jq0904 @jq0904
BlackHat ASIA/USA Speaker, MSRC MVR 2020~2022 & 2024~2025 Joined July 2015-
Tweets540
-
Followers3K
-
Following572
-
Likes492
#56 this year
Today, we're proud to recognize the Top 100 Microsoft 2026 Most Valuable Researchers (MVRs). Security researchers play a critical role in helping protect customers by identifying and reporting vulnerabilities across Microsoft products and services. We're grateful for their
52
15
113
129K
50
jq0904 retweeted
exploitbench.ai Awesome work from Seunghyun and Prof. Brumley!
jq0904 retweeted
Our AI Agent has conducted an in-depth analysis of the recently impactful OpenClaw 1-Click vulnerability🐞. Come check out our blog to learn more! zeroverse-ai.github.io/posts/openclaw…
This exploit code for CVE-2025-43529 and CVE-2025-14174 has been publicly available on GitHub for two weeks, yet VT still shows 0 detections—pretty interesting. virustotal.com/gui/file/1478b… github.com/zeroxjf/WebKit…
jq0904 retweeted
Our AI Agent quickly analyzed the GNU #InetUtils #telnetd USER environment variable injection vulnerability (CVE-2026-24061)🧐, which could lead to remote authentication bypass
jq0904 retweeted
Fresh #n8n python task runner sandbox escape (CVE-2026-0863) report. Generated by our AI Agent in 10 minutes🥳
New times, new tries—feel free to point out any mistakes
Our team is researching a novel vulnerability analysis AI Agent🥳. This is (part of) its report on the 🚨CVE-2025-68493 Apache #Struts2 vulnerability🧐
Happy April Fool's Day! For anyone looking for in-the-wild samples for CVE-2024-9680 & CVE-2024-49039 fullchain in Firefox, here is one of them(with some missing information): virustotal.com/gui/file/e0017…
Another ITW Windows CLFS nday exploit, patched on 2024.08, maybe CVE-2024-38196? virustotal.com/gui/file/c3265…
@goabout21 I think it is necessary to go from s1.dll to s3.dll is due to the privilege limitations of the dwm process, rather than to "bypass the relevant security software protection."
Too lazy to archive my presentation slides, but I finally did it, including the slide on CLFS from the Off-By-One 2024 conference, and the awesome 010 Editor Template to parse CLFS Log file (.blf) by @Mas0nShi github.com/jq0904/Confere…
Today, I saw that Microsoft has introduced targeted mitigation for CLFS, which indicates that the attacks against CLFS have come to an end. Below is our talk from this year's Off-By-One conference on in the wild CLFS exploits over the past two years. youtube.com/watch?v=tOwSet…
Two days later, we'll discuss 10 ITW Windows CLFS exploits at the @offbyoneconf. This summary of a two-year journey will include references to others' work and new details not previously disclosed. Attendees will gain a more comprehensive understanding of these crazy exploits.
jq0904 retweeted
New blog post is up, exploring detection options for some recent In- the- Wild Windows LPE 0- days elastic.co/security-labs/…
I'm honored to have been acknowledged by Microsoft along with Kaspersky and Mandiant, again.
Another Windows CLFS itw 0-day: CVE-2023-28252 discovered by @oct0xor, Mandiant, and DBAppSecurity #itw0days securelist.com/nokoyawa-ranso…
jq0904 retweeted
New year, new blog post! CVE-2021-31985: Exploiting the Windows Defender AsProtect Heap Overflow Vulnerability pixiepointsecurity.com/blog/nday-cve-…
Glad to be credited along with others👏, anyone who had learned my Black Hat USA 2022 slides should catch this itw 0day: i.blackhat.com/USA-22/Thursda…
chompie @chompie1337
89K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
Florian Roth ⚡️ @cyb3rops
222K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Nicolas Krassas @Dinosn
159K Followers 780 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKZLB Posting content that I find interesting.
LiveOverflow 🔴 @LiveOverflow
160K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
crazyman_army @CrazymanArmy
6K Followers 2K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group
blackorbird @blackorbird
43K Followers 703 Following Peace and Love. Just Analysis/Hunter/Youtuber/AiCoder/Entrepreneur/. #APT #threatIntelligence #Exploit #CTI #meme #cyber #hacker #OSINT #Ai Need Remote Job
Alex Plaskett @alexjplaskett
14K Followers 590 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Maddie Stone @maddiestone
62K Followers 799 Following Security Researcher. Previously Google Project Zero and TAG | 0days all day. Love all things bytes, assembly, and glitter. she/her.
b33f | 🇺🇦✊ @FuzzySec
33K Followers 1K Following 意志 / mobile research @ ▓▓▓▓▓ / Team 501 / ex IBM Capability Lead & FireEye TORE / I rewrite pointers and read memory / AI Psychoanalyst / BHUSA Review Board
Justin Elze @HackingLZ
71K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Unit 42 @Unit42_Intel
70K Followers 81 Following The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
HackSys Team @HackSysTeam
10K Followers 636 Following Vulnerability Research, Kernel Exploitation, Reverse Engineering, Exploit Development, Program Analysis, Malware Research, Web, Machine Learning
por0day @por0day
2 Followers 25 Following
Feng Xue @s0what
2K Followers 3K Following Founder of ThreatBook. ex Microsoft TwC, ex Amazon InfoSec.
インターンシッ... @InternGuide
77K Followers 64K Following 大学1年生から大学院生まで15万人以上が利用する日本最大級インターン総合ナビサイト｜学生も企業も無料で利用可能！｜就活・インターン情報はハイライトをチェック｜ インターン締切カレンダー ▷ https://t.co/C8IxMUDv2K #就活 #27卒 #28卒 #29卒 #インターン #インターンシップ
X G @itsxgan
1 Followers 1K Following
Security Talent @Securi3yTalent
354 Followers 3K Following JS Dev | Penetration Tester | malware analyst
Kien Hoang @anhchi172
7 Followers 119 Following
hamza HA @hamzaItachi10
0 Followers 10 Following
ritian zhao @ritianzhao15
5 Followers 455 Following
NtCreateEvent @NtCreateEvent
1 Followers 39 Following
Djnjnki234 @djnjnki23496404
4 Followers 685 Following
永 @jonsalchichonnn
26 Followers 795 Following
Dr. Manhood @DrManhood
3K Followers 208 Following
ひなちゃん @hina_sauce
9 Followers 197 Following
leegna @leegn4a
9 Followers 110 Following
T3l3sc0ut @Mu6C1B
15 Followers 679 Following
punt4n0 @punt4n0
106 Followers 5K Following
Your.Demo.Master @YourDemoMaster
258 Followers 7K Following
amm47 @Leonizar81an
9 Followers 658 Following 1FAIpQLSfCUI6g4dG3C5peMUISYDr3gdT6pGEeBViiYY0SB9auOd0A
WaCa @cwx215
60 Followers 2K Following
Atum @Atuml1
341 Followers 121 Following Fundamental Security Lead at @XuanwuLab, views are my own| AI enthusiast,AI security expert | Co-founder of @r3kapig | Blackhat, DEFCON, CCS, S&P, EuroS&P, AAAI
Sadik Mahmud @sadik0x01
60 Followers 2K Following Kill me or love me it's your choice but I'll shine again
Joel Land @joel_land
62 Followers 276 Following
Angel Carreras Photog... @AngelCarrerasG
44 Followers 290 Following
Jacob @jacobprezant
7 Followers 922 Following
FreeHaiti🇭🇹🫵... @Bippykoy1599
88 Followers 2K Following
BOBO @little_while000
15 Followers 6K Following
Halim @Halim1122397
2 Followers 404 Following
donutt 2u 🇵🇰 @mrarslanakhtar
132 Followers 2K Following Applied Mathematics | MBA | Data Science | Machine Learning | Artificial Intelligence | Cyber Security | Bug Hunter
Speedyfriend67 @speedyfriend433
3K Followers 7K Following Owner of Flero Client, Apple Bug Hunter | https://t.co/rnAAL7l7Ow | https://t.co/My3XKpHeMb
muchen @muchen28041
0 Followers 574 Following
bukaw @mk82js
164 Followers 2K Following
Chris Michael Monagha... @Chris_duh
126 Followers 1K Following
qddcfccqqcq @kwqcheii
1 Followers 2K Following
Peter @peter_clowncs
191 Followers 1K Following (wanna be) security researcher & reverse engineer noob @r3kapig
chompie @chompie1337
89K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
TrendAI Zero Day Init... @thezdi
89K Followers 18 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Florian Roth ⚡️ @cyb3rops
222K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Project Zero Bugs @ProjectZeroBugs
37K Followers 0 Following A bot that posts the latest blog posts and disclosures from Google's Project Zero
Saar Amar @AmarSaar
18K Followers 359 Following
Haifei Li @HaifeiLi
9K Followers 151 Following For contact in the security community. NOTE: All the tweets are totally my personal opinions, not about any of my current employer stuff.
ϻг_ϻε @steventseeley
23K Followers 560 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
starlabs @starlabs_sg
10K Followers 15 Following A Singapore company that discovers vulnerabilities to help customers mitigate the risks of cyber attacks. Organisers of @offbyoneconf
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
Chromium Disclosed Se... @BugsChromium
8K Followers 0 Following Tweets publicly disclosed bugs in Chromium. Not an official Google product. Run by @SecurityMB. Mastodon: @[email protected]
Ivan Fratric 💙💛 @ifsecure
19K Followers 210 Following Tech lead and security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
crazyman_army @CrazymanArmy
6K Followers 2K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group
Adam Chester 🏴�... @_xpn_
39K Followers 544 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOlmau2
blackorbird @blackorbird
43K Followers 703 Following Peace and Love. Just Analysis/Hunter/Youtuber/AiCoder/Entrepreneur/. #APT #threatIntelligence #Exploit #CTI #meme #cyber #hacker #OSINT #Ai Need Remote Job
ESET Research @ESETresearch
36K Followers 32 Following Security research and breaking news straight from ESET Research Labs.
Alex Plaskett @alexjplaskett
14K Followers 590 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
James Forshaw @tiraniddo
49K Followers 336 Following Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
TransPlane @TRANSPLANE_AI
5 Followers 1 Following
Atum @Atuml1
341 Followers 121 Following Fundamental Security Lead at @XuanwuLab, views are my own| AI enthusiast,AI security expert | Co-founder of @r3kapig | Blackhat, DEFCON, CCS, S&P, EuroS&P, AAAI
Youssef Sammouda (sam... @samm0uda
41K Followers 590 Following Security Researcher/Hacker 1st in Meta bug bounty program for 6 years Opinions are my own and not my employer's.
LYNXRAY @LynxRayAI
35 Followers 4 Following The intelligence vulnerability discovery layer, built for the AI era.
Ver @Ver0759
399 Followers 133 Following Windows Security / 2024/2025/2026 MSRC MVR / CTFer @天枢Dubhe / Tweets are my own.
DeepSeek @deepseek_ai
1.1M Followers 0 Following Unravel the mystery of AGI with curiosity. Answer the essential question with long-termism.
CODE BLUE @codeblue_jp
7K Followers 643 Following CODE BLUE 2026: International cybersecurity conference 📆 Training: 11/13-15 |Conference: 11/17-18 📢 HP https://t.co/blERauQHdx
Silvio Cesare @silviocesare
11K Followers 1K Following CTO of @infosectcbr. Co-founder of @bsidescbr. Still hacking.
Belinda CGrasse @BelindaChoong
416 Followers 1K Following Peace lover but expect some level of fairness!
Sndav @SndavBai
415 Followers 555 Following Security Researcher at Xuanwu Lab. Focusing on Red Teaming & Maldev. Retired from Dubhe.
_p0laris @_p01arisZ
15 Followers 18 Following
HBh25Y @HBh25Y
69 Followers 333 Following
Off-By-One Conference @offbyoneconf
2K Followers 256 Following A premier gathering of offensive cybersecurity professionals, researchers, thought leaders and innovators from around the region.
Josh Stroschein | The... @jstrosch
12K Followers 1K Following Reverse engineer and content creater | 😱 1M+ views on YT | 🎙️ Host of Behind the Binary podcast 👇
ZheFox @cyberestro
719 Followers 232 Following Founder & CEO @TRANSPLANE_AI | @r3kapig Team | Binary Security Researcher | Agent Researcher | Red&Blue Team | BlackHat Speaker
Windows Insider Progr... @windowsinsider
163K Followers 299 Following Official Twitter of the Windows Insider Program, a community of tech enthusiasts and experts, IT pros, and developers helping to shape the future of @Windows.
Gareth Evans @kryc_uk
572 Followers 168 Following Security Researcher. Microsoft Edge Security Lead. Words & Opinions are my own.
Mas0n @Mas0nShi
2K Followers 889 Following Former CTFer @Nu1L_Team. Aspiring reverse engineer | Binary security padawan🌱"The more I learn, the less I realize I know"
Danis Jiang @danis_jiang
3K Followers 1K Following Yuhao Jiang / former ctfer @ Vidar-Team / Security Researcher @ Ant Group Light-Year Security Lab / GeekPwn 2022 / Pwnie Awards 2023 / Tianfu Cup 2023
Christopher @Kharosx0
3K Followers 2K Following Founder @signal_labs : https://t.co/8grJlb5jwZ 🇦🇺 Vulnerability researcher (MORSE) @Microsoft Discord: Kharosx0
TheZDIBugs @TheZDIBugs
6K Followers 2 Following Checks for high severity, 0day, or Pwn2Own related advisories published by @thezdi
billy leonard @billyleonard
5K Followers 724 Following pogue life. sec @ A\, fmr @Google TAG, Global Head of Analysis of State Sponsored Hacking And Threats.
Bill Demirkapi @BillDemirkapi
22K Followers 372 Following preparedness research @openai | ex @xai, @microsoft, @zoom
Microsoft BlueHat @MSFTBlueHat
5K Followers 212 Following BlueHat is where the security research community and @Microsoft security pros come together as peers, to connect, share and learn. Run by @MSFTSecResponse
Hexacon @hexacon_fr
6K Followers 1 Following Offensive security conference in the heart of Paris. 16-17th October 2026 Join our Discord server! https://t.co/Btl15G8LsI
Jr @__R0ng
750 Followers 173 Following
Andrew Ruddick @arudd1ck
562 Followers 211 Following Breaking software. Security Researcher @ Microsoft. Views are my own.
Bruce Dang @brucedang
5K Followers 1K Following Sweeping the floor at https://t.co/CM8ErzxC5z (we are hiring). Previously at Microsoft/Veramine/Apple. author of Practical Reverse Engineering.
Jann Horn - jann@info... @tehjh
16K Followers 228 Following occasional human borrow checker; works at Google Project Zero; personal account; mastodon: [email protected]
l33tdawg @l33tdawg
7K Followers 2K Following That HITB guy (@hackinthebox @HITBSecConf) and now OOTB guy (@OOTBconf), Music Producer @dhankasounds, & VP of Global Strategy and Growth @verichains
vlcnge @vlcnge
165 Followers 2K Following
KevinLu @K3vinLuSec
3K Followers 1K Following Bluehat Speaker, Vulnerability Research, Malware Analysis, Reverse Engineering on macOS, Android, Windows, IoT(Views represented are solely my own)
Steve Povolny (he/him... @spovolny
905 Followers 290 Following Sr. Director of Security Research, Exabeam - Passionate about all things security, technology, and people. Posts are my opinions alone.
kalendsi @kalendsi
318 Followers 39 Following kernel vulnerability researcher https://t.co/1ukPe4gFVj
offensivecon @offensive_con
28K Followers 1 Following OffensiveCon is a technical international security conference focused on offensive security only. Organised by @Binary_Gecko. Stay tuned #Offensivecon #Tokyo.
cassidy6564 @cassidy6564
396 Followers 607 Following Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. bug hunter,chrome security,android security,0-day,exploit
Trends for United States
You might like
sakura
@eternalsakura13
9K Followers
starlabs
@starlabs_sg
10K Followers
Mmm
@hackyzh
3K Followers
晏子霜
@YanZiShuang
5K Followers
Connor McGarr
@33y0re
11K Followers
k0shl
@KeyZ3r0
7K Followers
Dohyun Lee
@l33d0hyun
6K Followers
Janggggg
@testanull
9K Followers
pyn3rd
@pyn3rd
15K Followers
rthhh
@rthhh17
2K Followers
HackSys Team
@HackSysTeam
10K Followers
Lê Hữu Quang Linh ...
@linhlhq
3K Followers
Pedro Ribeiro
@pedrib1337
9K Followers
L4ys
@_L4ys
4K Followers
VictorV
@vv474172261
3K Followers