Pwn2Own Returns to Ireland with a One Million Dollar WhatsApp Target

July 31, 2025 | Dustin Childs CONTINUE READING

Automating VMware RPC Request Sniffing

Blog post

Automating VMware RPC Request Sniffing

January 19, 2018
VMware, Research

The January 2018 Security Update Review

Blog post

The January 2018 Security Update Review

January 09, 2018
Apple, Adobe, Microsoft, Security Patch

The ZDI 2017 Retrospective

Blog post

The ZDI 2017 Retrospective

January 04, 2018
Retrospective, Stats

A Matching Pair of Use-After-Free Bugs in Chakra asm.js

Blog post

A Matching Pair of Use-After-Free Bugs in Chakra asm.js

December 22, 2017
JavaScript, Chakra, Research, Top 5

VMware’s Launch escape SYSTEM

Blog post

VMware’s Launch escape SYSTEM

December 21, 2017
VMware, Research, Top 5

Invariantly Exploitable Input: An Apple Safari Bug Worth Revisiting

Blog post

Invariantly Exploitable Input: An Apple Safari Bug Worth Revisiting

December 20, 2017
Apple, Safari, Research, Top 5

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

Blog post

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

December 19, 2017
Apache, Research, Top 5

Reading Backwards – Controlling an Integer Underflow in Adobe Reader

Blog post

Reading Backwards – Controlling an Integer Underflow in Adobe Reader

December 18, 2017
Adobe, Top 5, Research

Remote Root in DirecTV's Wireless Video Bridge: A Tale of Rage and Despair

Blog post

Remote Root in DirecTV's Wireless Video Bridge: A Tale of Rage and Despair

December 13, 2017
Linksys, Vulnerability, 0-day

The December 2017 Security Update Review

Blog post

The December 2017 Security Update Review

December 12, 2017
Adobe, Apple, Microsoft, Security Patch