Ước 🥹

@vudq16 Slide: https://t.co/ef1eUieyCr Recording:

Just a quick reminder: Copilot on https://t.co/eLVLz54TkG ( https://t.co/kp59kwHIFU) is not on scope for bounty 🥲 https://t.co/97nAwrizaT

Congrats @_l0gg! You did the thing I thought was impossible. Hard work pays off 💪

Happy to share that my colleague @vudq16 and I will be speaking at PHDays in Moscow 🇷🇺 next week, May 24th. I’ll share a story from one of our red team projects, with techniques to maximize stealth during the operation. Hope to make new connections there:D https://t.co/PkfCZfiT7v

That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.

Nice play. #Pwn2Own #Xiaomi13Pro

* People ask LLMs to write code * LLMs recommend imports that don't actually exist * Attackers work out what these imports' names are, and create & upload them with malicious payloads * People using LLM-written code then auto-add malware themselves https://t.co/Va9w18RpWu

@PeckShieldAlert @peckshield @SlowMist_Team @BlockSecTeam @cz_binance and @0xblvck_ pointed out the exploit block 26864890 has only one transaction. We need some explanation from @ankr ?

Success! dungdm (@_piers2) of Team Viettel (@vcslab) used an uninitialized variable and a UAF bug to exploit Oracle VirtualBox. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver

Success! @hoangnx99, @rskvp93, and @_q5ca from Team Viettel (@vcslab) used a 2-bug chain in their attempt against Microsoft Teams. They earn $75,000 and 8 Master of Pwn points.

Success! @testanull of @starlabs_sg was able to execute a 2-bug chain on Microsoft SharePoint. They earn $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OVancouver

Now we are back with 2 entries. Come on! https://t.co/c3vmDYrJGv

Good works 👍 @BlockSecTeam successfully blocked an attack to rescue 2,906 ETH. https://t.co/EcK4GetFKo Then the attacker left a message: https://t.co/XeVyh1GJkV

Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99

This might be the best compilation of critical issues/exploits from 2022, with explanations. If you want to do good as an auditor make sure you understand how those attacks work. Thanks @patrickd_de this is golden🫡 https://t.co/SDVAWMAuY3

#microsoft #exchange #RCE #tabshell #owassrf #PowerShell #tabexpansion #bugbountytips #viral #xuhuớng

My Twitter Interaction Circle Generate yours at https://t.co/nNpcxmURfq ⠀

Hi folks, So, anyone has any idea how to make direct contact with the CTFTime team (maybe they’re on holiday) ? Our TetCTF2023 will start in the next 9-10 days but the CTF event is still not listed on CTFTime :'(. (1/2)

Finally, I can use the skills I studied so hard 13 years ago!