VCSLab รีทวีตแล้ว
VCSLab
115 posts
VCSLab
@vcslab
This is the Twitter channel of VCSLab - the research team of Viettel Cyber Security
Hanoi, Vietnam เข้าร่วม Ağustos 2021
27 กำลังติดตาม3K ผู้ติดตาม
VCSLab รีทวีตแล้ว
VCSLab รีทวีตแล้ว
2025 has seen many great web security findings.
Honored that @_l0gg's SharePoint ToolShell pre-auth RCE (CVE-2025-53770) is nominated for @PortSwigger Top 10 Web Hacking Techniques 2025.
If you're in the community, your vote would mean a lot: portswigger.net/polls/top-10-w…
Thanks!
English
VCSLab รีทวีตแล้ว
We have another collision. Team Viettel used two bugs to exploit the Lexmark CX532adwe. While their heap based buffer over was unique, the other bug has been seen earlier in the contest. They still earn $7,500 and 1.5 Master of Pwn points. #Pwn2Own
English
VCSLab รีทวีตแล้ว
Confirmed! namnp of Viettel Cyber Security used a crypto bypass and a heap overflow to exploit the Phillips Hue Bridge. They earn $20,000 and 4 Master of Pwn points, which catapults them in the Top 5. It also puts us over $1,000,000 for the contest! #Pwn2Own
English
VCSLab รีทวีตแล้ว
VCSLab รีทวีตแล้ว
🏠Boom! @ViettelCyberSec kicks off Day 2 of #Pwn2Own Ireland as they slip past the @home_assistant Green’s defenses! Smart home, smarter hack. They head off for the first disclosure of the day. #P2OIreland
English
VCSLab รีทวีตแล้ว
VCSLab รีทวีตแล้ว
🚨 VCS warns of active attacks on a critical SharePoint vuln we first discovered & reported.
Hackers can bypass auth & take over on-prem servers.
📌 Read our guidance: prevention, detection, hunting & more.
viettelsecurity.com/microsoft-shar…
English
🌟 Huge shoutout to our brilliant researcher @_l0gg for discovering the critical SharePoint vulnerability at Pwn2Own Berlin!
🔍 His in-depth analysis of the widely exploited ToolShell flaw is a must-read for the cybersecurity community.
Khoa Dinh@_l0gg
Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell
English
🚨 Shocking impact from the SharePoint vulnerability we found at Pwn2Own! 😱
Despite our efforts to patch it 🤝, many systems are still at risk ⚠️. Secure yours now! 🔒 Details: blog.viettelcybersecurity.com/toolshell-a-cr…
English
VCSLab รีทวีตแล้ว
Viettel Cyber Security Press Release for Customer alert, Latest research and Recommendations.
Blog is comming
viettelsecurity.com/microsoft-shar…
#SharePoint #ToolShell
English
VCSLab รีทวีตแล้ว
That brings Day Two of #Pwn2Own Berlin. So far, we have awarded $695,000 for 20 unique 0-days. STAR Labs has a commanding lead in Master of Pwn points and seem untouchable. Tune in tomorrow for the final day to see how it ends!
English
VCSLab รีทวีตแล้ว
Blockbuster from @_l0gg Congratulation 🥳🥳🥳
TrendAI Zero Day Initiative@thezdi
Confirmed!! Dinh Ho Anh Khoa (@_l0gg) of Viettel Cyber Security combined an auth bypass and an insecure deserialization bug to exploit #Microsoft SharePoint. He earns $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OBerlin
English
Can't make it to #Pwn2Own Berlin but want to see what happens during a live attempt? We're streaming two attempts live tomorrow here and on YouTube. Check us out at youtube.com/live/tLTJlWWa2… #P2OBerlin
YouTube
English
First successful entry for the Pwn2Own Berlin 2025 from our team 🍾🍾🍾
TrendAI Zero Day Initiative@thezdi
Boom! Viettel Cyber Security @vcslab was successful in demonstrating their attempt against NVIDIA Triton Inference Server - they are headed off to the disclosure room now. #Pwn2Own #P2OBerlin
English
🚨 Pwn2Own Automotive 2025 is a wrap! 🚗💥
🎉 We proudly made it to the Top 5 teams in our debut in the Automotive category! With 4 entries, 8.75 points, and $53,750 awarded, we’re just getting started in this exciting new field.
💪 Here's to more breakthroughs ahead! 🌍🔥
TrendAI Zero Day Initiative@thezdi
And that’s a wrap! #Pwn2Own Automotive 2025 is complete. In total, we awarded $886,250 for 49 0-days over the three day competition. With 30.5 points and $222,250 awarded, Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) is our Master of Pwn. #P2OAuto
English
VCSLab รีทวีตแล้ว
After 2 thrilling days, our journey has come to an end, and guess what? Our white-hat hacker team is proudly in the Top 5 of the world’s greatest! 📷📷
Now it’s time to pack those trophies, head back to Vietnam, and celebrate Tet! 📷📷 Welcome home, our champions @vcslab
#ViettelCyberSecurity #vcslab #アルパイン #Kenwood #Sony #ChargePoint
TrendAI Zero Day Initiative@thezdi
Day 2 of #Pwn2Own Automotive comes to a close. We awarded $335,500, which brings the event total to $718,250. So far, 39 unique 0-days have been disclosed, & we've seen research never before demonstrated. @SinSinology has a commanding lead for Master of Pwn. Stay tuned for Day 3.
English