Beni

@Neodyme
@FluxFingers
(@cure53berlin)

[OpenSecurityTraining2 @OpenSecTraining]

Want to write kernel exploits or analyze malware? You need to understand Windows internals first. Syscalls, IRQL, pools, mitigations & more. Architecture 2821: Windows Kernel Internals 2 by Cedric Halbronn @saidelike https://t.co/KfwJk29HCL

[Beni @_Staubfinger]

@vibhu have you ever heard people talk about visa? or mastercard? i dont - normal people just use it. use the money to integrate solana into more day to day payment. Do whatever BTC wanted to be - onboard africa, expand USDPT alikes

[Nadim Kobeissi @kaepora]

Your chance to be part of a historic event for cryptography education in the Levant is still open!

The CFP for Cedarcrypt, the most ambitious and exciting cryptography event in the Levant region in recent memory, has a deadline of April 10 and we still have room in the program.

If you've been meaning to submit a talk, workshop, or research presentation, now's the time. We want hands-on workshops, lectures on both foundational and real-world topics, and research talks including work in progress. Topics range from post-quantum crypto and ZK proofs to secure implementation and protocol verification.

We're also still actively seeking sponsors. Sponsorship funds student stipends directly — it's how we make the event accessible to grad students and early-career researchers worldwide. If your organization is in this space, let's talk.

Accepted speakers get travel support, free registration, and accommodation help. July 13–16, Paphos, Cyprus.

Join us in making a real difference in how real-world cryptography is taught in the Levant! Come meet and engage with excited new students!

https://t.co/truR1XnSDy

[Beni @_Staubfinger]

@LiveOverflow failed at urlencoding the %25's - no warning issued 📈

[Neodyme @Neodyme]

Drones are hot - their security is not.
Here is how removed the NAND, dumped firmware, and reverse-engineered ECC on a consumer drone. Stay tuned for part 2!
https://t.co/QzfcR2HEyC

[Beni @_Staubfinger]

@XenoKovah @DistrictCon Nice to see that Realtek response 👀

[Beni @_Staubfinger]

@stdoutput most likely to absorb sound.

[Deutsche Hacking Meisterschaft @DHM_ctf]

The Cyber Security Challenge Germany 2025 aftermovie is live! 🎥
Relive the highlights and the spirit of Germany's top young cybersecurity talents.
▶️ Watch now: https://t.co/vrLRzvevst

[Neodyme @Neodyme]

While our colleagues hack live at #Pwn2Own in Cork, take a look at our newly published last year's writeup on our blog: We compromised a QNAP router to take over a networked Canon printer.
▶️ Read the findings and how we got there: https://t.co/9ykn0eKgCi

[Beni @_Staubfinger]

@NVIDIAGeForceUK GeForce Day

[Beni @_Staubfinger]

@intigriti This is pretty ceuta easy, google lens is too strong

[Beni @_Staubfinger]

@_mixy1 Let's go! Keep up the good work :) Hope this is motivation pushing the local maltese infosec community <3

[Deutsche Hacking Meisterschaft @DHM_ctf]

🚨The Deutsche Hacking-Meisterschaft kicks off soon! 🚨

72 participants, 1 day of team building, and 2 days of intense hacking.

Big thanks to our amazing partners: Schwarz IT, @BSI_Bund, @allianztec, @cirosec, @hextreeio, @pimpex, netmountains, and Arkadia.

Great hacking!✨

[Neodyme @Neodyme]

Day 2 at @offensive_con has just started and our colleagues Kolja Grassmann and Alain Rödel are right in the middle of it! 🔥
Can't wait to hear the insights they bring back from some of the sharpest minds in offensive security. If you're there too, make sure to say hi!

[Neodyme @Neodyme]

Interested in learning about Windows exploitation?

This August, join us in Las Vegas for an intensive, hands-on 4-day DEFCON training:
Binary Exploitation on Windows, led by Felipe and Kolja!

🗓️ When: August 9–12, 2025
📍 Where: Las Vegas Convention Center

[Neodyme @Neodyme]

🪝Introducing HyperHook! 🪝
A harnessing framework for snapshot-based #fuzzing using Nyx. ⚒️
HyperHook simplifies guest-to-host communication & automates repetitive tasks, making snapshot-fuzzing easier & more efficient!
🔗 Read more: https://t.co/3p9aL51bsP

[TrendAI Zero Day Initiative @thezdi]

Well that's a first. @ScepticCtf, @diff_fusion), & @SeTcbPrivilege of https://t.co/ELqV0E3vQ5 used a power drill to gain access to a port and exploit the Autel MaxiCharger. They head off to explain their work - except for the drill - we understand that part. #P2OAuto

[Beni @_Staubfinger]

pre-auth rce as root in the EDR, gotta love it.

[Neodyme @Neodyme]

💥When security software itself becomes a target! 💥
Learn how we've uncovered critical vulnerabilities in Wazuh, turning a powerful security tool into an unexpected attack vector.
👉 Read more about the findings: https://t.co/aqWvibltbA

[Beni @_Staubfinger]

Pretty excited about my first pwn2own appearance and happy to have found a (mostly) unique chain albeit being drawn fifth on the target. Shoutout to my colleagues over at @Neodyme and be sure to lurk for blogposts at https://t.co/tF59LQED5H

[TrendAI Zero Day Initiative @thezdi]

Our final SOHO Smashup of Day 2 ends with a partial collision. Neodyme (@Neodyme) used 4 bugs, including a stack-based buffer overflow, in their successful demonstration, but 1 bug had previously been used in the contest. They earn $21,875 and 8.75 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Team Neodyme (@Neodyme) used a stack-based buffer overflow to exploit the HP Color LaserJet Pro MFP 3301fdw printer. The earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland