k0shl

BOOMBAP!

[k0shl @KeyZ3r0]

I think every old-school researcher has their own yet broadly similar experience, that must be a long story.🤭

[Yuki Chen @guhe120]

I’ve got the MSRC stories, if you’ve got the beers.

[Microsoft Security Response Center @msftsecresponse]

Update to the Windows Insider Preview bounty program: General Awards for Elevation of Privilege and Information Disclosure are now split by finishing privilege, with award ranges increasing to $1,000–$8,000.

This change is designed to better align rewards with the impact of reported vulnerabilities.

Learn more on the Windows Insider Preview bounty page: https://t.co/Vr0pvfcEOi

[k0shl @KeyZ3r0]

Have a lovely night connecting with MSRC team and MVRs, thanks @msftsecresponse for inviting me to attend Black Hat Asia and MSRC Researcher Celebration😊”trust me, we all love MSRC” — via Yuki Chen

[Microsoft Security Response Center @msftsecresponse]

Thank you to everyone who joined us for the MSRC Researcher Celebration at Black Hat Asia. It was great to connect with so many in the community and spend time sharing ideas and conversations.

We appreciate the collaboration that drives this work forward and look forward to what we’ll build together next.

[k0shl @KeyZ3r0]

Today is my last day at Cyber Kunlun. I’ve gained many valuable experiences and unforgettable memories with this amazing team. Thanks all my awesome teammates! Becoming an independent security researcher will be a new challenge for me in 2026. Keep on keeping on!

[k0shl @KeyZ3r0]

And then, the vulnerability requires no specific user group or configuration — any normal user in a default environment can trigger it. Finally, it is an out-of-bounds read that leaks about 64 pages from the .data section, not the heap memory. It's simple and easy to exploit.🤣

[k0shl @KeyZ3r0]

This month MSRC fixed my Windows Defender info leak vulnerability CVE-2025-62468, but all acknowledgments are incorrect. First, I provided a working exploit, so it’s not “exploitable unlikely.”😅https://t.co/TXNxu8XPjU

[k0shl @KeyZ3r0]

@cplearns2h4ck sometime

[k0shl @KeyZ3r0]

I found a stack overflow bug in a win component that, unlike a typical stack overflow, reliably writes into the PAGE_GUARD region before the start of stack. Root cause is new to me, I’ve never seen this kind of crash before. It’s an interesting case, and I might share more soon😌

[k0shl @KeyZ3r0]

@bestswngs 实在是更不动了啊🥲

[k0shl @KeyZ3r0]

New challenge coin in my showcase😆@msftsecresponse

[k0shl @KeyZ3r0]

@cplearns2h4ck chief god

[k0shl @KeyZ3r0]

Our slide is online: https://t.co/vpdHxw7NV5

Glad to share our pre-auth DoS & RCE bug hunting research at #BHUSA! Thanks @BlackHatEvents for the pre-recording, as we couldn’t attend in person this time for personal reasons. Questions? DM us @vv474172261 @XiaoWei___ @edwardzpeng

[Samuel Groß @5aelo]

We released our Fuzzilli-based V8 Sandbox fuzzer: https://t.co/eVkR1bl76n
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!

[k0shl @KeyZ3r0]

@Balis0nghack @msftsecresponse 畅神又黑我了

[k0shl @KeyZ3r0]

Well. Happy to be on the MVRs annual list again and again — twice in a year 😂! Ended up #11. Thanks @msftsecresponse and congrats all!

[Microsoft Security Response Center @msftsecresponse]

Our previously published Most Valuable Researchers (MVR) leaderboard contained inaccuracies due to technical issues on our end. We apologize for the error and have since resolved the issue. We’re now sharing a fully refreshed and accurate leaderboard.

The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure.

We are excited to recognize this year’s Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10:
1. 🥇wkai
2. 🥈VictorV (@vv474172261)
3. 🥉Suresh Chelladurai
4. Anonymous
5. Brad Schlintz (@nmdhkr )
6. @0x140ce
7. Anonymous
8. Dhiral Patel (@dhiralpatel94)
9. Nan Wang (@eternalsakura13) and Ziling Chen
10. Adnan (@adnanthekhan)

See the full list of this year’s MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: https://t.co/zlTjhLunQY

#bugbounty

[Black Hat @BlackHatEvents]

During #BHUSA Briefing "Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services," we will discuss the different architectures of Windows HTTP services and share multiple previously undisclosed vulnerability cases and attacks. We will also summarize these new vulnerability patterns and provide a comprehensive interpretation of the security threats within the realm of Windows HTTP services. Register now >> https://t.co/XEhPRbKdoD

[k0shl @KeyZ3r0]

Happy to make list again! Thank you @msftsecresponse and congrats all!

[Microsoft Security Response Center @msftsecresponse]

The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure.

Today, we are excited to recognize this year’s 100 Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10:
1. 🥇 VictorV (@vv474172261)
2. 🥈 wkai
3. 🥉 Suresh Chelladurai
4. Anonymous
5. Adnan (@adnanthekhan)
6. Dhiral Patel (@dhiralpatel94)
7. Nan Wang (@eternalsakura13) and Ziling Chen
8. Anonymous
9. @0x140ce
10. Azure Yang (@4zure9)

See the full list of this year’s 100 MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: https://t.co/8vhDhDpr3E

#bugbounty

[k0shl @KeyZ3r0]

@TeamVitalityCS @Vitality_apEX @flameZcsgo @kingmezii @zywoo @ropz no doubt for sure

[Black Hat @BlackHatEvents]

In #BHUSA Briefings "Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services" where the speakers will discuss the different architectures of Windows HTTP services and share multiple previously undisclosed vulnerability cases and attacks. They will also summarize these new vulnerability patterns and provide a comprehensive interpretation of the security threats within the realm of Windows HTTP services. Learn more here >> https://t.co/TUpAPISjbT

[k0shl @KeyZ3r0]

Excited to announce our talk has been accepted by
@BlackHatEvents #BHUSA!🥳🥳🥳
In my part of presentation, I’ll cover logic-based pre-auth remote vulnerabilities uncovered via novel abuse of Windows native HTTP API.
Can't wait to see y'all in Las Vegas!
https://t.co/XMIhb60Bqz