Hey #Wiz - congrats on starting your own contest (zeroday.cloud) but uh... did you have to cut/paste sections of the rules from @thezdi.bsky.social? Seems like you should at least run that through ChatGPT to reword it. I guess imitation is the sincerest form of plagiarism.

Political violence is bad. It usually begets more political violence. Celebrating political violence is bad. It usually encourages more political violence, against various targets. Campus shootings are bad. They make everyone on campus less safe. It's bad that what I wrote here is controversial.

No time to read the blog? Just like living walls and shrubbery? Check out the Patch Report for September 2025. @dustinchilds.bsky.social summarizes the Patch Tuesday release from the @TrendMicro Dallas office and points out the patches with extra flair. youtu.be/TIkwpdP2YAU

It's a moderate release from both #Adobe and #Microsoft, but there's still lots to cover. Join @dustinchilds.bsky.social as he breaks down the September Patch Tuesday and highlights some fixes that require some extra attention. www.zerodayinitiative.com/blog/2025/9/...

Microsoft patches are live. 80 CVEs with only 1 being publicly known. Still awaiting #Adobe patches....

This really intrigues me. Does this inspire people to go for the $1 million prize at #Pwn2Own Ireland? Let's hope so. --- WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability therecord.media/whatsapp-app...

I just realized Zed accurately predicted the #SharePoint exploits that came out of Pwn2Own Berlin. Who knew a puppet could be so president? The puppet knows things, man.... It knows... www.youtube.com/shorts/R_jo8...

Microsoft released 3 bulletins today documenting bugs they silently patched in May and June. I really wish they wouldn't do that. Anyway, check out msrc.microsoft.com/update-guide..., msrc.microsoft.com/update-guide..., and msrc.microsoft.com/update-guide...

No time to read the patch blog? Just want to put it on double speed and hear @dustinchilds.bsky.social talk silly? The Patch Report for August 2025 is now available. youtu.be/agMv21gLZI8

Microsoft patches are out. 107 new CVEs, but nothing is listed as exploited in the wild. Still waiting on Adobe - again. Sigh. I'll have my full thoughts out soon. #PatchTuesday

Me playing with this year’s @defcon.bsky.social badge.

ZDI in the house for the #Microsoft researcher party

Now THAT’S a wine list. A bit beyond my budget…

New challenge coins celebrating 20 years of @thezdi.bsky.social ! Want one? Find me at hacker summer camp!

Reports of Vegas being a ghost town are greatly exaggerated. There may be fewer people here this year, but there are still plenty.

Ballpark and a beer. Happy place unlocked.

Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched

CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability: ZDI analyst Bobby Gould details this bug and another that may be a dupe. He also shows how it can be exploited. www.zerodayinitiative.com/blog/2025/7/...

The critical RCE Vulnerability in Microsoft #SharePoint was disclosed at #Pwn2Own in May. Because of Trend @thezdi.bsky.social, our customers have been protected since May. Stay up to date on the latest with this vulnerability here: https//www.trendmi...

Adobe FINALLY releases their patches for July. They have 13 bulletins addressing 60 CVEs. Looks like nothing is under active attack, but ColdFusion is listed as Priority 1. I'll update my blog with details shortly.

Hey @adobe.com - how 'bout publishing those patches you're holding on to? Some of us want to go to lunch. #PatchTuesday

Oof - 130 new CVEs from Microsoft for Patch Tuesday. Still nothing from Adobe, but fingers crossed that they have a small release. My thoughts on this month's release are out soon.

Extracting Embedded MultiMediaCard (eMMC) contents in-system. ZDI researcher Dmitry Janushkevich details how to interact with an eMMC chip and notes some pitfalls you may encounter on the way. www.zerodayinitiative.com/blog/2025/6/...

I guess the pull of the light was stronger than the smell of the citronella. Poor little guy

No time to read the blog? Just want the highlights of what to prioritize (and what to look out for)? Check out the Patch Report for the June Patch Tuesday release. @dustinchilds.bsky.social provides all the details, including a silent patch from last month. youtu.be/5RJqjm6VpQg

The Webdav 0-day is the ghost of IE still haunting us. Someone call Ed and Lorraine Warren to see if they can exorcise the browser once and for all.

254 CVEs from Adobe??!? It's going to be one of those Patch Tuesdays.

So many feelings right now...

This is the best way I know for putting food on the table - literally

Demonstrating CVE-2025-4919: Now that it's patched, we can show you how Manfred Paul used this code execution bug in the renderer of #Mozilla Firefox to win $50,000. youtu.be/TG029NAGKs0 #Pwn2Own #P2OBerlin

My color blind kid, who is 20, told me he just learned the Statue of Liberty is green. He always thought it was grey like smaller statues. Huh…

My happy place. A ballgame and a dog.

In a video highlight from day three of #Pwn2Own Berlin, Manfred Paul takes on Mozilla Firefox (and his own nerves). youtube.com/shorts/Xe9RO...

In another video highlight from day two of #Pwn2Own Berlin, Gerrard Tai of STAR Labs SG Pte. Ltd takes on Red Heat Linux and explains why his first attempt failed. youtube.com/shorts/vBXAC...

Congrats to @mozilla.org for being the first vendor to patch their #Pwn2Own bugs. Oh - and go update #Firefox to get the fixes. That's two years in a row Mozilla has been the fastest. Well done!

Zed and I finally get to relax after an adventurous #Pwn2Own

What an event!

Welcome to Day Three of #Pwn2Own Berlin! Here's the schedule for this morning:

Success! Hyeonjin Choi (@d4m0n_8) of Out Of Bounds targeting Microsoft Windows 11 wasted absolutely no time at all to successfully demonstrate his Local Escalation on #Windows11 - he is off in the disclosure room now! #Pwn2Own #P2OBerlin

We made it! Our gear arrived last night, we were able to get everything ready (sleep optional). Dustin and Zed have cause to celebrate: youtube.com/shorts/lHyuO...

Day One of #Pwn2Own Berlin start in just a few minutes. Here's the schedule for the morning. #P2OBerlin

We still don’t have our gear and Dustin is worried. We’ll make this contest work one way or another. #Pwn2Own https://youtube.com/shorts/I_C4NHlNOnI?si=RFrvdQufDO_sTn7E

Microsoft patches for May are out. Looks like 5 0-days in the wild (including some familiar components) and 2 more listed as publicly known. Nothing from Adobe yet. I'll have my full thoughts about the release out shortly. #PatchTuesday

Heading to OffensiveCon this weekend? Be sure to stop by and pick up your #Pwn2Own stickers! We’ll also have pins and challenge coins available in limited quantities.