zeroc

♒️

[NebuSec @nebusecurity]

Watch us open the camera and uncover the anonymous identity behind Tor browser:

We published the writeup for the browser RCE in IonStack. Mythos reported 271 bugs in Firefox 150 but still missed this one. And the Tor Browser is also affected by CVE-2026-10702.

Update your Tor!

[NebuSec @nebusecurity]

Nebula Security is now backed by Y Combinator.

We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone.

This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do.

Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it.

VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too.

VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta.

Book a demo with us: https://t.co/eXHKhnE8gC

[r3kapig @r3kapig]

Congrats to us for achieving #1 in the 2025 CTFtime world rankings 🏆🌍!

It’s been an absolutely thrilling year, starting out in the lead, then slipping after a tough loss to 2nd place, and finally fighting our way back to 1st by the end of the year 📈.

[zeroc @zeroc0077]

lets go!!!

[r3kapig @r3kapig]

Congrats to us for achieving #1 in the 2025 CTFtime world rankings 🏆🌍!

It’s been an absolutely thrilling year, starting out in the lead, then slipping after a tough loss to 2nd place, and finally fighting our way back to 1st by the end of the year 📈.

[r3kapig @r3kapig]

Last weekend, we played ASIS CTF Finals 2025. After an intense 24-hour battle, we ultimately secured 1st place 🏆🔥Congrats to @kalmarunionenDM for taking 2nd 🥈 and @rubiyalab for earning 3rd 🥉👏Also, huge thanks to @ASIS_CTF for hosting this competition 🙏

[zeroc @zeroc0077]

@SlushWallet slushy

[zeroc @zeroc0077]

@monad 0x718089368C6f6EF4405D22f8ef614c12b4829EEE

[zeroc @zeroc0077]

@sahuang97 🎂🎂🎂

[zeroc @zeroc0077]

@MediaMonad 0x718089368C6f6EF4405D22f8ef614c12b4829EEE

[r3kapig @r3kapig]

🎉 Last weekend we participated in ASIS CTF Quals 2025 and achieved 2nd place! 🥈Congratulations to @kalmarunionenDM for securing 1st place 🥇 and @BunkyoWesterns for taking 3rd place! 🥉
Thanks to @ASIS_CTF for organizing this amazing competition! 🙏 Hope do better next time!

[Project Sekai CTF @ProjectSEKAIctf]

Announcing #SekaiCTF 2025 writeup prize winners:

[+] Cash Prize Winners:
1. 0xh3g4z1: Web – My Flask App
https://t.co/qnIHGoSDUY
2. apdix: Reverse – Miku Music Machine
https://t.co/SrtiX8Pcjb
3. fexsped: Pwn – Learning OOP
https://t.co/DxtgaSSBaX
4. y.k.z: Misc – Sekai Bank - Transaction
https://t.co/23GGKLF6Qu
5. @teddyctf: Blockchain – Sekai Meme Launcher
https://t.co/pRlKipe0Uf
6. @zeroc0077: Blockchain – チケットマスター
https://t.co/ozL5ZwiM6B
7. clonecomposite: Web – hqli-me
https://t.co/r720Fyyd68
8. TheNoah: Crypto – SSSS
https://t.co/UQuEalOX63

[r3kapig @r3kapig]

🎉 Last weekend, we teamed up with @ProjectSEKAIctf as P1G SEKAI and secured 2nd place at corCTF 2025! 🙏 Huge thanks to the @cor_ctf team for their excellent organization and high-quality challenges

[sahuang @sahuang97]

Followed by a 2nd blood at the other Solana challenge, huge thanks to @zeroc0077 god for help implementing it🙏

[r3kapig @r3kapig]

Thrilled to share that our team secured 3rd place 🥉 at HITCON CTF 2025 last weekend! Huge congratulations to [:] (SLICES) for claiming the championship 🥇 and @malta_ctf for their well-deserved 2nd place 🥈. Big thanks to @HacksInTaiwan for organizing such an incredible game.

[zeroc @zeroc0077]

@ProjectSEKAIctf you can find my writeup here🥰:
https://t.co/N0wlfaPpZE

[zeroc @zeroc0077]

This year we AK all blockchain challenges in SekaiCTF once again, its very nice to work on these challenges with my teammate ranwen🥰 (but we only got two small bounties🙃)
Thanks to the organizers for preparing such diverse and interesting challenges @ProjectSEKAIctf

[r3kapig @r3kapig]

Last weekend we played CTFZone CTF 2025 Quals and achieved first place 🥇 while also advancing to the finals! 🎉 Congratulations to The Flat Network Society for taking second place 🥈 and Never Stop Exploiting for taking third place! 🥉 Thx @CTFZone for hosting this game!

[r3kapig @r3kapig]

We placed 5th in the DEFCON 2025 finals as RePokemenCollections. Congratulations to @mmm_ctf_team for winning the championship again, as well as BlueWater for taking second place and SuperDiceCode for third place.

[zeroc @zeroc0077]

@zwxxb @zi0Black @ila_marco_ @AptosLabs @osec_io @AppSec_Village @FetchDEX @secdim https://t.co/DS1ELZaYlz

[zeroc @zeroc0077]

@ila_marco_ @AptosLabs @osec_io @AppSec_Village @zi0Black @FetchDEX the challenge framework used looks good.🤓