@MaliciousInput

Leader of the Zero Day Initiative. Pwn2Own organizer and adjudicator. Trafficker of export-controlled intrusion software. Bug Hunter.

 Austin, Tx
Joined May 2010
  • Tweets519
  • Following511
  • Followers3.1K
17Media
Brian Gorenc retweeted
NOPcon@NOPconJul 20
[NOPcon Keynote Speaker Announcement 📢]: Brian Gorenc (@MaliciousInput) joins NOPcon 2026 with “Learnings From Two Decades of Zero-Days: From Manual Exploits to Autonomous Discovery"
1
7
1
34
6,518
Announcing #Pwn2Own Berlin 2026! We've got 10 categories for targets, including an expanded #AI target list. We have 4 AI categories - including coding agents (looking at you #Claude). More than $1,000,000 in cash & prizes available. Read the details at zerodayinitiative.com/blog/2…

Zero Day Initiative — Announcing Pwn2Own Berlin for 2026

If you just want to read the contest rules, click here .   Willkommen zurück, meine Damen und Herren, zu unserem zweiten Wettbewerb in Berlin! That’s correct (if Google translate didn’t steer me...

zerodayinitiative.com
7
34
8
198
71,551
Brian Gorenc retweeted
POC_Crew
@POC_Crew13 Nov 2025
Huge thanks for the keynote 💙 It was fantastic. Brian Gorenc (@MaliciousInput) – From Buffer Overflows to Breaking AI: Two Decades of ZDI Vulnerability Research 🎤 #POC2025
6
54
6,003
Announcing #Pwn2Own Ireland! Our fall contest is on the move (again) as we head to Cork, Ireland. We also welcome @Meta as a sponsor with #WhatsApp being a target at $300K. Plus the return of the SOHO Smashup. Read all the details at zerodayinitiative.com/blog/2… #P2OIreland
4
42
8
200
93,586
Congrats to @mrpowell @izobashi and @chudyPB for making the list.
Microsoft Security Response Center
@msftsecresponse8 Aug 2023
Congratulations to our MSRC 2023 Most Valuable Researchers! Thank you to all the researchers who have helped secure our customers. 👏🎉 Check out our blog for the full list: msft.it/60199yOc9
MSRC 2023 Most Valuable Researchers Top 10 Researchers

ALT MSRC 2023 Most Valuable Researchers Top 10 Researchers

1
5
25
8,493
Recapping #Pwn2Own Vancouver 2023. We had an amazing contest and awarded over $1 million (plus a Tesla Model 3) for 27 unique 0-days. Join ZDI's @MaliciousInput and @dustin_childs as they go through all the highlights of this year's event. youtu.be/c0cS4R0ja-I
1
13
69
34,996
Since no one from the MSRC is here at #Pwn2Own, we're disclosing the Teams exploit over a Teams call. You can join us if you want to hear the details: msteams.link/ZPRX
6
15
5
63
25,138
CONFIRMED! @Synacktiv used a heap overflow & an OOB write to exploit the Infotainment system on the Tesla. When they gave us the details, we determined they actually qualified for a Tier 2 award! They win $250,000 and 25 Master of Pwn points. 1st ever Tier 2 award. Stellar work!
6
116
9
476
114,883
In a #Pwn2Own first, AI was involved in a successful exploit. The @claroty team used @openai 's #ChatGPT to write one of the backend modules used in their RCE of #Softing edgeAggregator. What a time to be alive.
2
22
3
71
16,447
This year at #BHUSA, @MaliciousInput & @dustin_childs present “Calculating Risk in the Era of Obscurity: Reading Between the Lines of Security Advisories” - A look at how enterprises can estimate risk in an era where patches aren't what they used to be. blackhat.com/us-22/briefings…
6
19
The @Synacktiv team shows off their remote exploit of the #Tesla Model 3. Earlier today, this research earned them $75,000 during #Pwn2Own.
7
87
17
246
Happy to sponsor and look forward to attending.
offensivecon
@offensive_con18 Oct 2021
Thank you @TrendMicro and @thezdi for supporting #OffensiveCon22 as gold sponsors! offensivecon.org/sponsors/
4
30
Thank you @TrendMicro and @thezdi for supporting #OffensiveCon22 as gold sponsors! offensivecon.org/sponsors/
3
1
13
An analysis of a #Parallels #Desktop stack clash vulnerabilities. @renorobertr describes some recently patched bugs and looks at how Binary Ninja’s static data flow capability can be used in automating bug finding tasks. zerodayinitiative.com/blog/2…

Zero Day Initiative — Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting...

Parallels Desktop uses a paravirtual PCI device called the “Parallels ToolGate” for communication between guest and host OS. This device is identified by Vendor ID 0x1AB8 and Device ID 0x4000 in a...

zerodayinitiative.com
40
101
Announcing #Pwn2Own Austin! Our fall contest includes phones, printers, NAS devices and more. More than $500,000 USD in cash and prizes are available as 22 different devices will be put to the test. Read all of the details at zerodayinitiative.com/blog/2…

Zero Day Initiative — Pwn2Own Austin 2021: Phones, Printers, NAS, and more!

If you just want to read the rules, you can find them here . Since its inception, our Fall Pwn2Own contest has focused on consumer devices – even as the contest itself has wandered around the world....

zerodayinitiative.com
3
50
5
119
With that last award, we're now at $1,020,000 awarded for the contest with 9 attempts to go. It's the first time we've crossed the million dollar mark at #Pwn2Own. More to come...
10
1
60
The live drawing for #Pwn2Own will be at 9am Eastern tomorrow (April 6). You can watch the draw and all the contest live on YouTube at youtu.be/dA3aIMgRFY8
1
15
35
Here's a quick preview of the Master of Pwn trophy for the upcoming #Pwn2Own. @creatify is adding LEDs to this version, and so far, it looks amazing.
1
4
1
41
CVE-2021-27076: A complex bug that leads to reliable code execution. @HexKitchen details this replay-style deserialization attack against #Microsoft #SharePoint. As a reminder, we're paying $50k for SharePoint exploits at #Pwn2Own. bit.ly/3r4CGSt
51
3
108
For everyone finding variants while analyzing the in-the-wild #Exchange bugs, remember they are worth $200K at the upcoming #Pwn2Own contest. Bugs reported at the event have a 90-day disclosure timeline. Remember, no more patch Tuesdays before the contest. bit.ly/3ooKM6J
15
2
34
Load more