Was a lot of fun giving this talk with @patateQbool showing off the stupid stupid stuff we do to pop mobile devices at Pwn2Own

Another big confirmation! Ben R. And Georgi G. of Interrupt Labs used an improper input validation bug to take over the Samsung Galaxy S25 - enabling the camera and location tracking in the process. They earn $50,000 and 5 Master of Pwn points. #Pwn2Own

Sweet! The team from Interrupt Labs used hardly any time at all exploiting the Lexmark CX532adwe and posting their message on the LCD. They head off tot the disclosure room to explain themselves. #Pwn2Own

Absolutely buzzing! The moment @XploitBengineer and @munmap successfully pwned the Samsung Galaxy S25 at @thezdi Pwn2Own! https://t.co/10EGx2vkH7

Was amazing being a part of this. Thank you everyone who made it such a success and congratulations to the CTF competition winners! 🎉

Checkout this 'Pathway to VR' profile from Axel, a Principal Researcher in our Browsers team in the US. Axel chats about how forming a community and presence for yourself online can be a great door-opener in the world of VR.

📣 The latest instalment of our VR Development Programme resources is now available on YouTube! 📣 An introduction to ARM64, ARM32 and x86-64 assembly for vulnerability research. https://t.co/F7Y8ktxJEc

📣 Exciting opportunity in our iOS team for a Senior Vulnerability Researcher with experience in Apple platforms. Remote or office based. https://t.co/kxJpQCYNse

📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub! Check them out at https://t.co/B53uulp9Th These ones are on software development: programming in C and Python.

I guess this mf of @patateQbool is finally hanging out with the cool kids @maxpl0it @sam4k1

This guy is way too nice. @SinSinology is one of the greats and it’s great to finally meet him face-to-face 💪

Many thanks to @InterruptLabs for supporting this year’s Offensivecon as a gold sponsor!

🤡 Best Meme Target 🤡 WINNER: yltsi: manipulating operator menu settings on a Pump It Up XX: 20th Anniversary Dance Machine 🕺 RUNNER UP: @maxpl0it , @InterruptLabs: demoing a 1-Click RCE (XSS + Auth RCE) in mFi mPower Pro WiFi-Enabled Power Extender 🔌

Great match with @0f01c1, @munmap, and some other colleagues A nail-biting win against Spain

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at

Really happy I got to be a part of the inaugural DistrictCon Junkyard contest Was lucky enough to be the runner up for the ‘Best Meme Target’ prize! Huge props to the @DistrictCon crew for overcoming some extremely difficult circumstances Will absolutely be back next year!

With the @InterruptLabs crew in D.C. for @DistrictCon - give us a shout if you’re about!

A fantastic opportunity for an experienced vulnerability researcher to join our word-class Browsers team. Remote work, hybrid or in office opportunities available. Check out our careers page for the full range of roles available globally. https://t.co/e2QsB7whe9

Come for a chat at @DistrictCon to hear about all the exciting things @InterruptLabs is working on. Who doesn’t want to work alongside these legends…. @munmap @maxpl0it

If you're a student or recent graduate in Australia looking to get your hands dirty with vulnerability research, we're looking for hackers to join us for an internship! Check it out:

The past year has been amazing. From marriage, to Pwn2Own to a Pwnie Award, I'm so grateful. I'm using the money I've won from hacking competitions, bounties, & RB for two ppl to travel & attend Hexacon, the premier offensive security con in Paris, France.