Brian Gorenc

Leader of the Zero Day Initiative. Pwn2Own organizer and adjudicator. Trafficker of export-controlled intrusion software. Bug Hunter.

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Berlin 2026! We've got 10 categories for targets, including an expanded #AI target list. We have 4 AI categories - including coding agents (looking at you #Claude). More than $1,000,000 in cash & prizes available. Read the details at https://t.co/0iMkO6FrOh

[POC_Crew @POC_Crew]

Huge thanks for the keynote 💙

It was fantastic.

Brian Gorenc (@MaliciousInput) – From Buffer Overflows to Breaking AI: Two Decades of ZDI Vulnerability Research 🎤

#POC2025

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Ireland! Our fall contest is on the move (again) as we head to Cork, Ireland. We also welcome @Meta as a sponsor with #WhatsApp being a target at $300K. Plus the return of the SOHO Smashup. Read all the details at https://t.co/kZvILTJtr8 #P2OIreland

[TrendAI Zero Day Initiative @thezdi]

Congrats to @mrpowell @izobashi and @chudyPB for making the list.

[TrendAI Zero Day Initiative @thezdi]

Recapping #Pwn2Own Vancouver 2023. We had an amazing contest and awarded over $1 million (plus a Tesla Model 3) for 27 unique 0-days. Join ZDI's @MaliciousInput and @dustin_childs as they go through all the highlights of this year's event.
https://t.co/ASK9Z6Q1eR

[The Dustin Childs @dustin_childs]

Since no one from the MSRC is here at #Pwn2Own, we're disclosing the Teams exploit over a Teams call. You can join us if you want to hear the details: https://t.co/qbR0cJFp9V

[TrendAI Zero Day Initiative @thezdi]

CONFIRMED! @Synacktiv used a heap overflow & an OOB write to exploit the Infotainment system on the Tesla. When they gave us the details, we determined they actually qualified for a Tier 2 award! They win $250,000 and 25 Master of Pwn points. 1st ever Tier 2 award. Stellar work!

[TrendAI Zero Day Initiative @thezdi]

In a #Pwn2Own first, AI was involved in a successful exploit. The @claroty team used @openai 's #ChatGPT to write one of the backend modules used in their RCE of #Softing edgeAggregator. What a time to be alive.

[TrendAI Zero Day Initiative @thezdi]

This year at #BHUSA, @MaliciousInput & @dustin_childs present “Calculating Risk in the Era of Obscurity: Reading Between the Lines of Security Advisories” - A look at how enterprises can estimate risk in an era where patches aren't what they used to be. https://t.co/GbU2eclyvm

[TrendAI Zero Day Initiative @thezdi]

The @Synacktiv team shows off their remote exploit of the #Tesla Model 3. Earlier today, this research earned them $75,000 during #Pwn2Own.

[TrendAI Zero Day Initiative @thezdi]

Happy to sponsor and look forward to attending.

[offensivecon @offensive_con]

Thank you @TrendMicro and @thezdi for supporting #OffensiveCon22 as gold sponsors!
https://t.co/texUG1Kn6m

[TrendAI Zero Day Initiative @thezdi]

An analysis of a #Parallels #Desktop stack clash vulnerabilities. @renorobertr describes some recently patched bugs and looks at how Binary Ninja’s static data flow capability can be used in automating bug finding tasks. https://t.co/FSt3DFkFDr

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Austin! Our fall contest includes phones, printers, NAS devices and more. More than $500,000 USD in cash and prizes are available as 22 different devices will be put to the test. Read all of the details at https://t.co/OnhY7Vd9CG

[TrendAI Zero Day Initiative @thezdi]

With that last award, we're now at $1,020,000 awarded for the contest with 9 attempts to go. It's the first time we've crossed the million dollar mark at #Pwn2Own. More to come...

[TrendAI Zero Day Initiative @thezdi]

The live drawing for #Pwn2Own will be at 9am Eastern tomorrow (April 6). You can watch the draw and all the contest live on YouTube at https://t.co/mNTPT0pJkp

[TrendAI Zero Day Initiative @thezdi]

Here's a quick preview of the Master of Pwn trophy for the upcoming #Pwn2Own. @creatify is adding LEDs to this version, and so far, it looks amazing.

[TrendAI Zero Day Initiative @thezdi]

CVE-2021-27076: A complex bug that leads to reliable code execution. @HexKitchen details this replay-style deserialization attack against #Microsoft #SharePoint. As a reminder, we're paying $50k for SharePoint exploits at #Pwn2Own. https://t.co/tWqbH06mpL

[TrendAI Zero Day Initiative @thezdi]

For everyone finding variants while analyzing the in-the-wild #Exchange bugs, remember they are worth $200K at the upcoming #Pwn2Own contest. Bugs reported at the event have a 90-day disclosure timeline. Remember, no more patch Tuesdays before the contest. https://t.co/anmbH2DV4J