Publications from Calif

MAD Bugs: Month of AI-Discovered Bugs

Apple Internals

A series reverse-engineering Apple's internals.

Security Research

• A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets

Security Audits

• Shamir39 Security Audit, commissioned by an unnamed client.

• Mbed TLS 3.6.2 Security Audit, commissioned by Google.