OffensiveCon

Offensivecon is coming to Tokyo! 🔗 www.offensivecon.jp Ticket shop, sponsorships and CFP are already open...

The Cloud Runs on GPUs. So Do We: Breaking Out Through GPU Drivers by @llfamsec and @azraelxuemo

Discovering iOS 0-Days with Muse Spark by @datalocaltmp

Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM by @HototogisuTian and Gongming Wang

Harvest Season for SLUB: From io_uring vulnerability to Novel Sheaf-Based Exploitation Techniques by @naup96721 and Yu-Ting Lin

Netflix and Pwn, Remotely Exploiting MediaTek Phones via the GenieZone Hypervisor by Philipp Mao and @s_k_u_u_k

100 V8 Exploits: lessons learned from three years of v8CTF by @_tsuro and Carl Smith

Cracking open the closed door by @Firzen14

Automating Myself Out of a Job, Badly: Guest to Host on Apple Virtualization by @blacktop__

Keynote - Recursively self-improving security: AI offense, AI defense, and what's left for the humans by @oegerikus

First Tokyo Edition!!!

Agenda for OffensiveCon Tokyo 2026 is live! Explore the talks and plan your schedule now: www.offensivecon.jp/agenda/2026.... #OffensiveCon #Tokyo

We’re thrilled to welcome GMO Cybersecurity as a Silver Sponsor of OffensiveCon Tokyo! 🎉 Huge thanks for supporting us!— see you in Tokyo. #OffensiveConTokyo2026 #OffensiveCon #GMO

We’re thrilled to welcome Meta Bug Bounty as a Silver Sponsor of OffensiveCon Tokyo! 🎉 Huge thanks for supporting us!— see you in Tokyo. #OffensiveConTokyo2026 #OffensiveCon #Meta #MetaBugBounty #BugBounty

We’re thrilled to welcome Cyonyx as a Silver Sponsor of OffensiveCon Tokyo! 🎉 Huge thanks for supporting us!— see you in Tokyo. #OffensiveConTokyo2026 #OffensiveCon #Cyonyx #L3Harris

We’re thrilled to welcome @thezdi.bsky.social as a Gold Sponsor of OffensiveCon Tokyo! 🎉 Huge thanks for supporting us!— see you in Tokyo. #OffensiveConTokyo2026 #OffensiveCon #ZDI

We’re thrilled to welcome Google as a Gold Sponsor of OffensiveCon Tokyo! 🎉 Huge thanks for supporting us!— see you in Tokyo. #OffensiveConTokyo2026 #OffensiveCon #Google

We’re thrilled to welcome @Xbow.com as a Diamond Sponsor of OffensiveCon Tokyo! 🎉 Thanks to @Xbow.com for your support! See you in Tokyo! #OffensiveCon #OffensiveConTokyo #Xbow

🏨 Heading to #OffensiveCon Tokyo? Special attendee rates at JW Marriot are still available, but rooms are limited. Book and lock in the discounted rate 👇 app.marriott.com/reslink?id=1...

We're thrilled to announce James Redmond (aka "avatar"), Global Security Operations Manager at Woven by Toyota, as a keynote speaker at OffensiveCon Tokyo! Join us in Tokyo for his keynote address. 🇯🇵 buff.ly/DcXMwOH #OffensiveCon26 #OffensiveConTokyo #OffensiveCon #Tokyo

We're excited to announce Oege de Moor, Founder & CEO of XBOW, as a keynote speaker at OffensiveCon Tokyo 2026 (Oct 27–28)! Don't miss his keynote on the future of AI-driven offensive security. 🇯🇵 buff.ly/6I28ReE #OffensiveCon26 #OffensiveConTokyo #OffensiveCon #Tokyo

LAST WEEK to submit — #OffensiveCon26 Tokyo CFP closes soon. We want real, original work: cutting-edge security research, novel exploit techniques, AI and deep technical investigations that actually move the field forward.

CFP for #OffensiveCon26 Tokyo edition is STILL open. We're looking for real, original work: cutting-edge security research, novel exploit techniques and deep technical investigations that actually move the field forward. And yes, AI it's also in the game.

Last chance to secure budget-friendly rates and attractive terms — don’t miss out! ➡️ www.offensivecon.jp/venue.html

⌛️ Only 7 days left to secure your room at the JW Marriott Tokyo at the reduced Offensivecon Tokyo attendee rate. Don't miss out! ➡️ www.offensivecon.jp/venue.html

Reduced room rates for Offensivecon Tokyo's attendees only available until 30 June! ➡️ www.offensivecon.jp/venue.html

Interested in becoming a speaker at Offensivecon Tokyo? You have three months to submit your talk on an innovative offensive security topic. More information here 👉️ cfp.offensivecon.jp/offensivecon...

Offensivecon's talks are now available on our YouTube channel! 🔗 buff.ly/g63xgm5

Want an opportunity to have presence in Asia? Sponsor us now! Contact us at tickets@offensivecon.org for more information

Submit your talk before 1 September 2026, 18:00 UTC! 🔗 buff.ly/zrAGakb

The conference ticket shop for Offensivecon Tokyo is open! Not many tickets left... 🔗 buff.ly/lSsGVHU

A 0-Click Exploit Chain For The Pixel 10 by @natashenka.bsky.social and Seth Jenkins

From Zero To Root: Attacking Qualcomm DSP Driver by Xiling Gong

Pedal to the Metal: Accelerating to the Host via VirtualBox VMSVGA by NiNi and Xiaobye

Your TEE Is Only as Strong as Its Interconnect: Breaking SEV-SNP using AMD's Infinity Fabric by csrrw and bschlueter

Exploiting Android Apps with Counterfeit Art by Philipp Mao and Rokhaya Fall

Navigating the MTE Landscape: iOS Memory Protection Deep Dive by Patrick Ventuzelo and Atlan Pinabel

IRON GIANT: When The Vault Becomes The Victim by @hexnomad.bsky.social

From Samsung Account to RCE: A Journey to a Remote 0-Click Capability by Kaufi

Beyond the Limits of Site Isolation by @Ivan Fratric

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter by sakura and R1nd0

4-Byte Heap Overflow To RCE In Minecraft by Hrvoje Misetic

Design-Based Vulnerabilities on macOS: Oops, Not a One-Shot Fix by Zhongquan Li

SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95.bsky.social and Moritz Sanft

Exploiting QSEE Vulnerabilities In Google's Wifi Pro by Cristofaro Mune

Beyond the Limits of Site Isolation by Ivan Fratric

The DNG Weird Machine: Deconstructing an In-The-Wild Android Image Exploit by Benoît Sevens

Tile-Based Deferred Rooting: When Your GPU Starts Rendering To Kernel Code Space! by Xingyu Jin and Martijn Bogaard

Keynote - Chaotic Good and Chaotic Bad: ensuring collective success in defensive endeavours through offence by @ollieatnowhere.bsky.social

⌛️