Articles tagged “Vulnerability Research”.
10 ARTICLES
We assess internet-facing services such as Web applications, APIs, and administrative interfaces through AI-assisted source review and hands-on attack validation, delivering a report in principle within five business days.
Ikotas Labs won Pwn2Own Ireland 2026 after exploiting the Google Pixel 10, Samsung Galaxy S26, OpenAI Codex, and Oracle Autonomous AI Database, earning $361,000 and 42.5 Master of Pwn points.
Our specialized LLM agent reached arbitrary code execution in all 10 trials across two V8 vulnerabilities.
Our member discovered an information disclosure vulnerability in the Privacy component of Firefox for Android and reported it to Mozilla.
Our team discovered multiple memory safety vulnerabilities that lead to arbitrary code execution in tools shipped with the TeX Live typesetting system, and reported them to the developer under coordinated disclosure. We demonstrated that arbitrary code execution is achievable on the official distribution binaries simply by compiling a malicious document.
Our member discovered a local privilege escalation 0-day on the latest Linux kernel, chaining two kernel bugs, and reported it to the vendor.
Our member discovered vulnerabilities in Firefox's DOM: Bindings (WebIDL) and Popup Blocker components and reported them to Mozilla.
Our member discovered a new privilege escalation variant of the Dirty Frag family in the Linux kernel's RxRPC RxGK security class.
Our member discovered vulnerabilities in Firefox's Networking: Cookies and Debugger components and reported them to Mozilla.
Our member discovered a privilege escalation vulnerability in Firefox's Netmonitor component and reported it to Mozilla.