Research

• Software Vulnerabilities Discovered (CVEs)
  • List of software vulnerabilities discovered since 2010
• CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader
  • Guest blog post in the Zero Day Initiative blog for discovered Adobe Reader vulnerabilities (CVE-2021-28632 & CVE-2021-39840)
• ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag
  • Discovered vulnerability in Adobe Reader (CVE-2021-21042) was featured in the Zero Day Initiative blog (Blog post by Mat Powell)
• CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader
  • Discovered vulnerability in Adobe Reader (CVE-2020-9715) was featured in the Zero Day Initiative blog (Blog post by Abdul-Aziz Hariri and Mat Powell)

Publications

• Windows 10 Segment Heap Internals
  • Black Hat USA 2016
  • Paper / Slides / Video
• Understanding the Attack Surface and Attack Resilience of EdgeHTML
  • Black Hat USA 2015 & RSA USA 2016
  • Paper / Slides / Video
• Diving Into IE 10’s Enhanced Protected Mode Sandbox
  • Hack In The Box Malaysia 2013 & Black Hat Asia 2014
  • Paper / Slides / Video
• Digging Deep Into The Flash Sandboxes
  • Black Hat USA 2012, Co-Presenter w/ Paul Sabanal
  • Paper / Slides
• Playing In The Reader X Sandbox
  • Black Hat USA 2011, Co-Presenter w/ Paul Sabanal
  • Paper / Slides
• Reversing C++
  • Black Hat DC 2007 & Black Hat USA 2007, Co-Presenter w/ Paul Sabanal
  • Paper / Slides
• The Art of Unpacking
  • Black Hat USA 2007
  • Paper / Slides

Award

• ZDI Vanguard Awards 2024 - Researcher Award
  • Trend Micro’s Zero Day Initiative (August 8, 2024)

Mentions

• IBM ISS cracks open Conficker’s secret communications code
  • The Last Watchdog (March 31, 2009)
• Experts See Early Activity From Conficker Worm
  • The New York Times (March 31, 2009)