Zifeng Kang

I am excited to announce that our paper titled “Follow My Flow: Unveiling Client-Side Prototype Pollution Gadgets from One Million Real-World Websites” won the Distinguished Paper Award on IEEE S&P 2025! Great thanks to Dr. Yinzhi Cao and other colleagues! #ieeesp2025

Congratulations, @ZifengKang!

JavaScript Prototype Vulnerabilities - Investigation by Yinzhi Cao (@yzcao) of @JohnsHopkins Whiting School @HopkinsEngineer reveals that more than 2,700 websites, including 10 of top 1,000 had flaws that could expose them to exploitable vulnerabilities. i-programmer.info/news/149-secur…

Computer scientist identifies JavaScript vulnerability in thousands of websites - ProbeTheProto framework developed by computer scientist Yinzhi Cao helps identify and alert websites vulnerable to a flaw that allows malicious actors to... reddit.com/r/javascript/c…

My pleasure to present our work, "Probe the Proto: Measuring Client-Side Prototype Pollution Vulnerabilities of One Million Real-World Websites" on #NDSS2022 ! Our system discovered 2,917 zero-day vulnerabilities! Codes are available at github.com/client-pp/Prob….

Acceptance and rejection stats that we were all waiting for! ML still tops the charts. #NDSS2022

I looked into some of these same accounts on Facebook to see if I could find any evidence of a similar trend there, but there’s no trace of it there (or on YouTube, for the accounts I’ve checked thus far). It’s just a Twitter thing. 1/

New Nimbuspwn Linux vulnerability gives hackers root privileges - @Ionut_Ilascu bleepingcomputer.com/news/security/…