Alessandro Fanio Gonzalez disclosed a vulnerability in Chroma targeting AI Infrastructure. The exploit required 2 N-days and 1 collision. The win totals $4,500 and awards 1 Master of Pwn point.
Key points
Disclosure: Chroma AI Infrastructure vulnerability
Reward: $4,500 and 1 Master of Pwn point for 2 N-days & 1 collision
Sources
Home Assistant Green downed in Pwn2Own event
Home Assistant Green was defeated in a Pwn2Own competition. The chain involved six bugs, including one collision and five zero‑days. The net total winnings were $7k and 2.75 Master of Pwn points.
Key points
Bugs: 6‑bug chain (1 collision, 5 zero‑days)
Winnings: $7k and 2.75 Master of Pwn points
Sources
blackmagick.io updates - new STUN Field Tasking and Pulse articles
blackmagick.io announced a new technique called STUN Field Tasking, lifted from Cling. It also published new Pulse articles about public STUN mapping, DragonForce backdoors, and a DragonForce locker.
Key points
Technique: STUN Field Tasking (lifted from Cling)
Pulse article: DragonForce locker uses ChaCha8 and a 537‑byte footer
Sources
- Original post
- Linked resource - Linked in the post
Lexmark CX532adwe Exploited at Pwn2Own
Lexmark CX532adwe was exploited in the Printers category at Pwn2Own. The exploit used 1 collision and 2 zero‑days. The result earned $4250 and 1.25 Master of Pwn points.
Key points
Exploited device: Lexmark CX532adwe
Exploit details: 1 collision, 2 zero‑days, $4250 prize, 1.25 points
Sources
CISSP Training Bundle – $19.99 for 21 Hours
The CISSP Security & Risk Management Training Bundle is offered for $19.99, down from an MSRP of $424. It includes eight courses covering all eight CISSP domains and provides 21 hours of structured training. The bundle is sold through a StackCommerce deal that requires account registration.
Key points
Price: $19.99 (MSRP $424) for the full bundle.
Content: Eight courses delivering 21 hours of training across all CISSP domains.
Sources
WinDbg update adds official MCP server
WinDbg now includes an official MCP server. Updating the debugger reveals this change. The addition is part of the latest update.
Key points
Update: New official MCP server included in WinDbg.
Change: Users will notice a few changes after updating.
Sources
- Original post
- Linked resource - Linked in the post