I'm going to present our paper "RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections" at ACM CCS 2025 this afternoon. Get excited, fellow hackers! kylebot.net/papers/retspil…

The first #v8CTF submission is now public: bughunters.google.com/reports/vrp/38… Note that the current flag is still up for grabs, maybe M118 is unhackable? ;P You should also check out @madstacks3's excellent writeup at madstacks.dev/posts/Start-Yo…

My favorite fuzzing paper in recent years: SoK: Prudent Evaluation Practices for Fuzzing mschloegel.me/paper/schloege…

Let's do this again, Shellphishers!

deadline fighter be like: arrive at Vancouver one night before on-stage demonstration for #Pwn2Own and yet to fine-tune the exploit reliability for physical machines :D

I did it again! It was fun to work on exploit one night before the event and one shot it at the demonstration! And thank you Trend Zero Day Initiative and Ubuntu for making the report process painless!

Hey hey! #SCAI doctoral student kylebot just walked off with $20K! A PhD team supervised by Tiffany Bao is working hard to find #cybersecurity vulnerabilities and use that information for good. Congrats Kyle!

Hello Hackers! The inaugural #pwncollege Quarterly Quiz is LIVE at pwn.college/quarterly-quiz! It’s a series of tough kernel pwning chals from the one and only kylebot, kernel hacker extraordinaire, and will lead you on a journey through Linux kernel pwning and the VFS subsystem!

I'm so proud to have attended the event with the best hackers in the world! (And appeared for 0.5s in the cool video! :) ) It was really fun! Thanks Google! And Eduardo Vela !

Found a V8 sandbox bypass during PlaidCTF . Let's see whether I will be the first one claiming the bounty 👀

Just confirmed that I first blooded the bounty! Will write a blog about it when Google allows it :)

WE QUALIFIED FOR AIxCC FINALS!!!!

We are so back! Shellphish