🚩 Flags are waiting to be captured! The Hackceler8 FINALS are about to IGNITE! 🚩
Right here on the ground, the world's elite teams are battling it out live—exploiting vulnerabilities and racing to pwn the challenges in real time. 💻🔥
Who will conquer the arena and capture ultimate fame and glory? 🏆🇸🇬
Competing Teams: Kalmarunionen, r3kapig, Zer0Rocket Wrecks, TeamH4C, Maple Mallard Magistrates, Bunkyo Westerns, Dicegang, and Slices
#Hackceler8 #GoogleCTF #CTF #CaptureTheFlag #ESCAL8 #GoogleSingapore
Right here on the ground, the world's elite teams are battling it out live—exploiting vulnerabilities and racing to pwn the challenges in real time. 💻🔥
Who will conquer the arena and capture ultimate fame and glory? 🏆🇸🇬
Competing Teams: Kalmarunionen, r3kapig, Zer0Rocket Wrecks, TeamH4C, Maple Mallard Magistrates, Bunkyo Westerns, Dicegang, and Slices
#Hackceler8 #GoogleCTF #CTF #CaptureTheFlag #ESCAL8 #GoogleSingapore
2
2
55
4,140
🇸🇬 Hello from init.g(singapore) — we are officially LIVE! 🚀 Crazy excited to meet all the incredible students who joined us today. Very much looking forward to seeing how these bright minds will shape the future of cybersecurity! 💻🔒 Let the learning and hacking begin! 🛠️ #initg #ESCAL8 #GoogleSingapore #CyberSecurity #Hackathon #TechSG
1
2
50
3,913
💥 bugSWAT is officially KICKING OFF at Escal8! 💥
We are bringing together Google's security engineers and some of the world's most talented external security researchers under one roof. The mission? Deep-dive into our architectures, hunt for vulnerabilities, and make Google products safer for everyone. 🔐🤝
The target is set. Let’s hunt! 🛠️🎯
#bugSWAT #ESCAL8 #GoogleVRP #BugBounty #GoogleSingapore #CyberSecurity
We are bringing together Google's security engineers and some of the world's most talented external security researchers under one roof. The mission? Deep-dive into our architectures, hunt for vulnerabilities, and make Google products safer for everyone. 🔐🤝
The target is set. Let’s hunt! 🛠️🎯
#bugSWAT #ESCAL8 #GoogleVRP #BugBounty #GoogleSingapore #CyberSecurity
1
5
85
6,864
⚡️ Escal8 Singapore is officially kicking-off! ⚡️
The energy is unmatched as the next generation of cybersecurity talent gathers to learn, compete, and push boundaries. Get ready for next-level hacking, hands-on challenges, and game-changing ideas. 🇸🇬💻🔒
Let's see who climbs to the top! 🚀
#ESCAL8 #initg #GoogleSingapore #CyberSecurity #Hackathon
bughunters.google.com/blog/escal8-20…
The energy is unmatched as the next generation of cybersecurity talent gathers to learn, compete, and push boundaries. Get ready for next-level hacking, hands-on challenges, and game-changing ideas. 🇸🇬💻🔒
Let's see who climbs to the top! 🚀
#ESCAL8 #initg #GoogleSingapore #CyberSecurity #Hackathon
bughunters.google.com/blog/escal8-20…
0
3
72
4,748
📣📣📣 Calling all Chrome bug hunters! 📣📣📣
Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition.
For details, see our latest blog post 👇
bughunters.google.com/blog/changes-t…
Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition.
For details, see our latest blog post 👇
bughunters.google.com/blog/changes-t…
4
37
358
19,531
📢 PSA for open-source bug hunters
We are temporarily no longer accepting OSS VRP product vulnerability submissions. This does not impact OSS VRP supply chain reports, or any outstanding reports. As an alternative, we encourage you to find impact across our other VRP programs and submit there instead, or pursue the Patch Rewards Program.
Why is this happening? This pause is due to a significant rise in automated submissions, the vast majority of which are not valid. We will continue to reformat and work on this aspect of the OSS VRP and commit to giving an update in Q1 2027.
bughunters.google.com/about/rules/op…
We are temporarily no longer accepting OSS VRP product vulnerability submissions. This does not impact OSS VRP supply chain reports, or any outstanding reports. As an alternative, we encourage you to find impact across our other VRP programs and submit there instead, or pursue the Patch Rewards Program.
Why is this happening? This pause is due to a significant rise in automated submissions, the vast majority of which are not valid. We will continue to reformat and work on this aspect of the OSS VRP and commit to giving an update in Q1 2027.
bughunters.google.com/about/rules/op…
15
41
363
72,354
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate.
How it works: blog.google/security/agent…
For real-world vulnerabilities PageBreak has discovered 👇
bughunters.google.com/blog/pagebreak…
How it works: blog.google/security/agent…
For real-world vulnerabilities PageBreak has discovered 👇
bughunters.google.com/blog/pagebreak…
22
198
1,209
98,994
ESCAL8, Google’s annual flagship security conference, is coming to Singapore in October 2026, with a particular focus on AI Agents! 🇸🇬
Check out our blog post to see what's planned in the three main segments of the conference: bugSWAT, Hackceler8, and init.g() 👇
bughunters.google.com/blog/escal8-20…
Check out our blog post to see what's planned in the three main segments of the conference: bugSWAT, Hackceler8, and init.g() 👇
bughunters.google.com/blog/escal8-20…
0
10
92
7,986
📢📢📢 Attention bug hunters!
Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage?
If yes, check out his blog post 👇
bughunters.google.com/blog/breaking-…
Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage?
If yes, check out his blog post 👇
bughunters.google.com/blog/breaking-…
8
84
551
47,390
📢 Tracking our VRP rules just got easier!
We are now mirroring our VRP rules and help articles directly on GitHub. Perfect for automating your workflows and tracking changes. 👇
github.com/google/bughunt…
We are now mirroring our VRP rules and help articles directly on GitHub. Perfect for automating your workflows and tracking changes. 👇
github.com/google/bughunt…
6
33
317
21,012
Teamwork makes the dream work 🙌
Google Bug Hunters now supports sharing the recognition (and splitting the financial reward) for reports you have submitted, but were researched and created in collaboration with other researchers. Details 👇
bughunters.google.com/about/frequent…
Google Bug Hunters now supports sharing the recognition (and splitting the financial reward) for reports you have submitted, but were researched and created in collaboration with other researchers. Details 👇
bughunters.google.com/about/frequent…
5
9
109
10,427
Interested in crypto 🔒?
Check out our latest post which analyzes recent results published by Anthropic and argues that these advances, while significant, do not signal the downfall of cryptography.
bughunters.google.com/blog/more-cryp…
Check out our latest post which analyzes recent results published by Anthropic and argues that these advances, while significant, do not signal the downfall of cryptography.
bughunters.google.com/blog/more-cryp…
6
3
42
5,742
Check out Daniel's article on finding a privilege escalation in Google Cloud using a chatbot!
varonis.com/blog/rogue-age…
varonis.com/blog/rogue-age…
0
24
125
9,073
Check out Tomas' post and article on hacking Google using Git integrations. One of these reports even won him Most Valuable Hacker (MVH) at Google's bugSWAT event in Vegas last year!
The written version of my BSides Riga and @bsidesvilnius talks is up: exploiting git integrations in cloud services, with four bugs I found in GCP (Looker, Dataform), including the one that won me MVH.
nopnop.pro/2026/06/17/exp…
0
16
150
15,592
"brutecat is super talented", "luckily I'm not oncall ;)", "incredible"
These are all real quotes from Googlers after seeing this blog post. Amazing work @brutecat, thank you for sharing!
These are all real quotes from Googlers after seeing this blog post. Amazing work @brutecat, thank you for sharing!
1
27
571
38,681
📢 PSA for security researchers!
In our latest post, we're taking a closer look at how Google Spark (which was recently launched) works, ways to approach bug hunting in Spark, and how to distinguish high-impact vulnerabilities from expected system behavior 👇
bughunters.google.com/blog/spark-rel…
In our latest post, we're taking a closer look at how Google Spark (which was recently launched) works, ways to approach bug hunting in Spark, and how to distinguish high-impact vulnerabilities from expected system behavior 👇
bughunters.google.com/blog/spark-rel…
3
9
109
10,629
📣Blast from the past📣
This post takes us back to a flaw discovered in 2010: while technology has advanced, the general story of how the flaw was detected is still a great example of effectively identifying and remediating a security issue.
bughunters.google.com/blog/bit-rot-d…
This post takes us back to a flaw discovered in 2010: while technology has advanced, the general story of how the flaw was detected is still a great example of effectively identifying and remediating a security issue.
bughunters.google.com/blog/bit-rot-d…
2
4
34
3,956
📢 More on Google's approach to post-quantum cryptography 🔐
This time, we're taking a closer look at digital signatures and the complex challenges they present, and discussing the opinionated paths we are taking at Google in this space.
bughunters.google.com/blog/next-with…
This time, we're taking a closer look at digital signatures and the complex challenges they present, and discussing the opinionated paths we are taking at Google in this space.
bughunters.google.com/blog/next-with…
0
7
43
4,730
More on passkeys 🔐!
This time we are focusing on storage options, in particular the differences between using a password manager vs. a hardware security key to store your credentials, and why you might choose one option over the other.
bughunters.google.com/blog/hardware-…
This time we are focusing on storage options, in particular the differences between using a password manager vs. a hardware security key to store your credentials, and why you might choose one option over the other.
bughunters.google.com/blog/hardware-…
0
2
19
2,870