Jay Turla

Two vulnerabilities in Advantech were found by our team during the SPIRITCYBER-24 IoT / OT Hackathon in Singapore: CVE-2025-48466 and CVE-2025-48470. Our Poc for CVE-2025-48470: github.com/shipcod3/CVE-2… Advisory: csa.gov.sg/alerts-and-adv…

Confirmed! @chompie1337 of IBM X-Force Offensive Research (XOR) used a single bug to exploit NV Container Toolkit, earning $50,000 and 5 Master of Pwn points. #Pwn2Own #P2OBerlin

Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

Pwn2Own Berlin 2026: Drawing for Order x.com/i/broadcasts/1…

Call For Villages Now Accepting Application Got an idea for a village? Bring your hacker playground to Homecoming. We’re looking for hands-on spaces focused on hardware, RF, AI, ICS, IoT, wireless, biohacking, and everything in between. Read more and apply at: #rc20cfv" target="_blank" rel="nofollow noopener">rootcon.org/#rc20cfv #ROOTCON20 #CallForVillages #Homecoming

We're likely 1st to publicly exploit crypto: af_alg as a new attack surface in kernelCTF. Our members @n0psledbyte & @st424204 started poking it in Sep 2025, finding a 0-day container escape unnoticed since 2011. @AnthropicAI @OpenAI: interested in collaborations? We are all ears

10 days until Earlybird disappears. Register now! rootcon.org/html/rc20/regi…

Last call for Positive Hack Camp in Moscow! 2 weeks of offensive security education. We cover hotel, food, education, culture. You just need a round-trip flight, a laptop and motivation. camp.ptsecurity.com

ps5-linux has been released! You can now turn your PS5 Phat console on 3.xx and 4.xx FWs into a fully functional Linux PC gaming device! github.com/ps5-linux/ps5-…

@amoshkov Yeah we are organizing CHV

@shipcod3 Yes! You too?

Landed at Black Hat Asia. let's go!! #BHASIA

Reverse Engineering a Ledger Nano X Hardware Implant (@_TROPICON) slides are up! grandideastudio.com/portfolio/secu…

We Hack Hard, and Party Harder! #fromthevault #rc19

We know how to break systems. But can you handle uncertainty? Can you stay calm when things don’t go as planned? Join us Preparedness Protocol: Field Edition a ROOTCON 20 pre-con event! Program Details Now Available! Register Now! Limited Slots Only! #HackerFunShoot" target="_blank" rel="nofollow noopener">rootcon.org/html/rc20/even… #ROOTCON20

Reverse engineer and get full root access on the TP-Link Tapo C200 (2025) quentinkaiser.be/security/2025/… Research by @qkaiser #infosec

Breaching the Black Box: LLM Red Teaming - It’s not just prompts. It’s behavior. Find the edges. Push them. rootcon.org/html/rc20/trai… #ROOTCON20 #Training #LLM #Homecoming

ROOTCON 20 sponsorship slots are officially SOLD OUT. Thank you to everyone supporting the community — you’re part of what makes this ROOTCON 20 possible. See you at ROOTCON 20. #ROOTCON20 #Homecoming

Just spent $50 on a new gizmo. Low key haven't been this excited about a new gizmo in a hot minute

First dual antenna GPS heading evaluation kit with all-band u-blox ZED-X20D and ANN-MB2, for centimeter precision and out-of-the-box moving baseline (heading, orientation, north indicator, compass, roll, pitch, yaw). ardusimple.com/product/simple…

Now that typing a few terminal commands doesn’t take me an hour 😅 DragonOS Iridium-sniffer YouTube videos are probably the next move. github.com/alphafox02/iri…

ROOTCON 20 is now accepting Call For Papers submissions. We’re looking for work that’s real. Technical, practical, and grounded in experience. Offensive, defensive, hardware, software, networks, humans—if it matters to the community, it belongs here. Details: #rc20_cfp" target="_blank" rel="nofollow noopener">rootcon.org/#rc20_cfp #ROOTCON20 #CallForPapers #Homecoming