Ottawa Senators owner, CEO of Devcore Group part of group bidding to purchase Chateau Montebello
Ottawa Senators owner, CEO of Devcore Group part of group bidding to purchase Chateau Montebello
Ottawa Senators owner Michael Andlauer and Devcore Group CEO Jean-Pierre Poulin are part of a group bidding to purchase the Fairmont Chateau Montebello.
bit.ly
June 8, 2026 at 5:30 PM
Ottawa Senators owner, CEO of Devcore Group part of group bidding to purchase Chateau Montebello
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
May 15, 2026 at 1:39 PM
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
Amaze! Amaze! Amaze! Orange Tsai of DEVCORE Research Team was able to exploit Edge with a sandbox escape! If confirmed, we wins $175K. He's off to the disclosure room to explain how he did it. #Pwn2Own #P2OBerlin
May 14, 2026 at 8:51 AM
Amaze! Amaze! Amaze! Orange Tsai of DEVCORE Research Team was able to exploit Edge with a sandbox escape! If confirmed, we wins $175K. He's off to the disclosure room to explain how he did it. #Pwn2Own #P2OBerlin
La Ville de Gatineau a conclu une entente avec Transitiôn Québec, organisme sans but lucratif de la société immobilière Devcore, pour créer un village de transition pour des personnes en situation d'itinérance. Le secteur communautaire craint les effets d'un tel projet.
therover.ca/a-gatineau-u...
therover.ca/a-gatineau-u...
À Gatineau, un campement de sans-abri aux mains d’une société immobilière? – The Rover
Devcore loue un village de conteneurs aux sans-abri du plus grand campement de Gatineau – et veut faire de même dans d’autres villes au pays.
therover.ca
February 7, 2025 at 4:24 PM
La Ville de Gatineau a conclu une entente avec Transitiôn Québec, organisme sans but lucratif de la société immobilière Devcore, pour créer un village de transition pour des personnes en situation d'itinérance. Le secteur communautaire craint les effets d'un tel projet.
therover.ca/a-gatineau-u...
therover.ca/a-gatineau-u...
I had an amazing time at the Devcore conference last weekend! It was an honor to share my thoughts on exploit hunting there. Super impressed by the quality of talks and really enjoyed meeting so many great people. Huge thanks to the Devcore team for the wonderful experience!
March 17, 2025 at 12:04 PM
I had an amazing time at the Devcore conference last weekend! It was an honor to share my thoughts on exploit hunting there. Super impressed by the quality of talks and really enjoyed meeting so many great people. Huge thanks to the Devcore team for the wonderful experience!
Thank you to Splitline Ng from DEVCORE Research Team for the responsible disclosure.
Thank you to Alpha-Omega for funding my time and OpenAI
for funding the audit through "Patch the Planet".
Please see the write-up for details.
#opensource #oss #security #supplychain #python
Thank you to Alpha-Omega for funding my time and OpenAI
for funding the audit through "Patch the Planet".
Please see the write-up for details.
#opensource #oss #security #supplychain #python
June 23, 2026 at 3:11 PM
Thank you to Splitline Ng from DEVCORE Research Team for the responsible disclosure.
Thank you to Alpha-Omega for funding my time and OpenAI
for funding the audit through "Patch the Planet".
Please see the write-up for details.
#opensource #oss #security #supplychain #python
Thank you to Alpha-Omega for funding my time and OpenAI
for funding the audit through "Patch the Planet".
Please see the write-up for details.
#opensource #oss #security #supplychain #python
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日 visionproject.org.tw/story/7079 去年七月每周只有一到四上班。去年年底結算，營收還成長30%。
用人潮較少的周五去銀行辦事或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」
用人潮較少的周五去銀行辦事或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日|職場DEI|企業ESG|願景工程基金會
本土資安公司DEVCORE曾抓出微軟伺服器漏洞，也協助台積電評估內部資安風險，在業界有著良好口碑。聊起自家同仁的工作風格，DEVCORE執行長翁浩正和資深副總徐念恩提到的關鍵詞是：認真、負責、自我要求高。
visionproject.org.tw
July 4, 2024 at 12:55 PM
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日 visionproject.org.tw/story/7079 去年七月每周只有一到四上班。去年年底結算，營收還成長30%。
用人潮較少的周五去銀行辦事或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」
用人潮較少的周五去銀行辦事或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」
Group that includes Ottawa Senators, Devcore owners loses bid for Château Montebello
Group that includes Ottawa Senators, Devcore owners loses bid for Château Montebello
A group of local investors that includes Ottawa Senators owner Michael Andlauer and Devcore Group CEO Jean-Pierre Poulin will not be purchasing the Fairmont Château Montbello, Poulin has announced.
bit.ly
July 13, 2026 at 12:30 PM
Group that includes Ottawa Senators, Devcore owners loses bid for Château Montebello
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
May 14, 2026 at 10:19 AM
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin
May 16, 2026 at 6:03 PM
That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total
Pwn2Own Berlin 2026 ended with 47 zero-days and $1.29M in payouts, as DEVCORE dominated the competition across all categories.
securityaffairs.com
May 17, 2026 at 1:32 AM
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total
Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own
May 16, 2026 at 3:45 PM
Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own
In a video highlight from Day 1 of #Pwn2Own Berlin, Orange Tsai of the DEVCORE Research Team takes on Microsoft Edge with a sandbox escape! He earns $175,000 and 17.5 Master of Pwn points. youtube.com/shorts/8ngMz...
Pwn2Own Berlin 2016 Day 1 - DEVCORE vs Microsoft Edge
YouTube video by TrendAI Zero Day Initiative
youtube.com
May 14, 2026 at 11:26 AM
In a video highlight from Day 1 of #Pwn2Own Berlin, Orange Tsai of the DEVCORE Research Team takes on Microsoft Edge with a sandbox escape! He earns $175,000 and 17.5 Master of Pwn points. youtube.com/shorts/8ngMz...
🧵In Quebec, we’ve seen the privatization of schools, hospitals and now homelessness? My colleague Neha travelled to Gatineau to see it for herself: a condo developer building tiny housing units for the unhoused. It’s a complicated and sort of scary story. therover.ca/is-a-gatinea...
Is a Gatineau Homeless Encampment in the Hands of a Real Estate Company? – The Rover
Devcore is renting out a container village to homeless people at the largest encampment in Gatineau — and it wants to do the same in other cities across Canada.
therover.ca
January 31, 2025 at 2:50 PM
🧵In Quebec, we’ve seen the privatization of schools, hospitals and now homelessness? My colleague Neha travelled to Gatineau to see it for herself: a condo developer building tiny housing units for the unhoused. It’s a complicated and sort of scary story. therover.ca/is-a-gatinea...
The Python Security Response Team patched an authentication bypass in the python.org release management API in under 48 hours. No evidence of exploitation, all artifacts verified.
Check out the full writeup 👇
pyfound.blogspot.com/2026/06/miti...
#Python #Security #PSF
Check out the full writeup 👇
pyfound.blogspot.com/2026/06/miti...
#Python #Security #PSF
Mitigated API authentication bypass for python.org download metadata
On February 23rd 2026, Splitline Ng from the DEVCORE Research Team reported to the Python Security Response Team (PSRT) an authentication bypass vulnerability in the “python.org”
release management API. By supplying an admin username with an
arbitrary API key the request was processed with admin privileges.
pyfound.blogspot.com
June 23, 2026 at 3:05 PM
The Python Security Response Team patched an authentication bypass in the python.org release management API in under 48 hours. No evidence of exploitation, all artifacts verified.
Check out the full writeup 👇
pyfound.blogspot.com/2026/06/miti...
#Python #Security #PSF
Check out the full writeup 👇
pyfound.blogspot.com/2026/06/miti...
#Python #Security #PSF
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日
visionproject.org.tw/story/7079
但從去年七月開始，DEVCORE全面施行「縮減工時、不減薪」的周休三日，每周只有一到四上班。去年年底結算，營收表現不僅沒掉，還成長30%。
此外，用人潮較少的周五去銀行辦事，或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」鍾孟勳笑著說。
visionproject.org.tw/story/7079
但從去年七月開始，DEVCORE全面施行「縮減工時、不減薪」的周休三日，每周只有一到四上班。去年年底結算，營收表現不僅沒掉，還成長30%。
此外，用人潮較少的周五去銀行辦事，或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」鍾孟勳笑著說。
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日|職場DEI|企業ESG|願景工程基金會
本土資安公司DEVCORE曾抓出微軟伺服器漏洞，也協助台積電評估內部資安風險，在業界有著良好口碑。聊起自家同仁的工作風格，DEVCORE執行長翁浩正和資深副總徐念恩提到的關鍵詞是：認真、負責、自我要求高。
visionproject.org.tw
July 4, 2024 at 1:11 PM
善用「專注時間」、放手讓員工嘗試 DEVCORE用駭客精神推行周休三日
visionproject.org.tw/story/7079
但從去年七月開始，DEVCORE全面施行「縮減工時、不減薪」的周休三日，每周只有一到四上班。去年年底結算，營收表現不僅沒掉，還成長30%。
此外，用人潮較少的周五去銀行辦事，或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」鍾孟勳笑著說。
visionproject.org.tw/story/7079
但從去年七月開始，DEVCORE全面施行「縮減工時、不減薪」的周休三日，每周只有一到四上班。去年年底結算，營收表現不僅沒掉，還成長30%。
此外，用人潮較少的周五去銀行辦事，或探訪假日一位難求的餐廳，都能省下排隊時間。「周休三日不只是周間多一天假，還省下了很多假日的時間。」鍾孟勳笑著說。
An interesting case of the worst security issues often come from OS / system functions you don't even think about.
blog.splitline.tw/worstfit-unv...
blog.splitline.tw/worstfit-unv...
WorstFit: Unveiling Hidden Transformers in Windows ANSI!
This post, co-authored with Orange, is based on a talk originally presented at Black Hat Europe 2024 and is cross-posted from DEVCORE.
The research unveils a new attack surface in Windows by exploiti...
blog.splitline.tw
January 23, 2025 at 4:17 AM
An interesting case of the worst security issues often come from OS / system functions you don't even think about.
blog.splitline.tw/worstfit-unv...
blog.splitline.tw/worstfit-unv...
We have another collision. Although Angelboy (@scwuaptx) from DEVCORE Research Team successfully demonstrated their privilege escalation on Windows 11, 1 of the 2 bugs he used was known to the vendor. He still wins $11,250 and 2.25 Master of Pwn points. #Pwn2Own
May 17, 2025 at 9:37 AM
We have another collision. Although Angelboy (@scwuaptx) from DEVCORE Research Team successfully demonstrated their privilege escalation on Windows 11, 1 of the 2 bugs he used was known to the vendor. He still wins $11,250 and 2.25 Master of Pwn points. #Pwn2Own
In a video highlight from Day Two, @orange_8361 of @d3vc0r3 exploits #Microsoft #Exchange with a little help from AI. He earns $200,000 and 20 Master of Pwn points. youtube.com/shorts/cq0he... #Pwn2Own #P2OBerlin
Pwn2Own Berlin 2026 Day 2 - DEVCORE vs Microsoft Exchange
YouTube video by TrendAI Zero Day Initiative
youtube.com
May 16, 2026 at 9:31 AM
In a video highlight from Day Two, @orange_8361 of @d3vc0r3 exploits #Microsoft #Exchange with a little help from AI. He earns $200,000 and 20 Master of Pwn points. youtube.com/shorts/cq0he... #Pwn2Own #P2OBerlin
Confirmed! Pumpkin Chang (@u1f383) and Orange Tsai (@orange_8361) from the DEVCORE Research Team combined a CRLF Injection, an Auth Bypass, and a SQL Injection to exploit the Synology BeeStation. They earn $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OIreland
October 24, 2024 at 9:24 AM
Confirmed! Pumpkin Chang (@u1f383) and Orange Tsai (@orange_8361) from the DEVCORE Research Team combined a CRLF Injection, an Auth Bypass, and a SQL Injection to exploit the Synology BeeStation. They earn $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OIreland
No longer homeless, some locals are living inside shipping containers in Gatineau ottawacitizen.com/news/homeles...
No longer homeless, some locals are living inside shipping containers in Gatineau
When David Desbiens had nowhere to live, he found refuge inside a tiny homes community from land developer Devcore.
ottawacitizen.com
January 23, 2025 at 3:51 PM
No longer homeless, some locals are living inside shipping containers in Gatineau ottawacitizen.com/news/homeles...
Nice! Pumpkin (@u1f383) from DEVCORE Research Team was able to demonstrate their privilege escalation on Red Hat Enterprise Linux. He's off to the disclosure to provide the details.
May 15, 2025 at 9:06 AM
Nice! Pumpkin (@u1f383) from DEVCORE Research Team was able to demonstrate their privilege escalation on Red Hat Enterprise Linux. He's off to the disclosure to provide the details.
Unfortunately, YingMuo (@YingMuo) of the DEVCORE Internship Program could not get his exploit of the Canon imageCLASS MF656Cdw working within the time allotted.
October 22, 2024 at 4:44 PM
Unfortunately, YingMuo (@YingMuo) of the DEVCORE Internship Program could not get his exploit of the Canon imageCLASS MF656Cdw working within the time allotted.
Confirmed! All that's old is new again as : The DEVCORE team used multiple injections and a format string bug(!) to exploit the QNAP TS-453E. Their unique bugs earn them $40,000 and 4 Master of Pwn points.
October 21, 2025 at 3:37 PM
Confirmed! All that's old is new again as : The DEVCORE team used multiple injections and a format string bug(!) to exploit the QNAP TS-453E. Their unique bugs earn them $40,000 and 4 Master of Pwn points.