@thezdi@infosec.exchange

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2w ago

CVE-2024-0244: Connor Ford details how he exploited the #Canon MF753Cdw printer back when he was a #Pwn2Own contestant. Now he's on the judging side as a ZDI analyst, but Doom is still on the table. https://www.zerodayinitiative.com/blog/2026/9/23/cve-2024-0244-a-heap-buffer-overflow-in-the-canon-mf753cdw-printer

zerodayinitiative.com

1

0

2

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2mo ago

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys

zerodayinitiative.com

2

1

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 6mo ago

Announcing #Pwn2Own Berlin 2026! We've got 10 categories for targets, including an expanded #AI target list. We have 4 AI categories - including coding agents (looking at you #Claude). More than $1,000,000 in cash & prizes available. Read the details at https://www.zerodayinitiative.com/blog/2026/3/11/announcing-pwn2own-berlin-for-2026

infosec.exchange

Infosec Exchange

5

0

6

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 46mo ago

And that's a wrap! Congrats to DEVCORE for winning Master of Pwn for Toronto 2022. Thanks to all who participated and special thanks to #Google and #Synology for co-sponsoring the event.

infosec.exchange

7

0

9

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 46mo ago

At the end of Day 3 of #P2OToronto here's the current leaderboard. While DEVCORE is in the driver's seat - there is still a theoretical possibility that another team can still take a share of the lead. Let's see what our final day brings us! #Pwn2Own

infosec.exchange

Infosec Exchange

2

0

2

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 46mo ago

On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own

infosec.exchange

Infosec Exchange

0

1

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 46mo ago

Highlights from Day 1 of #Pwn2Own Toronto 2022: STAR Labs vs the #Samsung Galaxy S22

infosec.exchange

Infosec Exchange

0

1

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2mo ago

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys

zerodayinitiative.com

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2mo ago

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys

zerodayinitiative.com

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2mo ago

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys

zerodayinitiative.com

0

TrendAI Zero Day Initiative @thezdi@infosec.exchange

· 2mo ago

It seems #Apple can't avoid the ongoing Bug Apocalypse, as their CVE count jumps from 37 to 210 between June and July. Nothing appears to be under active attack. We parse it all out for you at https://www.zerodayinitiative.com/blog/2026/7/29/the-july-2026-apple-security-update-review

zerodayinitiative.com

0

1

0