Icarus

Security and systems engineer | breaking things @0xud2

[Icarus @icarus_rs]

About a week ago, I hacked NASA. They have now sent me a letter acknowledging the same.

As my dawg DualCore says: "We're not just any geeks, we hack into NASA!"

[Icarus @icarus_rs]

@hautism

[Icarus @icarus_rs]

Okay bro. I’ll take free shit any day

[Torab @torabyou]

https://t.co/jtwS4S3FWX

[Movement @movement_xyz]

We have secured access to licensed payment rails in the US, EU, and Canada to become the stablecoin settlement and yield layer for emerging markets.

Billions of people are financially underserved.

We aim to fix that.

[Torab @torabyou]

Movement: Where Money Lives

As Movement reorients for our next chapter, we felt a makeover was appropriate.

Tomorrow it becomes official and we are chomping at the bit to share everything we have been working on.

Gmove to the believers.

[Movement @movement_xyz]

Movement's next chapter starts tomorrow.

Stay tuned.

[Icarus @icarus_rs]

I’ve seen “doesn’t meet the bar for servicing” from Microsoft more than I’ve seen the sun. Time to just start publishing zero days

[SandboxEscaper @WeirdQuadratic]

To quote a great hacker:

[b1ack0wl @b1ack0wl]

okay, now tell them that their vulnerability doesn't qualify for a bounty, but then patch it in the next release.

[𝕡𝕨𝕟𝕚𝕖 @0xpwnie]

bruh orange tsai is a freakin monster lmao chained three zero days for rce as SYSTEM on exchange at pwn2own berlin 2026?? $200k plus 20 mop points on top of that edge sandbox escape he did day 1 for another 175k. dude just banked 375k in a day and a half. devcore out here eating
exchange aint no joke tho, its the kinda shit every big company has running, internet facing, ancient code everywhere. full system remote? and he chained three bugs perfect like it was nothing, probably entry + priv esc + exec. masterclass fr hes been cooking exchange for years and still pulling fresh chains in 2026. shows how much attack surface is still left even after all the patches, zdi paying out heavy too, over 900k after two days already. this is why u hafta patch fast or just ditch on-prem for cloud before someone uses it

[Icarus @icarus_rs]

“New crazy RCE wowow”
>needs ASLR to be disabled

Okay bro.

[Tao Yan @ga1ois]

[1] Our exp works on every system we have in hand and it works with a almost 100% success rate, we didn’t test it on the mbp m5 bare metal that pwn2own use because of a chain of real life exploit in which our exp was pwned.

[Icarus @icarus_rs]

@damnsec1 your mental state doesnt meet our minimum standards for servicing ;)

[Icarus @icarus_rs]

@PetrBenes I so badly needed this. Thank you!

[Icarus @icarus_rs]

@AbhijitShan Yeah tryna find a memory corruption bug in v8 for chromium

[Icarus @icarus_rs]

new windows zero day maybe (im going to die waiting for msrc to finish testing)

[Icarus @icarus_rs]

@AbhijitShan Exciting time in the world right now. Exciting time.

[Icarus @icarus_rs]

Been a while

[Icarus @icarus_rs]

@hautism Velo >>

[Icarus @icarus_rs]

@AbhijitShan @AntiClimaco Real and true