Bowen Hsu

Project Manager at DEVCORE

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin

[Orange Tsai 🍊 @orange_8361]

That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉

[Orange Tsai 🍊 @orange_8361]

And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work

— excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on Day 2 of #Pwn2Own Berlin! Day Two added $385,750 and 15 unique 0-days, bringing event totals to $908,750 for 39 unique vulnerabilities. DEVCORE leads Master of Pwn with 40.5 points — but the fun ain't over yet, we've got one more day to go. See you tomorrow! #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

In a video highlight from Day 1 of #Pwn2Own Berlin, @orange_8361 of DEVCORE Research Team (@d3vc0r3) takes on Microsoft Edge with a sandbox escape! He earns $175,000 and 17.5 Master of Pwn points. https://t.co/woZKoSTweK

[TrendAI Zero Day Initiative @thezdi]

DEVCORE is having a day! Confirmed: Angelboy (@scwuaptx) & TwinkleStar03 (@_twinklestar03) of DEVCORE Research Team used an Improper Access Control bug to escalate privileges on Microsoft Windows 11, earning $30,000 and 3 Master of Pwn points. Full win, let's go! 🔥 #Pwn2Own #P2OBerlin

[Bowen Hsu @bowenhsu]

RT @thezdi: Amaze! Amaze! Amaze! @orange_8361 of DEVCORE Research Team was able to exploit Edge with a sandbox escape! If confirmed, we win…

[Detroit Tigers @tigers]

Hao-Yu Lee's first @MLB hit ties the game!

[POC_Crew @POC_Crew]

🎃Chih-Yen Chang(@u1f383) - Modern Android Kernel Exploitation Through a Mali Driver Vulnerability

[DEVCORE @d3vc0r3]

DEVCORE CONFERENCE 2026 wrapped.
From PhaaS to React2Shell, we shared offense-driven security insights with the community.
Big shoutout to all speakers for the incredible talks!
@Se7en_5_Sec @xiaobye_tw @_splitline_
@joeychennoGG @_twinklestar03 @aszx87410 @g1n04h @maple3142

[のらいぬ @JapanBanZaiLove]

成田機場已經為「朋友」和「非朋友」做好了區別！

😄😄😄

[yoshitomo nara / 奈��美智 @michinara3]

蔡さんの言葉の翻訳:

「描かれているのは戦後、しかも独裁政権の時代です。台湾は、中国から撤退してきた政府や軍人、そして一緒に渡ってきた一般の人々が、どのようにこの土地で生き延びたのか。この土地に暮らしていた人々が、あの時代に中国から台湾にやってきた百万人、200万人を、どのように受け入れ��のか。
この土地にもともとあった文化や人々と、中国から来た人々、どう共存していくのか。文化的には違いがあり、生活背景も異なりますが、気持ちは本物だと思います。
私は深く心を打たれました。そして、映画を作った皆さんの努力に感謝します。
歴史を血の通った、感情のある、悲しみのある、苦しみのあるものとして再現してくださいました。私の世代、あるいはその前の世代で、この過程を知っている人たちが、この映画を大切にしてくれることを願っています。

そして、次の世代、さらにその次の世代も、私たちと同じように、台湾が辿ってきたこの道のりが辛かったけれども、温かみのあるものだったということを感じ取ってくれることを願っています。」

https://t.co/tGZ1sj4Y5C

[楊海英(Oghonos Chogtu＝Yang Haiying） @Hongnumongol99]

ありがとう😊中国
もう来ないで。あなたたちのいない新幹線は静かで優雅。あなたたちのいない京都は雅。あなたたちのいない銀座は着物が似合う。あなたたちのいない居酒屋は美味しい。あなたたちのいない温泉は清潔。あなたたちのいない世界が幸せ😀😀😀😀

[DEVCORE @d3vc0r3]

Angelboy (@scwuaptx) takes the CODE BLUE 2025 stage with his latest findings in Kernel Streaming vulnerabilities -- this time diving deep into the MDL cache mechanism and unveiling even more vulnerabilities.

https://t.co/DSwuYooPeZ

#codeblue_jp #MSRC #VulnerabilityResearch

[DEVCORE @d3vc0r3]

DEVCORE CONFERENCE 2026 returns on March 14, 2026!

A gathering for hacker-minded professionals to exchange real-world attack insights, advance proactive defense, and forge attack-driven cybersecurity intelligence.

🔗 https://t.co/ZrMfU3JeJD

#DEVCORECONFERENCE #redteam

[DEVCORE @d3vc0r3]

Huge thanks to @offsectraining for bringing such intensive and high-level training to Taiwan.

5 days, 3 courses: EXP-401, WEB-300, PEN-300.
Proud to see participants push through and even earn the rare OffSec Coin.

Looking forward to more in the future! 🔥

[Orange Tsai 🍊 @orange_8361]

Turns out my #PHRACK article is live! 🔥

> The Art of PHP — My CTF Journey and Untold Stories!

Kinda a love letter to those CTF players & PHP nerds! Hope all the credit goes to the right ppl. Also huge thanks to @0xdea for not forgetting me, @guitmz for the edits, and the @Phrack crew for keeping it real! 🎉

https://t.co/BMCLlHti7q

[Orange Tsai 🍊 @orange_8361]

Thanks @PortSwigger and @BugBountyDEFCON for this awesome event — and also to my @d3vc0r3 buddies for standing on stage to collect the trophy for me!

A little follow-up article on this research is coming soon... stay tuned! 🤘

[Orange Tsai 🍊 @orange_8361]

Oh mom, I am in @phrack! #why2025

[The White House @WhiteHouse]

“It is not the critic who counts; not the man who points out how the strong man stumbles, or where the doer of deeds could have done them better. The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood; who strives valiantly; who errs, who comes short again and again, because there is no effort without error and shortcoming; but who does actually strive to do the deeds; who knows great enthusiasms, the great devotions; who spends himself in a worthy cause; who at the best knows in the end the triumph of high achievement, and who at the worst, if he fails, at least fails while daring greatly, so that his place shall never be with those cold and timid souls who neither know victory nor defeat.” –President Theodore Roosevelt