A look behind the scenes of #Pwn2own Toronto. @MaliciousInput provides some extra details on what it takes to host and participate in the contest - plus a peek at the types of bugs used during the event. zerodayinitiative.com/blog/2…

After a herculean effort by the scheduling crew, the agenda for #Pwn2Own Toronto 2022 is now available. 26 contestants. 66 entries. Four days. It should be a great event. zerodayinitiative.com/blog/2…

Behind the scenes as we get set up for the drawing to determine the schedule for #Pwn2Own Toronto 2022. We’ll get started tomorrow (Dec 5) at 3pm Eastern. Watch it live here and on YouTube at youtu.be/Yl6zeKqtfbM

For those interested in #Pwn2Own Toronto, please be aware that #Netgear and others have updated. Now is a good time to check and make sure your exploit still hits. We know some entries have been patched out. May the odds be ever in your favor.

#Pwn2Own Toronto may be next week, but it's never too early to start thinking about the next one. Our ICS-focused Pwn2Own returns to Miami and #S4x23 with new targets and big rewards. Check out all the details at zerodayinitiative.com/blog/2…

Previewing the Master of Pwn trophy to be awarded to the overall winner of #Pwn2Own Toronto next week. It's shaping up to be a gigantic event - likely our largest ever. See you there!

September must be 0day season, as #Microsoft, #Apple, and #Chrome have all patched 0days this month. Join @dustin_childs as he details the latest security patches from this month's #PatchTuesday. zerodayinitiative.com/blog/2…

Announcing #Pwn2Own Toronto 2022! Phones, Routers, Automation Hubs, Smart Speakers, & NAS devices all return as targets. And introducing the SOHO Smashup! More than $1,000,000 in prizes available. Read all the details at zerodayinitiative.com/blog/2… #P2OToronto

Announcing new disclosure timelines for bugs resulting from incomplete patches. During our @BlackHatEvents talk, we explain what changes we're making to our disclosure policy to incentivize vendors to get it right the first time. zerodayinitiative.com/blog/2…

ZDI Researcher @renorobertr looks at the patch gap between the #VMware ESXi TCP/IP stack and the #FreeBSD kernel it was based on. Some bugs went unpatched for years. Read the details at: zerodayinitiative.com/blog/2…

There's plenty to talk about this #PatchTuesday, with significant fixes from both #Adobe and #Microsoft - including a fix for the #Follina bug. Join @dustin_childs as he breaks down the details of the June updates. zerodayinitiative.com/blog/2…

Is exploiting a null pointer deref for LPE just a pipe dream? @izobashi shows the process discovering a couple of #Bitdefender AV bugs (CVE-2021-4198/CVE-2021-4199). The exploit leads to LPE by exploiting a link following issue. zerodayinitiative.com/blog/2…

Here's a quick demonstration of the #Microsoft Teams 0-click exploit demonstrated by @starlabs_sg during #Pwn2Own last week.

We've wrapped #Pwn2Own Vancouver 2022 - the 15th anniversary of the contest. We awarded $1,155,000 for 25 unique 0-days. Join @MaliciousInput and @dustin_childs as they recap the event. youtu.be/PalyCkrb6-A

Day Two of #Pwn2Own Vancouver 2022 has come to a close. Join @dustin_childs, @mdgsecurity, and @mrpowell as they recap the events of yesterday and today - including exploits of #Microsoft Teams and #Tesla. youtu.be/iO_wT7tb07I

Confirmed - Success with a 3-bug chain & 1 collision. The @Synacktiv team was able to successfully demo 2 unique bugs (double-free & OOBW) and 1 collision with a known sandbox escape. For their trouble, they earn $75K and 7.5 Master of Pwn points! #Pwn2Own #P2O15

Live from Pwn2Own Vancouver 2022 xitter.cf/i/broadcasts/1zqKVBOEn…

Setup begins for #Pwn2Own Vancouver. Our drawing for order of events will be tomorrow afternoon (5/17/22). Our 15th anniversary is shaping up to be our best ever. #P2O

It's the last #PatchTuesday before #Pwn2Own, and the latest security offerings from #Microsoft and #Adobe are here. Join @dustin_childs as he breaks down the release, including a Windows LSA bug under active attack. zerodayinitiative.com/blog/2…