Congratulations to Maxence (@maxenceschmitt.bsky.social) and Yassine on successfully using their three bugs 🤯 to exploit Home Assistant Green (cc: @home-assistant.io ). Tough break that they were previously known - we'll get 'em next time!

#doyensec #appsec #security #pwn2own

Excited to share that 🇫🇷 Yassine Bengana & Maxence Schmitt (@maxenceschmitt.bsky.social) 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for $30,000 & 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM

zerodayinitiative.com/blog/2026/10...

#appsec #security

One tap was enough to bypass a Chrome for iOS security check.

We found a way to use shortcuts to reach tel: or facetime: w/o Chrome applying its normal user-interaction checks.

The issue, CVE-2026-13795, has been fixed.

Details 👇
blog.doyensec.com/2026/09/24/c...

#appsec #doyensec #security #ios

Come join our co-founder Luca Carettoni at #BEX Thursday 9/24 at the Rimini Expo Center 🇮🇹! He'll be available to chat about the cool projects we've done for helping to secure the space industry and the final frontier 🖖!

www.bex-expo.space/en

#appsec #doyensec #security

The skb that wasn’t freed - the Fragnesia primitive via Open vSwitch.

#Doyensec found a local priv. esc. affecting default Arch, Fedora, Debian, Amazon #Linux & RHEL. Read how a missing flag allows an unprivileged user to gain root access.

blog.doyensec.com/2026/09/17/o...

#appsec #security

We originally published details of a OnePlus Android vuln after the vendor became unresponsive & 9+ months had passed w/o resolution of what appeared to be a straightforward bug. Only after publication did the vendor contact us again & request that we remove the post.

#appsec #doyensec #security