<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Dylan Iffrig-Bourfa &#8211; SCRT Team Blog</title>
	<atom:link href="/author/dib/feed/" rel="self" type="application/rss+xml" />
	<link>/</link>
	<description>Orange Cyberdefense Switzerland&#039;s technical blog</description>
	<lastBuildDate>Tue, 22 Sep 2026 07:34:59 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.10</generator>

<image>
	<url>/wp-content/uploads/2024/10/cropped-favicon-32x32-1-32x32.png</url>
	<title>Dylan Iffrig-Bourfa &#8211; SCRT Team Blog</title>
	<link>/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>How One Twitch Chat Message Became Code Execution on a Streamer’s PC</title>
		<link>/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/</link>
		
		<dc:creator><![CDATA[Dylan Iffrig-Bourfa]]></dc:creator>
		<pubDate>Tue, 22 Sep 2026 07:06:37 +0000</pubDate>
				<category><![CDATA[Exploit]]></category>
		<category><![CDATA[Research]]></category>
		<category><![CDATA[Vulnerability]]></category>
		<guid isPermaLink="false">/?p=7426</guid>

					<description><![CDATA[A vulnerable chat overlay, an unsandboxed Chromium renderer, and a V8 bug already exploited in the wild were enough to turn viewer-controlled text into native code execution, with OBS itself left at its default settings. I found a Twitch chat overlay that rendered viewer messages as raw HTML inside an OBS Browser Source. That gives &#8230; <a href="/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/" class="more-link">Continue reading <span class="screen-reader-text">How One Twitch Chat Message Became Code Execution on a Streamer’s PC</span></a>]]></description>
		
		
		<enclosure url="/wp-content/uploads/2026/08/output2.mp4" length="864002" type="video/mp4" />

			</item>
		<item>
		<title>Attacking Android Antivirus Applications</title>
		<link>/2023/03/29/attacking-android-antivirus-applications/</link>
		
		<dc:creator><![CDATA[Dylan Iffrig-Bourfa]]></dc:creator>
		<pubDate>Wed, 29 Mar 2023 12:43:00 +0000</pubDate>
				<category><![CDATA[Exploit]]></category>
		<category><![CDATA[News]]></category>
		<guid isPermaLink="false">/?p=3848</guid>

					<description><![CDATA[Although the usefulness of security tools such as Antivirus, VPN and EDR is now indisputable in business circles, these solutions often need a lot of privileges and permissions to work properly, also making them an excellent target for an attacker. The presence of a bug in one of these types of solutions could allow a &#8230; <a href="/2023/03/29/attacking-android-antivirus-applications/" class="more-link">Continue reading <span class="screen-reader-text">Attacking Android Antivirus Applications</span></a>]]></description>
		
		
		<enclosure url="/wp-content/uploads/2023/02/poc.mp4" length="514750" type="video/mp4" />

			</item>
	</channel>
</rss>
