbols, and DWARF and it is supposed to be opaque to automated analysis. We stripped an OSS-Fuzz target of all three and our engine still found the bug. A stripped binary is an information problem, not an impossibility.Sun, 19 Jul 2026 00:00:00 GMThttps://0.security/blog/when-the-sanitizer-is-the-wrong-oracle/https://0.security/blog/when-the-sanitizer-is-the-wrong-oracle/Two recently-patched Linux kernel use-after-frees. Trivially reachable from an unprivileged process, they fire on demand and produce zero KASAN reports by construction. A study in the two most misread words in exploitation: 'reachable' and 'confirmed'.Fri, 17 Jul 2026 00:00:00 GMThttps://0.security/blog/ai-agents-are-entering-the-kernel/https://0.security/blog/ai-agents-are-entering-the-kernel/The real benchmark for AI security research is whether a finding survives maintainer review, lands upstream, and gets carried into the software people actually run. The public record is starting to show ours does.Thu, 16 Jul 2026 00:00:00 GMThttps://0.security/blog/validation-read-stability/https://0.security/blog/validation-read-stability/A validation soundness bug class in JavaScript. Some widely-used validators inspect the caller's live object and hand it back unchanged, so a getter or Proxy can slip a value past the schema that the app then uses. We confirmed it in class-validator and superstruct. joi and zod are safe, and the reason they are safe is the fix. Reported upstream.Tue, 14 Jul 2026 00:00:00 GMThttps://0.security/blog/one-research-loop-evidence-matched-to-the-target/https://0.security/blog/one-research-loop-evidence-matched-to-the-target/Why vulnerability research needs target-specific harnesses and oracles, but one shared discipline for evidence, novelty, and impact.Sat, 11 Jul 2026 00:00:00 GMThttps://0.security/blog/nfc-llcp-15-year-kernel-bug/https://0.security/blog/nfc-llcp-15-year-kernel-bug/An unauthenticated NFC peer could crash the kernel with one malformed frame. The bug shipped in 2011 and sat in every kernel since. Automated source analysis surfaced it. The fix is accepted upstream in the NFC maintainer tree and heading to mainline (ed85d4cbbfaa).Thu, 09 Jul 2026 00:00:00 GMThttps://0.security/blog/the-bugs-fuzzers-cant-see/https://0.security/blog/the-bugs-fuzzers-cant-see/Automated kernel bug-finding has converged on one technique: fuzzing. It has a ceiling built in. We do it differently. We read the source and reason about it, to find the bug classes a fuzzer is structurally blind to.Sun, 05 Jul 2026 00:00:00 GMThttps://0.security/blog/swiss-securitytxt-survey/https://0.security/blog/swiss-securitytxt-survey/Nine in ten Swiss websites publish no security.txt, so a researcher has no way to report a vulnerability. We checked every .ch domain in two public lists. Here is the data, and the ten-minute fix.Wed, 03 Jun 2026 00:00:00 GMThttps://0.security/blog/triage-moat-and-multi-benchmark-validation/https://0.security/blog/triage-moat-and-multi-benchmark-validation/Ablation testing as scientific method: an 11-layer false-positive triage stack, the one broken layer that almost masked the rest, and the multi-benchmark portfolio that surfaces what a single suite would miss.Wed, 20 May 2026 00:00:00 GMThttps://0.security/blog/xbow-benchmark-methodology-and-verification/https://0.security/blog/xbow-benchmark-methodology-and-verification/Over 37% of standard web vulnerability challenges fail to build on clean systems because Docker images and package repos rot. Read the benchmark score without knowing the substrate and you cannot compare it to anything.Sun, 17 May 2026 00:00:00 GMThttps://0.security/blog/agentic-pentesting-on-xbow/https://0.security/blog/agentic-pentesting-on-xbow/Shell-first design as a discovered architecture for autonomous pentesting agents. One bash tool outperforms a structured toolkit across public benchmarks, the AI/LLM security suite, and adjacent domains.Thu, 14 May 2026 00:00:00 GMThttps://0.security/blog/2026-05-07-orchestration-not-frontier/https://0.security/blog/2026-05-07-orchestration-not-frontier/Niels Provos shipped a vulnerability-discovery framework that replicates Mythos-class findings on commercial models, plus one autonomous CVE on an open-weight model. It is the same bet 0sec is built on. Here is what we already do, what we need to borrow, and the four gaps we are closing.Thu, 07 May 2026 00:00:00 GMThttps://0.security/blog/2026-04-07-deleting-better-sqlite3/https://0.security/blog/2026-04-07-deleting-better-sqlite3/An engineering note from building 0sec's engine. We migrated the persistence layer from better-sqlite3 to a pure-WASM SQLite build. What broke, what we kept, and why dropping the native module made the engine run identically on every Node.js version.Wed, 08 Apr 2026 00:00:00 GMThttps://0.security/blog/2026-04-06-the-marketing-rewrite/https://0.security/blog/2026-04-06-the-marketing-rewrite/An autonomous AI attacker on contract, pointed at your product. Closed beta, by application only. Founder-led from Zürich.Mon, 06 Apr 2026 00:00:00 GMThttps://0.security/blog/attack-surface-xbow-doesnt-test/https://0.security/blog/attack-surface-xbow-doesnt-test/Traditional web vulnerability benchmarks miss the entire AI/LLM security attack surface. Prompt injection, jailbreaks, MCP tool abuse: none of it appears in standard 104-challenge web security suites.Sat, 04 Apr 2026 00:00:00 GMThttps://0.security/blog/blind-verification/https://0.security/blog/blind-verification/Every security scanner drowns its users in false positives. Closing that gap took three architectural attempts before one of them worked.Mon, 30 Mar 2026 00:00:00 GMThttps://0.security/blog/how-ai-agents-found-7-cves/https://0.security/blog/how-ai-agents-found-7-cves/A three-week methodology validation. Claude Opus, applied systematically to popular npm packages, surfaced 73 findings and disclosed vulnerabilities across packages with 55M+ weekly downloads. Here is how the workflow operates.Fri, 27 Mar 2026 00:00:00 GMThttps://0.security/blog/the-age-of-agentic-security/https://0.security/blog/the-age-of-agentic-security/If AI agents can write 1,000 pull requests a week, AI agents should be testing 1,000 pull requests a week. The asymmetry is about to collapse.Tue, 24 Mar 2026 00:00:00 GMT