Friends ask: “You’re a consultancy with no product, why STAR Labs?” Today’s my answer: 5 RCEs on Pixel 10 & 11, all patched by Google, from a team you could fit round 1 table. We don’t sell a box. We break the unbreakable and tell you how. 👇
I didn’t find a single one of these bugs. My co-workers did, and it’s a privilege to watch them work. Open invite to @Google, @Kimi_Moonshot, @OpenAI & @AnthropicAI: We can demonstrate our vulnerability research with your compute if you give us a chance.
Jacob Soo retweeted
We are proud to share that @hi_im_d4rkn3ss has received the Bug of the Year award at the @thezdi Vanguard Awards.
The Awards were introduced by the ZDI to recognise outstanding contributions by security researchers & vendors that help strengthen the security ecosystem.
Jacob Soo retweeted
OB1 2026 is almost here, and yes, the shirts glow in the dark. 🌳
At STAR Labs (@starlabs_sg), we try new things in everything we do, from how we print our conference tees to the talks we curate for the community.
Jacob Soo retweeted
📌 Apply by 13 Aug 2026:
• Junior College (JC) in Singapore: forms.gle/jS1bXzQ2mxnBCLra7
• Full-time National Serviceman (NSF): forms.gle/yJwHcBbiboHoTTqh6
Help us spread the word! Tag a JC student or NSF in the comments who needs to see this.
Jacob Soo retweeted
🎓 Calling all JC students and NSFs interested in cybersecurity and AI!
@starlabs_sg is launching our next wave of fully sponsored passes for @offbyoneconf: This time for JC students and full-time NSFs in Singapore!
Free pass + official conference shirt included! 🧵👇
Jacob Soo retweeted
🎓 Our student sponsorship initiative continues!
We’re offering fully sponsored passes for Singapore Polytechnic & Singapore Institute of Technology students for @offbyoneconf!
Deadline: 12 Aug 2026
👉🏻Apply now:
• SP: forms.gle/VCW8ivHqmVD4CuQGA
• SIT: forms.gle/gM3oWFFdvbXEAUCN6
Jacob Soo retweeted
How secure is the wireless hardware powering critical infrastructure?
At @offbyoneconf, @GastonAznarez & @DBorgogno from @faradaysec exploit over-the-air memory corruption bugs to gain RCE from kilometres away with zero network access.
More info: offbyone.sg/talk/gastonaznar…
Jacob Soo retweeted
FREE student passes for @offbyoneconf 2026!
@starlabs_sg is sponsoring passes for Nanyang Polytechnic (NYP) students interested in cybersecurity & AI security. Building projects? We'd love to have you.
Open to current NYP students.
👉🏻 Apply by 11 Aug: forms.gle/j2dimfNudssbnCtk9
Jacob Soo retweeted
Apple just credited 2 of our researchers with 11 vulnerabilities in their latest security updates
support.apple.com/en-us/1280…
More to come.
@OpenAI which has become part of our vulnerability research workflow. We do wish they had sponsored us for this research though. 😄
If @OpenAI or @AnthropicAI is willing to sponsor us with AI tokens to protect end users. We are “Always Ready” 😬
Apple just credited 2 of our researchers with 11 vulnerabilities in their latest security updates
support.apple.com/en-us/1280…
More to come.
@OpenAI which has become part of our vulnerability research workflow. We do wish they had sponsored us for this research though. 😄
Jacob Soo retweeted
Dr. Edward (@edwardzpeng) has locked in his keynote details for @offbyoneconf!
He shares hands-on lessons from AI-augmented offensive security projects and discuss how traditional researchers must adapt to this fast-shifting landscape.
More info: offbyone.sg/talk/edwardzpeng
AI & security research moves incredibly fast.
That’s why our next keynote speaker, Dr. Edward Zhiniang Peng (@edwardzpeng), is locking his abstract and title later. This ensures the freshest developments!
More info: offbyone.sg/talk/edwardzpeng
#OB12026 #CyberSecurity #AISecurity
Interesting topic by @edwardzpeng
Can’t wait to hear it
Dr. Edward (@edwardzpeng) has locked in his keynote details for @offbyoneconf!
He shares hands-on lessons from AI-augmented offensive security projects and discuss how traditional researchers must adapt to this fast-shifting landscape.
More info: offbyone.sg/talk/edwardzpeng
Jacob Soo retweeted
What is a conference without some swag?
We are dropping exclusive merch for @offbyoneconf 2026!
✈️Flight Tag: Classic and sleek gear.
🎒Embroidery Tag Set: A fun set of 3 tags for your bag.
🇸🇬 Delivery within SG only.
Grab yours before they're gone: merch.starlabs.sg/collection…
Jacob Soo retweeted
Welcome Evangelos Daravigkas (@freddo_1337) & Ben Koo (@kiddo_pwn) of Team DDOS to @offbyoneconf!
They present "No Time to Pwn2Own: Exploiting After the Draw": A raw, honest look at what happens when it all goes sideways before you go on stage
More info: offbyone.sg/talk/evangelosda…
Jacob Soo retweeted
Welcome Stefan Esser (@i0n1c) to the @offbyoneconf stage!
Get an honest look at using AI agents for vulnerability research on Apple's TXM: What works, what breaks, where AI lies to you, and where it genuinely outperforms humans.
More info: offbyone.sg/talk/stefanesser
Jacob Soo retweeted
Only 5 days left! Our CFP closes on 1 July 2026 at 18:00 SGT 🚨
We want your technical research, novel techniques, and war stories. First-time speakers and regional researchers are highly encouraged. Take the weekend to lock in your abstract!
👉🏻 cfp.offbyone.sg/2026/cfp
Jacob Soo retweeted
CVE-2026-20181 (CVSS 9.1 Critical) in Cisco ISE is now patched. RCE to root on the underlying OS.
Found independently by @CurseRed and our former intern Tevel Sho. Proud of both of them. Around 25 or more to go.
Advisory: sec.cloudapps.cisco.com/secu…
Jacob Soo retweeted
CVE-2026-9539 in libslirp is now public. Out-of-bounds heap read + integer underflow in TCP urgent data handling, allowing a privileged guest to read host memory.
Found by @bestswngs & @bruce30262
cve.org/cverecord?id=CVE-202…