Orange Tsai demos Edge full exploit chain using only logic bugs at Hexacon
jedisct1 · x · 2026-10-17
At Hexacon 2026, Devcore researcher Orange Tsai presented "The Last Proof of Human Craft", showing how to pop calc in Microsoft Edge using only logic bugs — then chain it in reverse to pop Edge from calc, forging a full browser exploit chain without memory corruption.
More from Safety
- Open-source CLI scans MCP configs for poisoned tool descriptions before agents run them — StanislavMZ · 2026-10-17
- AI security startup Exponential opens hiring for AI safety and Chief of Staff roles — maksym_andr · 2026-10-17
- Anthropic says distillation defenses cut harvested data 90-99%, names Zhipu GLM-5.3 — bibryam · 2026-10-17
- GPT and Claude Found New Exploits in PMD Sky But Refuse to Continue Over Safety — mgostIH · 2026-10-17
- Epoch AI: open-weight models trail closed frontier on cyber by 6–7 months — morqon · 2026-10-17
- ChinaTalk: Saif Khan argues DUV controls could leave China with 100x fewer AI chips by mid-2030s — ChinaTalk · 2026-10-17