Piotr Bazydło

Principal Vulnerability Researcher at watchTowr | Previously: Zero Day Initiative | @[email protected]

[Piotr Bazydło @chudyPB]

My OffensiveCon 2024 talk about Exchange PowerShell Remoting is available. Includes a chain of 3 vulns to RCE (file write + file read + DLL load).

https://t.co/dDdhAmD0yA

[watchTowr @watchtowrcyber]

CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform.

Our friends @ @HacktronAI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀

[DEVCORE @d3vc0r3]

We took home Master of Pwn at #Pwn2Own Berlin 2026 with 50.5 points, pwning Microsoft Edge, Exchange, Windows 11, and SharePoint.

Edge was the only successful Browser entry, Exchange earned the highest single-target prize — and no memory bugs this time.

#P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin

[SinSinology @SinSinology]

100% reliable linux LPE (not just redhat) has been Summoned! Thank you a thousand times to the one and only LPE God @h0mbre_ 👑🐐
without his help, this wouldn't be possible ❤️

[Orange Tsai 🍊 @orange_8361]

And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work

— excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦

[T. @trendytofu]

We are hiring for vulnerability researchers! If you are at @offensive_con, let’s chat!

https://t.co/uMZEPtfrLy

[Piotr Bazydło @chudyPB]

@Rhynorater Don't be so harsh for yourself, you're killing it 😎

[Piotr Bazydło @chudyPB]

There are humans, there are LLMs and there is Orange. 🔥 I wish I was 20% as good as him, insane stuff man.

[TrendAI Zero Day Initiative @thezdi]

There it is! Orange Tsai (@orange_8361) of DEVCORE Research Team was able to exploit Microsoft Exchange! If confirmed, they win a whooping $200,000 and 20 Master of Pwn points. Off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin

[Orange Tsai 🍊 @orange_8361]

That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉

[McCaulay @_mccaulay]

RCEliteLLM - Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

https://t.co/ak9bOVRG0N

[watchTowr @watchtowrcyber]

The Internet is falling down, falling down, falling down

Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940

Enjoy with us..

https://t.co/bOzCPy8iS1

[Piotr Bazydło @chudyPB]

@S1r1u5_ But you won't learn anymore 😬

[watchTowr @watchtowrcyber]

🫡 We’re back.

Today, we’re publishing vulnerabilities we discovered, disclosed, and chained to achieve pre-auth RCE against Progress ShareFile.

Enjoy the journey with us, while you sob into your hands 🫠

https://t.co/fHR6dsaILM

[watchTowr @watchtowrcyber]

What number CitrixBleed are we on?

Join us, yet again, for part 2 of our analysis of Citrix NetScaler CVE-2026-3055 - which now appears to be multiple vulnerabilities bundled into one.

Sigh.

https://t.co/cNFLboyvLx

[watchTowr @watchtowrcyber]

Happy weekend! Enjoy our analysis of CVE-2026-3055 - yet another 'Memory Overread' vulnerability in Citrix NetScaler appliances.

https://t.co/fA2geUtDhQ

[Piotr Bazydło @chudyPB]

Sick stuff @izobashi 🤘

[TrendAI Zero Day Initiative @thezdi]

👀👀👀 https://t.co/yAYyfyBsC3

[watchTowr @watchtowrcyber]

What's new is old, and what's old is new - as is relentlessly proven.

Join us in our analysis of CVE-2026-32746, the recent pre-auth RCE in inteutils' Telnetd

Speak soon.

https://t.co/taD1iltZBB

[watchTowr @watchtowrcyber]

In 2025, we achieved pre-auth RCE against another solution in a ransomware gang favourite category. Today, we finally click publish.

Join us as we walk through a chain of vulnerabilities we identified in BMC’s FootPrints ITSM solution.

Enjoy!

https://t.co/gtCNb05QHu

[Piotr Bazydło @chudyPB]

@matthias_kaiser Good luck!🤟

[watchTowr @watchtowrcyber]

Can you feel it too?

Join us today for our analysis of Juniper's recent pre-auth RCE - CVE-2026-21902 - affecting a very specific set of devices. Curious?

https://t.co/sziS0PBUmB