Update to the Windows Insider Preview bounty program: General Awards for Elevation of Privilege and Information Disclosure are now split by finishing privilege, with award ranges increasing to $1,000–$8,000.
This change is designed to better align rewards with the impact of reported vulnerabilities.
Learn more on the Windows Insider Preview bounty page: https://t.co/Vr0pvfcEOi
We’re happy to release 𝐒𝐄𝐂-𝐛𝐞𝐧𝐜𝐡 𝐏𝐫𝐨: a benchmark for measuring the bug-hunting capabilities of AI agents in critical software systems such as Chromium V8, Firefox SpiderMonkey, and more.
Explore the details here: https://t.co/gIMnS4Oohx
We recently achieved guest-to-host escape by exploiting a QEMU 0day.
We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive.
Writeup coming next week.
🤯🤯🤯 Gemini 3 Pro + Live-SWE-agent hits 77.4% on SWE-bench Verified, beating ALL existing models, including Claude 4.5!!
🤖 Live-SWE-agent is the first live software agent that autonomously self-evolves on the fly — and it even outperforms the manually engineered scaffold used by the Gemini 3 Pro team (76.2%)
Some more of my bugs in Hyper-V are patched in this month's update. I'm able to exploit it to elevate privileges on the last 10 years of Windows. Also seems like more researchers are targetting this component now.
Ever wanted to debug the secure kernel but couldn't figure out how? Me too. It's awful.
But I eventually got it working and managed to do some cool stuff, so I documented my solutions here in case it helps anyone else: https://t.co/qvlH3s2XcF
Whoah... $250000
(CVE-2025-4609, similar to CVE-2025-2783/412578726)[412578726][Mojo][IpczDriver]ipcz bug -> renderer duplicate browser process handle -> escape sbx is now open with PoC & exploit(success rate is nearly 70%-80%)
https://t.co/KiQ6gHaHVj
https://t.co/5TXy8yIC0g
Here are the links to the recordings of my prior two webinars:
Debug of Hyper-V, Secure Kernel, VBS Enclaves, Defender, and other secrets: https://t.co/6moS4UdFWC
and Advanced Threat Analysis and Reverse Engineering using AI: https://t.co/BGkNXYzCnx
Curious how the Codegate 2025 FullChain was meant to be pwned? From RCE to SBX to LPE... the path to SYSTEM is now public. Official write-up is live! #pwn#CTF#Codegate#RCE#SBX#LPE
https://t.co/9p7wUFCjnI
Windows Inter Process Communication – A Deep Dive Beyond the Surface, by @haider_kabibo
Part 1 https://t.co/WXPXxYwlbm
Part 2 https://t.co/vdZcjzy0J1
Part 3 https://t.co/Xymk9LDsCR
Part 4 https://t.co/zmAGonxDMj
Part 5 https://t.co/rUOLhwY1Sr
My ranking changed from 26th to 22nd with 662.5 points earned over the past year.
I placed 8th in the Windows category, collaborating with @develacker on the SEC-agent team.
Thanks to @msftsecresponse for the update, and to @ENKI_official_X for the support.
Our previously published Most Valuable Researchers (MVR) leaderboard contained inaccuracies due to technical issues on our end. We apologize for the error and have since resolved the issue. We’re now sharing a fully refreshed and accurate leaderboard.
The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure.
We are excited to recognize this year’s Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10:
1. 🥇wkai
2. 🥈VictorV (@vv474172261)
3. 🥉Suresh Chelladurai
4. Anonymous
5. Brad Schlintz (@nmdhkr )
6. @0x140ce
7. Anonymous
8. Dhiral Patel (@dhiralpatel94)
9. Nan Wang (@eternalsakura13) and Ziling Chen
10. Adnan (@adnanthekhan)
See the full list of this year’s MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: https://t.co/zlTjhLunQY
#bugbounty
Congratulations to all the researchers recognized in this quarter’s MSRC 2025 Q2 Security Researcher Leaderboard! Thanks to all the researchers who partnered with us for your hard work and continued dedication to securing our customers.
Learn more in our blog post: https://t.co/3xo0rk87zI
We also want to recognize the top 10 researchers in the leaderboard:
🥇wkai
🥈Brad Schlintz (@nmdhkr)
🥉@0x140ce
🥉 Zhiniang Peng (@edwardzpeng) with HUST & R4nger (@R4nger99) with CyberKunLun
5. VictorV (@vv474172261)
6. k0shl (@KeyZ3r0)
7. @wh1tc @ Kunlun lab& devoke & Zhiniang Peng (@edwardzpeng) with HUST
8. Jongseong Kim (@nevul37), SEC-agent team
9. Anonymous
10. Haifei Li (@HaifeiLi)
10. Nick Wojciechowski
Enki WhiteHat has detected activity where Kimsuky abuses GitHub as attack infrastructure.
Private GitHub repositories are accessed using PATs, leading to XenoRAT deployment.
See the full attack flow and the details of how Kimsuky approaches its victims:
https://t.co/WXfck17NHF
#APT #Kimsuky