TrendAI Zero Day Initiative

TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Berlin 2026! We've got 10 categories for targets, including an expanded #AI target list. We have 4 AI categories - including coding agents (looking at you #Claude). More than $1,000,000 in cash & prizes available. Read the details at https://t.co/0iMkO6FrOh

[Help Net Security @helpnetsecurity]

AI-driven bug hunting fuels record Microsoft Patch Tuesday - https://t.co/1BcoQGjSiF - @msftsecurity @dustin_childs @thezdi @rapid7 @CISACyber @CrowdStrike @satnam @TenableSecurity #AI #PatchTuesday #Patching #SecurityUpdate #Cybersecurity #CybersecurityNews

[TrendAI Zero Day Initiative @thezdi]

An RDP RCE and an Exchange XSS battle it out for bug of the month for July 2026.

[TrendAI Zero Day Initiative @thezdi]

It took quite a bit to parse, but the Patch Report for June is alive. @dustin_childs ignored the France vs. Spain match just to figure out this record release and break it down for you. Check out what you may have missed at https://t.co/uNvvwytj4p

[TrendAI Zero Day Initiative @thezdi]

It's landed. The bug apocalypse is upon us as #Microsoft releases patches for 620+ CVEs to go along with #Adobe's 88. @dustin_childs has done his best to make sense of it all. Read his analysis at https://t.co/3RrHKdmTDn

[TrendAI Zero Day Initiative @thezdi]

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. https://t.co/H9PUy1KsTO

[TrendAI Zero Day Initiative @thezdi]

#Apple has joined #Adobe in patching more often. They released 37 CVEs yesterday. @dustin_childs wears his patch wrangler hat as he breaks down the release. https://t.co/b5KiwiVBCy

[The Dustin Childs @dustin_childs]

#Adobe is moving to a twice-monthly patch release as a result of frontier AI models finding bugs. Today, they released two Priority 1 patches for Cold Fusion and Campaign Classic (CVSS 10!). Neither under active attack. Read the announcement at https://t.co/pmsgJy6U2F

[TrendAI Zero Day Initiative @thezdi]

@zer0matt_ Apologies on the delay - we really are just swamped. We've just hired two new analysts, so hopefully you get some feedback soon. We haven't forgotten you.

[The Dustin Childs @dustin_childs]

I had an amazing time talking with @chompie1337 during #Pwn2Own Berlin. Her insights into AI assisted vulnerability development are not to be missed. Check out our podcast here or wherever you get yours https://t.co/SgefunqJpz

[TrendAI Zero Day Initiative @thezdi]

We've updated the look and feel of our website. The blog is under maintenance for now but will be up soon. Let us know if you find any bugs or issues. https://t.co/xrMXCL2hjj

[TrendAI Zero Day Initiative @thezdi]

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

[TrendAI Zero Day Initiative @thezdi]

No time to read the blog? Check out the Patch Report for June 2026. @dustin_childs breaks down this massive release and provides guidance on where to focus your resources. https://t.co/q2bTyWKmPc

[TrendAI Zero Day Initiative @thezdi]

Wow. Over 200 CVEs from #Microsoft and another 123 from #Adobe. It's a record-setting Patch Tuesday, but fear not! @dustin_childs has broken the release down and tells you what you need to know. Check out the blog at https://t.co/eoDPfOUZxL

[TrendAI Zero Day Initiative @thezdi]

Pwn2Own Berlin 2026 is in the books, and it was an amazing contest from start to finish. We awarded $1,129,250 for 47 unique 0-days. Join @dustin_childs and Vincent Lee as they recap the highlights and offer a preview of what's to come. https://t.co/8g84uOZ8nm

[TrendAI Zero Day Initiative @thezdi]

Catch up with the happenings from #Pwn2Own day 3! Watch recap here https://t.co/OC1hwVUBVD

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Collision! While Byung Young Yi (@yibarrack) of Out Of Bounds successfully demonstrated their exploit of Anthropic Claude Code, the bug used had been previously disclosed. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Mind blown alert 🤯! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning a sweeeeeet $200,000 and 20 Master of Pwn points. Full win let's go! #Pwn2Own #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Wow what a fun way to wrap up the day! With TWO minutes to spare, Byung Young Yi (@yibarrack) of Out Of Bounds was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin