Jacob Soo (@_jsoo_)

Pinned

Jacob Soo Retweeted

s

spaceraccoon | Eugene Lim@spaceraccoonsec · Jun 13

To everyone who pre-ordered "From Day Zero to Zero Day" – thank you for your patience. The wait is almost over. We're in the final countdown to start shipping in early July from @nostarch (and 12 Aug officially everywhere else)! Your support has been incredible. It’s time to…

11

30

182

44

13.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jul 16

CASE CLOSED: CVE-2025-29824 0 public samples, 0 information Suspect: Windows CLFS driver Crime: UAF leading to Privilege Escalation Status: ACTIVELY EXPLOITED ITW Investigation: Debugged and documented Case files: starlabs.sg/blog/2025/07-m… Done by our intern, Ong How Chong

0

43

162

55

16.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jul 10

One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088 Epic obstacles documented in it too! starlabs.sg/blog/2025/07-f…

2

57

194

67

24.0K

J

Jacob Soo@_jsoo_ · Jul 10

Refreshing to see the whole research journey documented by @goatmilkkk Awesome work

sstarlabs@starlabs_sg · Jul 10

One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088 Epic obstacles documented in it too! starlabs.sg/blog/2025/07-f…

1

3

23

4

3.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jul 9

Our researchers, @KaligulaSec & @cplearns2h4ck were credited for 4 vulnerabilities in Microsoft this month. Huge congratulations to both of them for their exceptional work. 👏 msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v…

0

10

63

11

8.0K

J

Jacob Soo@_jsoo_ · Jul 9

Awesome work by @KaligulaSec & @cplearns2h4ck . First time @KaligulaSec got credited with CVEs 🥳

sstarlabs@starlabs_sg · Jul 9

Our researchers, @KaligulaSec & @cplearns2h4ck were credited for 4 vulnerabilities in Microsoft this month. Huge congratulations to both of them for their exceptional work. 👏 msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/v…

0

2

40

3

4.0K

J

Jacob Soo@_jsoo_ · Jul 1

Exciting match so far between Samsung Lions 🦁 vs Doosan Bears 🐻 🥳🥳🥳

0

4

0

758

Jacob Soo Retweeted

O

Off-By-One Conference@offbyoneconf · Jun 16

@offbyoneconf 2025 Day 2 presentation videos are now available on our official YouTube channel! Subscribe, like 👍 and comment! lnkd.in/geDcTSsr

2

11

45

9

7.0K

Jacob Soo Retweeted

O

Off-By-One Conference@offbyoneconf · Jun 16

@offbyoneconf 2025 Day 1 presentation videos are now available on our official YouTube channel! Subscribe, like 👍 and comment! lnkd.in/gi5jQBi4

2

14

46

12

6.0K

Jacob Soo Retweeted

s

spaceraccoon | Eugene Lim@spaceraccoonsec · Jun 13

For everyone who's pre-ordered: which were your favourite chapters? 1) Automated Variant Analysis 🤖 2) Hybrid Binary Analysis 🔎 C) Coverage-Guided Fuzzing 💥 D) Any other chapter? nostarch.com/zero-day 🤝 Let me know!

2

6

37

10

4.0K

Jacob Soo Retweeted

S

Sonar Research@Sonar_Research · Jun 10

SQL Injection despite using prepared statements? 🧐 Turns out that SQL syntax can be ambiguous! Learn how this has led to vulnerabilities in several popular PostgreSQL client libraries: sonarsource.com/blog/double-da… #appsec #security #vulnerability

1

32

103

89

16.0K

Jacob Soo Retweeted

N

Nikolaj Schlej@NikolajSchlej · Jun 10

The embargo (12:00 UTC 2025-06-10) is over, let's start a thread on Hydroph0bia (CVE-2025-4275), a trivial SecureBoot and FW updater signature bypass in almost any Insyde H2O-based UEFI firmware used since 2012 and still in use today. English writeup: coderush.me/hydroph0bia-pa…

2

93

200

74

18.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jun 5

When life gives you tangerines🍊 Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro Problem: One bug "doesn't work" Solution: Make it work with 1 bug Sometimes the best research comes from working with what you think you have starlabs.sg/blog/2025/06-s…

0

38

143

51

15.0K

J

Jacob Soo@_jsoo_ · Jun 5

Sometimes the best mentorship is giving space to explore. @Peterpan980927 guided Zewei to not just solve the problem, but understand it deeply. Now i want to drink tangerine juice too :D

sstarlabs@starlabs_sg · Jun 5

When life gives you tangerines🍊 Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro Problem: One bug "doesn't work" Solution: Make it work with 1 bug Sometimes the best research comes from working with what you think you have starlabs.sg/blog/2025/06-s…

2

3

35

3

6.0K

Jacob Soo Retweeted

P

POC_Crew 👨‍👩‍👦‍👦@POC_Crew · Jun 5

[#POC2025 NOTICE] 20 Years. Reborn. The brand evolved - The mission remains. Welcome to a new era of POC. ⏰ Date: November 13–14, 2025 📍 Venue: Four Seasons Hotel, Seoul, South Korea 🇰🇷 🎤 CFP: June 5 – September 30 🧑‍💻 Training: June 5 – September 30 🎟️ Registration:…

5

17

84

12

9.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jun 4

After almost 8 months of coordinated disclosure, vulnerabilities in Trend Micro Apex Central discovered by our former colleague @Chocologicall have been resolved! ZDI advisories: ZDI-25-295, ZDI-25-296, ZDI-25-297, ZDI-25-236, ZDI-25-237

0

1

26

2

4.0K

J

Jacob Soo@_jsoo_ · Jun 4

Finally! After almost 8 months, critical vulnerabilities in Trend Micro Apex Central found by our former colleague @Chocologicall are resolved. Grateful for it has finally concluded but this timeline 🙄.

sstarlabs@starlabs_sg · Jun 4

After almost 8 months of coordinated disclosure, vulnerabilities in Trend Micro Apex Central discovered by our former colleague @Chocologicall have been resolved! ZDI advisories: ZDI-25-295, ZDI-25-296, ZDI-25-297, ZDI-25-236, ZDI-25-237

0

22

3

2.0K

Jacob Soo Retweeted

s

starlabs@starlabs_sg · Jun 3

After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_ CVE-2025-23095 to CVE-2025-23107 📍 semiconductor.samsung.com/support/qualit…

2

21

156

33

20.0K

J

Jacob Soo@_jsoo_ · Jun 3

I couldn't be prouder of our security research team! 13 CVEs in Samsung Exynos processors. This is what happens when you give them the freedom to push boundaries. Thankful to @st424204, @n0psledbyte, @Peterpan980927 for guiding our intern @rainbowpigeon_

sstarlabs@starlabs_sg · Jun 3

After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_ CVE-2025-23095 to CVE-2025-23107 📍 semiconductor.samsung.com/support/qualit…

2

13

152

22

11.0K

Jacob Soo Retweeted

C

Crusaders of Rust@cor_ctf · May 30

🚨🚨🚨We just broke everyone’s favorite CTF PoW🚨🚨🚨 Our teammate managed to achieve a 20x SPEEDUP on kctf pow through AVX512 on Zen 5. Full details here: anemato.de/blog/kctf-vdf The Sloth VDF is dead😵 This is why kernelCTF no longer has PoW!

0

37

141

32

8.0K