Check out our sweet presentation - Glucose in the Air: Wireless Medical IoT Without a Trust Anchor at Hack.lu by our @br0kenpipe and @smnfbb, Oct 20, 2026 2:45 PM–3:15 PM in the Europe room! #appsec #security #doyensec

🔎 New Windows vulnerability discovered by Adrian Denkiewicz (@a_denkiewicz) of #doyensec - a high-severity flaw in one of Windows’ Virtualization-Based Security (VBS) enclaves that enables VTL1 code reuse. A first look at our ongoing research into this class of vulnerabilities. 🔗 blog.doyensec.com/2026/10/13… #appsec #security

Congratulations to @maxenceschmitt and @cousky_ on successfully using their three bugs 🤯 to exploit Home Assistant Green (cc: @home_assistant). Tough break that they were previously known - we'll get 'em next time! #doyensec #appsec #security #pwn2own

Excited to share that 🇫🇷 @cousky_ & @maxenceschmitt 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for a total of $30,000 and 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM zerodayinitiative.com/blog/2… #appsec #security

Read all the details on how our a missing flag allows an unprivileged user to gain root access - discovered by our @73696e65. blog.doyensec.com/2026/09/17… #appsec #security #doyensec

We originally published details of a OnePlus Android vulnerability after the vendor became unresponsive and more than nine months had passed without resolution of what appeared to be a straightforward issue. Only after publication did the vendor contact us again and request that we remove the post. We have temporarily taken it down to provide additional time for remediation. We strongly encourage the vendor to provide a clear remediation timeline and reserve the right to republish the information at a time of our choosing should the continued delay warrant it. #appsec #doyensec #security

Proud to share that @Doyensec was trusted by @AnthropicAI as one of the security partners validating #Mythos findings as part of Project #Glasswing! Contact us to see how our research-driven approach shapes the future of #appsec! anthropic.com/research/glass… #doyensec #security #ai

Our CloudSecTidbits series is back with a bang 💥In the latest edition, we're releasing maSSO - A weaponized Identity Provider (IdP) for security testing! Read all about it and the dangers of Multi-SSO AWS Cognito User Pools. #doyensec #appsec #security blog.doyensec.com/2026/05/05…

In our @a_denkiewicz's latest post, see how combining AFL++ with GPT-5 Codex sped up triaging the results from fuzzing NASA’s CFITSIO library and uncovered numerous vulnerabilities. blog.doyensec.com/2026/04/20… #doyensec #appsec #security #fuzzing

🚨 Breaking Secure-Looking Cloud Architectures At #defcon Singapore Demo Labs, we'll show real security bugs involving AWS Cognito multi-SSO user pools & ELB routing paths, including a Malicious OIDC Server & the ELBaph utility! 🔗 defcon.org/html/defcon-singa… #appsec #doyensec

Check out the latest edition of @pagedout_zine featuring Doyensec's own Bartłomiej "Bartek" Górkiewicz (@smnfbb ) vibing on Reversing Python Bytecode, along with plenty of great articles! pagedout.institute/download/… #appsec #doyensec #security #reversing

🚀 inQL v6.0.1 is out! Our GraphQL security tool got big upgrades.⚡ • Schema Brute-Forcer • Server Engine Fingerprinting • Automatic Variable Generation • Performance boosts & other improvements Details: blog.doyensec.com/2025/12/02… #doyensec #graphql #appsec #securityforces

📢It's here! Part 2 of Norbert Szetei's (@73696e65) research into ksmbd. See how customized fuzzing & the appropriate sanitizers led to discovering 23 Linux kernel CVEs, including use-after-frees & out-of-bounds reads/writes. blog.doyensec.com/2025/09/02… #doyensec #appsec #security