🚨 New advisory was just published! 🚨

ISPConfig contains design flaws in the user creation and editing functionality, which allow a client user to escalate their privileges to superadmin. Additionally, the language modification feature enables arbitrary PHP code injection due to improper input validation: https://ssd-disclosure.com/ssd-advisory-ispconfig-authenticated-remote-code-execution/

Submit your pfSense, Sophos & KerioControl vulnerabilities at: https://ssd-disclosure.com/submit/

🌪️ TyphoonCon 2025 has officially wrapped up and it was an incredible experience, all thanks to YOU!

Shoutout to our attendees, crew, and sponsors for bringing the energy and making it an unforgettable event!

:sparkles_red: Stay tuned... TyphoonCon 2026 is already in the works, and we can't wait to see you there!

🌪️ Last but not least! Closing Remarks and TyphoonPWN winners with SSD Secure Disclosure's Aviram Jenik and Noam Rathaus

🌪️ Closing the day with @scannell_simon desyncing the planet

🌪️ Up next, Assaf Morag is unveiling the invisible pathways to breaching AWS accounts

🌪️ SOS! Thai Nguyen & Chuong Nguyen are showing us how to discover and exploit 0-days from 1-days at scale

🌪️ Now on stage, NeoTheone is showing us how to steal a drone!

🌪️ Up next, we’re attacking debug modules in the Android ecosystem with Lewei Qu

🌪️ Now on stage at TyphoonCon 2025: just having fun with binary polynomials with @arnaugamez

🌪️ Starting day 2 with our keynote Phuong Nguyen and his wonderful talk about building a low profile elite hacking team!

🌪️ Conference day 2 starts now. Get ready for another day of great talks!

It looks like Kerio Control was PWNed with a Pre auth RCE! We're going through the exploit now to see everything works like it should #TyphoonCon25

🌪️ Ending day one of #TyphoonCon25 with SeongJoon Cho’s Pwning shopping mall CMS

🌪️ Tapping into the past @typhooncon with @rdjgr & Carlo Meijer’s RCE via Fax Machine!

🌪️ Up next, Satoki Tsuji is explaining the hidden risks of URL protocol handler leaks

🌪️ Now on stage, Boris Larin is diving into the crypto game of North Korea

🌪️ Back from lunch just in time to escape VirtualBox and unchaining objects in the Windows Kernel with Corentin Bayet

💻 A TyphoonPWN attempt! Another LG WebOS is being targeted

💻 A TyphoonPWN attempt! ipTime is being targeted