POC2025 Archive

01

Talks

17 presentations

From Buffer Overflows to Breaking AI: Two Decades of ZDI Vulnerability Research		Brian GorencTrend Micro’s Zero Day Initiative
Trigon: developing a deterministic iOS kernel exploit		AlfieCellebrite Labs
Follow the Link: Building Full-Chain Local Privilege Escalation on Windows		Bocheng Xiang, HeeChan KimFudan University, Soongsil University
(Sploit)Lights, Camera, Action! Exploiting Spotlight to Bypass TCC and Leak Data from Apple Intelligence		Christine FossacecaMicrosoft Threat Intelligence
Race Condition Symphony: From Tiny Idea to Pwnie		Hyunwoo Kim, Wongi LeeSecurity Researcher, Theori
Internet explorer isn't forgotten		Igor Sak-SakovskiyPositive Technologies
Zero Knowledge, Full Coverage: A Fuzzing Paradox		Innokentii SennovskiiAztec labs
Revisiting Windows 11 KTM: Lessons Learnt from New Vulnerabilities		Jael Koh, Cedric HalbronnSecurity Researcher
Security World Vulnerability Discovery Across Diverse Chip Architectures		Juntao Wu, Hangyu HuaShuffle Team
PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda, and others		Mikhail EvdokimovPCA Cyber Security
JavaScript Engine Security in 2025: New Bugs, New Defenses		SamuelGoogle Project Zero
ATLANTIS: AI-driven Threat Localization, Analysis, and Triage Intelligence System		Woosun SongGeorgia Tech and Team Atlanta
Dirty Ptrace: Exploiting Undocumented Behaviors in Kernel mmap Handlers		Xingyu Jin, Martijn BogaardGoogle
The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long-Ignored Attack Surface		Xuangan Xiao, Zikai XuDARKNAVY
A tale of challenging MTE: Rooting Google Pixel with kernel MTE enabled in one shot		Yong WangSecurity Researcher
Bug Tamer: Turning Limited Heap Overflow into Full VMware Escape		Yongkang Jia, Xiao LeiSingular Security Lab
Large Language Models-Powered Defense Upgrade: Reshaping the Automated Path for APT Intelligence Operations and Live Drills		Zuotong Feng, JiaLiang WuAlibaba Cloud

02

Training

3 courses

Chrome (Renderer) Exploitation on Android		Vitaly NikolenkoSecurity Researcher
MacOS/iOS Kernel User fuzzing training		Meysam FirouziSecurity Researcher
Reversing Modern Binaries: Practical Rust & Go Analysis		Nabih Benazzouz & Daniel FredericFuzzingLabs

03

Events

1 event

04

Sponsors