TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Austin, Texas
Joined November 2009
- Tweets4.5K
- Following18
- Followers90K
- Likes184
Pinned Tweet
You can find the latest results from #Pwn2Own Ireland at the blog (zerodayinitiative.com/blog/2…) or the leaderboard (pwn2own.zerodayinitiative.co…) #P2OIreland
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft. ZDI's @bobbygould5 provides a deep dive into the bug(s) used in the recent PeopleSoft attacks. His analysis includes root cause and video demo. zerodayinitiative.com/blog/2…
We’re happy to return as a sponsor for @hexacon_fr. ZDI’s @MaliciousInput and @hosselot are in attendance and are always up for a good chat (if you can find them)
TrendAI Zero Day Initiative retweeted
[ZDI-26-757|CVE-2026-111105] (0Day) (Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability (CVSS 7.0; Credit: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative) zerodayinitiative.com/adviso…
Join @dustin_childs as he breaks down the largest #Microsoft release ever, discusses changes to how Microsoft communicates their patches, and hides a dad joke in pain sight. It's the Patch Report for October 2026. youtu.be/fR8nhquyToQ
It's the largest release ever from #Microsoft. Again. And a big update from Adobe, too. Join @dustin_childs as he breaks down over 1,400 (that's not a typo) CVEs from Msft. He reads them all so you don't have to. zerodayinitiative.com/blog/2…
TrendAI Zero Day Initiative retweeted
AI can find vulnerabilities fast. Can we trust it to fix them?
In Ep. 13 of the AI Security Brief Podcast, Tyler Shields, CMO at Allstacks, explores the AI trust paradox and human oversight.
Watch or listen: trendaisecurity.com/en/resou…
We had an amazing time at #Pwn2Own Ireland 2026 - our 40th Pwn2Own ever! We awarded $1,262,000 for almost 100 0-days. Catch all the highlights at youtu.be/qDTSScQ67Mg?is=CdmJ…
Cens-ational exploit by Dimitrios Valsamaras (@Ch0pin), Ken Gannon / 伊藤 剣 (@yogehi) using djini.ai from Mobile Hacking Lab, Tenia Valsamara (@ir3l14) from CENSUS Labs targeting Google Pixel 10 for a total of $112,500 and 22.50 Master of Pwn points with a 2 bug chain, 1 collision and 1 0-day #Pwn2Own
A Mammoth of a bug chain of 6 zero days closes out #Pwn2OwnIreland by Chulhan Park, Mingeun Kim, SeokHun Lee, Inhyung Lee, Sehyun Baek, Nayeon Lee, Junseok Kim of Team MAMMOTH targeting Home Assistant Green in the Smart Home category for a total of $7500 and 3 Master of Pwn points #Pwn2Own
Howdy Buckaroos, the very own BunkyoWesterns (@BunkyoWesterns) succeed in their remote lasso-ing of the Samsung Galaxy S26, with their 2 bug chain, 1 collission + 1 unique, earning them $8250 and 3.75 Master of Pwn points #Pwn2Own #P2OIreland
Whew! Chulhan Park, Mingeun Kim, SeokHun Lee, Inhyung Lee, Sehyun Baek, Nayeon Lee, Junseok Kim of Team MAMMOTH needed almost the entire time and 3 attempts to exploit Home Assistant Green. That's the final attempt of #Pwn2Own Ireland 2026. Off to the final disclosure room.
The entry from Rintaro Kawasugi (@fubukiyokiyoki) of GMO Flatt Security Inc. (@flatt_security) targeting Chroma has been disqualified due to a rule violation.
2 unique bugs and down went the Lexmark CX532adwe as Cong Thanh (@ExLuck99), Duc Hieu (@gr4ss341) and Nam Dung (@greengrass19000) earned $5,000 and 2 Master of Pwn points in their successful exploit attempt #Pwn2Own
$300,000!!!!! and 30 Master of Pwn points officially makes Ikotas Labs, Inc. the Master of Pwn as they jump to the top of the leader board after they chained multiple issues together to successfully exploit the Google Pixel 10 #Pwn2Own
Bye bye bridge @_McCaulay exploited the Philips Hue Bridge Pro winning $5,000 and 2 Master of Pwn points with a 4 bug collision #Pwn2Own