KunlunLab @KunlunLab
Kunlun Lab from CyberKunlun, Vulnerability Research & Protection Solutions Joined October 2021-
Tweets23
-
Followers2K
-
Following88
-
Likes3
🏆
Congratulations to our MSRC 2022 Most Valuable Researchers! Thank you to all the researchers who have helped secure our customers. Check out our blog for the full list: msrc-blog.microsoft.com/2022/08/08/con… #cybersecurity #securityresearch
The first nomination for best RCE: None other than @KunlunLab for CVE-2022-26809, their 20 year old (!) Windows RPC Bug. You can read more about it here: msrc.microsoft.com/update-guide/v…
Excited to be #1 this quarter, got some pre-auth rce bugs, thanks for all the help from @msftsecresponse and bounty team!
Congratulations to all the researchers recognized in this quarter’s MSRC 2022 Q2 Security Researcher Leaderboard! For more information, check out our blog post: msrc-blog.microsoft.com/2022/07/19/con… #cybersecurity #securityresearch #msrc
Excited to see @KunlunLab researchers got 2 Pwnie nominations this year, nice work :-)
Congrats! And thanks for grabbing snapshots of all the nominees so we can share them here as well 😅
@bugch3ck @GossiTheDog @cyberkunlun Of course, enjoy the holiday! (But I am not sure if others would…)
@bugch3ck @GossiTheDog @cyberkunlun The @ symbol there means he is from cyber Kunlun company, not a twitter handler (that’s why MSRC was not hyper-linked it)
@GossiTheDog @cyberkunlun It’s a fake account. Please be careful.
@HenkPoley That domain does not belong to us but pangu team
A lot of (36 in total) CVEs(5 critical) from Kunlun Lab fixed this month, mostly in DNS Server, SMB, LDAP, RPC runtime, Hyper-v...
Security Updates for April 2022 are now available! Details are here: msrc.microsoft.com/update-guide/
@danehrlich11 @ChineseEmbinUK @mj0011sec Kunlun lab is not a company or entity , just a name of our research team, it has nothing related to the company or register stuff. Do some homework before your bullshit.
This patch Tuesday fixed 5 vulnerabilities discovered by @KunlunLab. 2 of them were for @TianfuCup pdf reader sandbox escape & Win10 LPE, 1 CLFS bug was caught as in the wild exploit.
Security Updates for February 2022 are now available! Details are here: msrc.microsoft.com/update-guide/
First patch Tuesday of 2022! Adobe and Microsoft fixed 6 vulnerabilities reported by Kunlun lab. Two of them were demoed @TianfuCup. The CVE-2021-44706 was the RCE of PDF reader full chain and the CVE-2021-21881 was the Ntoskrnl bug for Chrome sandbox escape.
We’re excited to announce that @guhe120 is joining our team as CTO and leader of the Kunlun lab.
We’re happy to announce @HaifeiLi joining our team as senior researcher in advanced threat defense products. 🎉🎉
Google just released Chrome 95.0.4638.69 & fixed two TianfuCup bugs which become the first patch for TianfuCup 2021 chromereleases.googleblog.com/2021/10/stable… CVE-2021-38001 is the RCE from Kunlun lab & CVE-2021-38002 is the SBX from 360(RCE one silence killed)
New company but still ranked as #1 this year TianfuCup. Almost all targets are fully pwned this time(except Synology). last photo : the empty review room after 0day party
First entry for day2 of TianfuCup, Kunlun Lab pwned iPhone 13 Pro remote code execution (mobile safari) on stage with only 15 seconds
First confirmed entry for day1 of TianfuCup, Kunlun Lab @S0rryMybad pwned Google Chrome to get Windows system kernel level privilege with only two bugs. First time since 2015 as I remembered
First day TianfuCup, two teams Kunlun Lab & 漏洞研究院青训队 successfully pwned Google Chrome full chain on stage, ready to review the bugs.
Great work of #1 researcher from Cyber-Kunlun, our lab is ready to burn more 0days @TianfuCup tomorrow.
Congratulations to all the researchers recognized in this quarter’s MSRC 2021 Q3 Security Researcher Leaderboard! For a full list of top researchers, check out our blog post: msrc-blog.microsoft.com/2021/10/14/con…
Alex Plaskett @alexjplaskett
14K Followers 585 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
Julien | MrTuxracer �... @MrTuxracer
39K Followers 443 Following Founder of @rcesecurity | #BugBounty | @Hacker0x01 MVH && H1-Elite | $1,5+ Mio in Bounties | Mobile Hacker | @[email protected]
crazyman_army @CrazymanArmy
6K Followers 2K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group
Hardik Shah @hardik05
4K Followers 4K Following Principal Security Researcher - Tweets and opinions are my own and not of my employer. #fuzzing #trainings #security YouTube: https://t.co/grWZKdQlqr
Pham Khanh @rskvp93
2K Followers 373 Following Security Engineer at @calif_io. Winner of Pwn2own Vancouver 2021, Torento 2022, Vancouver 2023. MSRC top 100 2019, 2020, 2021.
gengstah @_gengstah
58 Followers 239 Following
Shreyas Penkar @streypaws
697 Followers 466 Following Vulnerability Researcher | Android & Chrome | Work @starlabs_sg
ayu sh @eyyush
88 Followers 2K Following undergrad. comp sci. history. i love film & philosophy. socially anxious. email- [email protected]
Ammar76512 @xammar76512
3 Followers 165 Following
Gabriel Brown @GabrielBro89922
0 Followers 145 Following
SUMAN @NAMUS2004
28 Followers 1K Following
Matt @OnlyAMedic
291 Followers 1K Following Cyber GoodThink Enforcer ™ || Digital Forensics & Red Teaming|| Professional Weeb || My Opinions Don't Matter ❤ || For all the people
4n0nym4u5 @ArjunGU2
421 Followers 435 Following CTF's with @ProjectSEKAIctf | Vuln Researcher Windows Zero-Day Vulnerability research @zscaler CVE-2025-50165, CVE-2024-50612~50615
dhurncje @nxClZmENrBg6ivb
0 Followers 96 Following
CX @cxaqhq
5K Followers 412 Following BG6VVA OSWP 备考OSCP business card:https://t.co/2eYXkaAi6C Github:https://t.co/9HXCpbOWqe
kang @kkiiiiiiiiihh
0 Followers 81 Following
Tống Thế Bảo @BoTng958944
1 Followers 123 Following
Ronald @Roland91930930
24 Followers 2K Following
jocker @DavidSpid12189
5 Followers 1K Following
qbao @qbao0808
15 Followers 380 Following
SouL @Souley
801 Followers 1K Following Open source renegade. Geek. Information Addict. 2012 Survivor. Part-time dictator. Unicorn rider. My views and opinion does not reflect that of my Employer.
crane @Crane_0011
0 Followers 43 Following
Gangetik Prophet🕊�... @0xojaxwi
72 Followers 2K Following Old-school OS & Offensive Security REsearcher | ⚡Kernel Pwner⚡
YJK @YJK0805
7 Followers 186 Following
damped martini 🇨�... @james_mackerel
60 Followers 362 Following The national flag reminds me of the collective guilt on my shoulder.
1nv0k3r @1nv0k3r_
200 Followers 608 Following Focus on Software Security, IoT Security, and Fuzz, independence researcher, developer, hearing handicap L2, from China.
Sanjay @OfSanjay
95 Followers 828 Following 28' | Engineering life 👷 | CG Guy 💻 | Automation Lover 🌟
intim@te @chunchu05737838
3 Followers 107 Following I'm a man. I'm sorry. I can't do anything to hurt a woman.
Fábio Silva @aero_programmer
136 Followers 2K Following Um aquariano inquieto e curioso, que vive em busca de conhecimento. Técnico em Informática, Programador de Software, Geek, Nerd, Rockeiro, Filósofo e Artista.
Sambam4mba @he31707900
19 Followers 2K Following Bor3d hacker of iot devices, security researcher? Security Breacher!
Johnny @Luckyrocky2028
251 Followers 7K Following Stay Hungry, Stay Foolish. Only those who are self-disciplined can attain true freedom.|No Politics.
0xf1rmware @0xf1rmware
18 Followers 1K Following binary exploitation, reverse engineering and fuzzing
Shamil Fernando @florions
39 Followers 138 Following
Yogi opp @pedrosou_sa
36 Followers 57 Following
Tuan Dinh Van 🇻�... @tunadv
165 Followers 744 Following Security engineer | MSRC 2024 Q3/4 | MSRC 2025 MVR
hub0c @hub0c5006
0 Followers 4 Following
wsp75006 @wsp750063105
5 Followers 1K Following
pp @pp80052251
32 Followers 1K Following
Raymond @LinRaymond2006
25 Followers 4K Following
qddcfccqqcq @kwqcheii
1 Followers 2K Following
TrendAI Zero Day Init... @thezdi
89K Followers 16 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Project Zero Bugs @ProjectZeroBugs
37K Followers 0 Following A bot that posts the latest blog posts and disclosures from Google's Project Zero
Nicolas Krassas @Dinosn
157K Followers 767 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKZLB Posting content that I find interesting.
Samuel Groß @5aelo
25K Followers 524 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
Alex Plaskett @alexjplaskett
14K Followers 585 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
George Hotz 🌑 @realGeorgeHotz
304K Followers 204 Following President @comma_ai. Founder @__tinygrad__
b33f | 🇺🇦✊ @FuzzySec
33K Followers 1K Following 意志 / mobile research @ ▓▓▓▓▓ / Team 501 / ex IBM Capability Lead & FireEye TORE / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs
Richard Johnson @richinseattle
19K Followers 3K Following Computer Security, Reverse Engineering, and Fuzzing; Training & Publications @ https://t.co/mloVP6rPB7; hacking the planet since 1995; Undercurrents BOFH
ohjin @pwn_expoit
4K Followers 453 Following I'm still hungry. I will be world-class, @[email protected]
James Forshaw @tiraniddo
49K Followers 336 Following Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
mdowd @mdowd
33K Followers 754 Following Internet Hacker. Founder of @vigilant_labs. Previously, co-founder of Azimuth Security (now L3Harris Trenchant)
Matt @OnlyAMedic
291 Followers 1K Following Cyber GoodThink Enforcer ™ || Digital Forensics & Red Teaming|| Professional Weeb || My Opinions Don't Matter ❤ || For all the people
Kaspersky @kaspersky
313K Followers 85 Following Kaspersky is the world’s largest privately held vendor of Internet security solutions for businesses and consumers. For support https://t.co/enRPRUIwcm
FireEye EMEA @FireEyeEMEA
554 Followers 189 Following For all the latest news and research from the EMEA team at @FireEye - The leader in stopping today's new breed of cyber attacks.
Artem I. Baranov @artem_i_baranov
7K Followers 337 Following Your personal guide on cybersecurity and Tenet physics (human, not AI 👋)
Matt Miller @epakskape
12K Followers 646 Following Killing bug classes and breaking exploits as part of @msftsecresponse. Adding more entropy to the Internet. https://t.co/J8GCGurGP3
Pedram Amini @pedramamini
7K Followers 910 Following Repeat founder, investor, hacker. Vibing on @RunMaestroAI. Advising @ExodusIntel & @0DINai. Previously created @theZDI and OpenRCE. NYC born, Austin transplant.
Maor Shwartz @malltos92
4K Followers 3K Following Help researchers, offensive cybersecurity companies and governments navigate the offensive cybersecurity industry
Pierluigi Paganini - ... @securityaffairs
38K Followers 5K Following Founder of Security Affairs, CYBHORUS, and Cybaze. Director of the Cybersecurity Observatory at Unipegaso, Ethical Hacker, Security Evangelist, Security Analyst
The Register @TheRegister
101K Followers 48 Following Enterprise technology news and views, on the web since 1998. Part of the @SitPub family. Send news tips via https://t.co/UTSGHfn6hq
The Hacker News @TheHackersNews
1.6M Followers 2K Following The #1 trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.
Anton Ivanov @antonivanovm
3K Followers 192 Following Head of Advanced Threats Research and Detection Team, @kaspersky My tweets are my own opinion.
thaddeus e. grugq @thegrugq
128K Followers 420 Following Hacker :: PhD researcher @warstudies @KingsCollegeLon :: [email protected] :: PGP https://t.co/dYipV8y3bo
Fabian Yamaguchi @fabsx00
3K Followers 461 Following Vulnerabilities and Exploits. CTO/Founder @whirlylabs, Core developer @joernio, Professor @StellenboschUni
diversenok @diversenok_zero
2K Followers 39 Following A security researcher specializing in Windows internals working at @huntandhackett
CVE Trends @CVEtrends
8K Followers 0 Following Monitor trending CVEs in real-time; crowdsourced intel sourced from Twitter, NIST NVD, Reddit, and GitHub. Run by @SimonByte
CrowdStrike @CrowdStrike
111K Followers 792 Following The first cloud-native platform that protects endpoints and cloud workloads, identity & data. #WeStopBreaches. Free trial: https://t.co/msBcUPjFKo
KevinLu @K3vinLuSec
3K Followers 1K Following Bluehat Speaker, Vulnerability Research, Malware Analysis, Reverse Engineering on macOS, Android, Windows, IoT(Views represented are solely my own)
Alex Ionescu @aionescu
47K Followers 2K Following Chief Technical Innovation Officer @crowdstrike. Windows Internals author and trainer. He/Him. RTs are not endorsements, opinions are my own.
lcamtuf @lcamtuf
40K Followers 499 Following Substack: https://t.co/yFvmNisGW3 Homepage: https://t.co/iFAXZxCO5H
Halvar Flake @halvarflake
45K Followers 3K Following Choose disfavour where obedience does not bring honour. I do math. And was once asked by R. Morris Sr. : "For whom?" @[email protected]
Saar Amar @AmarSaar
18K Followers 359 Following
AMAL RAJ @AMALRAJ56739939
146 Followers 3K Following AI, Cybersecurity, and Psychology enthusiast🤖🧠 | Exploring the realms of tech and the human mind | Let's learn and discuss! 📚 #AI #Cybersecurity #psychology
Lena 🏳️🌈�... @LambdaMamba
5K Followers 530 Following Creator of https://t.co/kdXvRaVEEf | Founder of @MalwareVillage | (Un)Natural Scientist | 🇬🇧 with wife ❤️
Ta-Lun Yen @logonfail
346 Followers 305 Following uncertified unethical hacker (Vulnerability Researcher, employed): breaking everything running on 0 and 1's.
Amit Panghal @Tx0actical
13 Followers 396 Following Security Researcher | MotoGP & Motorcycles, Battlefield & Call of Duty, Quantum Mechanics, Aviation, and Weapons - Nerd
Saravana (0xsaravana.... @06SaravanaKumar
74 Followers 558 Following Manager, Information Security & DevSecOps @Ex-Crypto.com | Working in DeFi |Wallet | Crypto Payments | Exchange | NFT | Tax | Product {Security , Architecture}
Otto Sulin @ottosulin
2K Followers 2K Following Head of Security @supermetrics | Interested in building secure software and everything outdoors. @OWASP_AISVS co-lead.
L4ys @_L4ys
4K Followers 1K Following Co-Founder of @TrapaSecurity and @PwnableTW MSRC Top 100 / ZDI Platinum Hunting bugs for fun
rthhh @rthhh17
2K Followers 673 Following Hyper-V Security Researcher. Black Hat USA 2021/2022 Speaker. MSRC MVR 2019/2020/2022/2024.
Yuki Chen @guhe120
10K Followers 280 Following 古河, Indepent security researcher, Bug bounty, ACG Otaku, Pwn2Own 15/16/17, PwnFest16,TianfuCup 18/19/20, 5 times MSRC MVR yearly Top 1. Got two pwnie awards.
exp-sky @ExpSky
5K Followers 897 Following Senior Security Researcher, Pwn2Own 2017 Winner and Tianfu Cup 2018, 2019 Winner. MSRC top 100 2015-2019.
Yuebin Sun @yuebinsun2020
537 Followers 727 Following Security researcher, seek the road to 0x41414141.
Liang Chen @chenliang0817
9K Followers 399 Following Mobile Pwn2Own 2013 iOS winner; Pwn2Own 2014 Mavericks winner


























