KunlunLab

Kunlun Lab from CyberKunlun, Vulnerability Research & Protection Solutions

[KunlunLab @KunlunLab]

🏆

[Microsoft Security Response Center @msftsecresponse]

Congratulations to our MSRC 2022 Most Valuable Researchers! Thank you to all the researchers who have helped secure our customers. Check out our blog for the full list: https://t.co/vYnm9u3xSE #cybersecurity #securityresearch

[Pwnie Awards @PwnieAwards]

The first nomination for best RCE:

None other than @KunlunLab for CVE-2022-26809, their 20 year old (!) Windows RPC Bug.

You can read more about it here:
https://t.co/FWn19f0s58

[Yuki Chen @guhe120]

Excited to be #1 this quarter, got some pre-auth rce bugs, thanks for all the help from @msftsecresponse and bounty team!

[Yuki Chen @guhe120]

Excited to see @KunlunLab researchers got 2 Pwnie nominations this year, nice work :-)

[KunlunLab @KunlunLab]

@bugch3ck @GossiTheDog @cyberkunlun Of course, enjoy the holiday! (But I am not sure if others would…)

[KunlunLab @KunlunLab]

@bugch3ck @GossiTheDog @cyberkunlun The @ symbol there means he is from cyber Kunlun company, not a twitter handler (that’s why MSRC was not hyper-linked it)

[KunlunLab @KunlunLab]

@GossiTheDog @cyberkunlun It’s a fake account. Please be careful.

[KunlunLab @KunlunLab]

@k3ym0 Hi there!

[KunlunLab @KunlunLab]

@HenkPoley That domain does not belong to us but pangu team

[mj0011 @mj0011sec]

A lot of (36 in total) CVEs(5 critical) from Kunlun Lab fixed this month, mostly in DNS Server, SMB, LDAP, RPC runtime, Hyper-v...

[KunlunLab @KunlunLab]

@danehrlich11 @ChineseEmbinUK @mj0011sec Kunlun lab is not a company or entity , just a name of our research team, it has nothing related to the company or register stuff. Do some homework before your bullshit.

[mj0011 @mj0011sec]

This patch Tuesday fixed 5 vulnerabilities discovered by @KunlunLab. 2 of them were for @TianfuCup pdf reader sandbox escape & Win10 LPE, 1 CLFS bug was caught as in the wild exploit.

[mj0011 @mj0011sec]

First patch Tuesday of 2022! Adobe and Microsoft fixed 6 vulnerabilities reported by Kunlun lab. Two of them were demoed @TianfuCup. The CVE-2021-44706 was the RCE of PDF reader full chain and the CVE-2021-21881 was the Ntoskrnl bug for Chrome sandbox escape.

[KunlunLab @KunlunLab]

We’re excited to announce that @guhe120 is joining our team as CTO and leader of the Kunlun lab.

[KunlunLab @KunlunLab]

We’re happy to announce @HaifeiLi joining our team as senior researcher in advanced threat defense products. 🎉🎉

[mj0011 @mj0011sec]

Google just released Chrome 95.0.4638.69 & fixed two TianfuCup bugs which become the first patch for TianfuCup 2021 https://t.co/jCqcs3Cpll CVE-2021-38001 is the RCE from Kunlun lab & CVE-2021-38002 is the SBX from 360(RCE one silence killed)

[mj0011 @mj0011sec]

New company but still ranked as #1 this year TianfuCup. Almost all targets are fully pwned this time(except Synology). last photo : the empty review room after 0day party

[mj0011 @mj0011sec]

First entry for day2 of TianfuCup, Kunlun Lab pwned iPhone 13 Pro remote code execution (mobile safari) on stage with only 15 seconds

[mj0011 @mj0011sec]

First confirmed entry for day1 of TianfuCup, Kunlun Lab @S0rryMybad pwned Google Chrome to get Windows system kernel level privilege with only two bugs. First time since 2015 as I remembered

[mj0011 @mj0011sec]

Great work of #1 researcher from Cyber-Kunlun, our lab is ready to burn more 0days @TianfuCup tomorrow.