Cyrill

[TrendAI Zero Day Initiative @thezdi]

Collision! Although successful on stage, Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security targeted Anthropic Claude Code, hitting a one-vulnerability collision with a previous attempt and earning $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Very nicely done! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security were able to exploit Anthropic Claude Code! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security exploited Cursor in the second round, earning $15,000 and 3 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Boom! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security was able to exploit Cursor! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

It's official! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security (@compasssecurity) used a single CWE-150 bug to exploit OpenAI Codex, earning $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Big W!! 💪 Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security were able to exploit OpenAI Codex! Off to the disclosure room to spill the tea. #Pwn2Own #P2OBerlin

[Compass Security @compasssecurity]

Compass vulnerability research identified code execution paths affecting AI coding assistants including @claudeai , @cursor_ai and @OpenAI #Codex. The findings will be demonstrated live at @thezdi Initiative #Pwn2Own Berlin 2026, May 14 to 16. #AIsecurity #LLM

[Compass Security @compasssecurity]

🦖 Meet RAPTR: our new open source platform for red and purple team collaboration. Plan engagements, document attacks and detections, evaluate results, and generate reports, all API-driven. Beta is live, feedback welcome! #PurpleTeam

https://t.co/GyXw40nN2p

[Compass Security @compasssecurity]

EntraFalcon update 🚀 The new Security Findings Report turns Entra ID enumeration into actionable findings with 60+ checks and color charts. Read the blog post of Chrigi @ZH938472 and try the tool now on your tenant! https://t.co/07gzDox92b
#EntraID #CloudSecurity #EntraFalcon

[Compass Security @compasssecurity]

2-for-2! 🏆 Huge shoutout to @yves_bieri and Lukasz for clean exploits on the Alpine iLX-F511 and Grizzl-E Smart 40A systems with the Charging Connector Protocol/Signal Manipulation add-on. Couldn’t be prouder of the team for executing perfectly today. Congrats! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

We have a collision! Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., and Urs Mueller of Compass Security (@compasssecurity) earned $25,000 USD and 4 Master of Pwn points with the Charging Connector Protocol/Signal Manipulation add‑on against the Grizzl‑E Smart 40A, chaining an authentication bypass (CWE‑306) to remote code execution via CWE‑494. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., and Urs Mueller of Compass Security (@compasssecurity) exploited one exposed dangerous method/function bug on the Alpine iLX-F511, winning Round 2 for $10,000 USD and 2 Master of Pwn points. #Pwn2Own #P2OAuto

[James Kettle @albinowax]

We've just released a massive update to Collaborator Everywhere! This is a complete rewrite by @compasssecurity which adds loads of features including in-tool payload customization. Massive thanks to Compass for this epic project takeover. Check out the new features:

[Compass Security @compasssecurity]

Exploiting the @Ubiquiti AI Bullet camera for #Pwn2Own made us sweat more than once.
But persistence paid off. Our detailed blog post is now live: https://t.co/c7E76hGTbh

#penetrationtest #pentest #iot #embedded #firmware
https://t.co/NzMFRKdWhC

[TrendAI Zero Day Initiative @thezdi]

Compass Security (@compasssecurity) ran into a collision in their attempt against the Ubiquiti AI bullet. Their exploit still wins them $3,750 and 1.5 Master of Pwn points. #Pwn2Own #P2OIreland

[TrendAI Zero Day Initiative @thezdi]

Sweet! Compass Security (@compasssecurity) successfully exploited the Ubiquiti AI Bullet camera. They're off to the disclosure room to explain what happened. #Pwn2Own #P2OIreland

[Compass Security @compasssecurity]

All five parts of our journey to Pwn2Own Toronto 2023 are now live on our blog post. Follow this exciting hardware hacking project all the way to the final exploit:

[Compass Security @compasssecurity]

Five Compass Security analysts took on a new challenge at Pwn2Own Toronto last year. The goal? Unauthenticated remote code execution. Follow their journey on our blog this whole week! 🚀 #Pwn2Own #CyberSecurity
https://t.co/dPilHEWs0z

[Pascal Gujer  @pascal_gujer]

🔒💻 Got a secret for you… Want to master beating BitLocker’s dTPM security?
Dive into our 2-day @BlackHatEvents training to unlock the skills for bypassing TPM with a logic analyzer, much like the technique by @ghidraninja that have the cybersecurity world buzzing. From micro soldering to bus sniffing attacks on any notebook with a dTPM, we cover it all. Plus, you’ll take home a $600 hardware kit to continue your hacking exploits. Ready for real hardware hacking? This is your chance. #HardwareHacking
#BHUSA24 Early-Bird is running now!

https://t.co/yqd4jUpWzb

[Compass Security @compasssecurity]

Our security analyst Christian Feuchter has set up honeypots to track attacks against Industrial Control Systems (ICS). Check out his blog posts for insights on current threats to critical infrastructure and how to protect it. #CyberSecurity #ICS5

https://t.co/i6d9QqNaPQ