Sign in

The Dustin Childs

@dustinchilds.bsky.social
2K followers 181 following 217 posts

Just a simple information security gnome trying to make his way through the universe. Part-time patch wrangler. Tweets are just my opinion and such. Got questions about patches or bug bounties? My DMs are open. Signal: DustinChilds.17

PostsRepliesMedia
The Dustin Childs @dustinchilds.bsky.social · 13/10/2026
Well, I guess I asked for it. A mere 1,415 CVEs from #Microsoft. That's more CVEs than Microsoft has ever released in a year. It may take some time to sort through this. At least it looks like only 1 under active attack. Stand by for my analysis...
010
The Dustin Childs @dustinchilds.bsky.social · 13/10/2026
sigh - Microsoft patches are late. Come on people! Some of us have things to do!
030
The Dustin Childs @dustinchilds.bsky.social · 10/10/2026
Now THIS is the way to set up a cocktail making class. Thanks to Middleton Distillery for an awesome time (and some tasty recipes!)
020
The Dustin Childs @dustinchilds.bsky.social · 10/10/2026
I agree with yer mum. She sounds like an amazing lady.
110
The Dustin Childs @dustinchilds.bsky.social · 10/10/2026
I just need Cork. Nothing against the rest of the island, but I’m good here.
110
The Dustin Childs @dustinchilds.bsky.social · 10/10/2026
I see nothing wrong in this picture
110
The Dustin Childs @dustinchilds.bsky.social · 08/10/2026
Wow. wow wow wow. pwn2own.zerodayinitiative.com
static.klipy.com
Man Yawning with 'Wow Wow' Reaction
ALT: Man Yawning with 'Wow Wow' Reaction
010
The Dustin Childs @dustinchilds.bsky.social · 08/10/2026
No touching - just NFC. Absolutely amazing.
static.klipy.com
Şaşkın Ayı Ted
ALT: Şaşkın Ayı Ted
000
The Dustin Childs @dustinchilds.bsky.social · 06/10/2026
Hey look! A live leaderboard from #Pwn2Own pwn2own.zerodayinitiative.com
pwn2own.zerodayinitiative.com
Pwn2Own · Contest Control
Pwn2Own contest control. Every attempt. Every breakthrough.
010
The Dustin Childs @dustinchilds.bsky.social · 06/10/2026
So many phones....
static.klipy.com
Deja Skye: I Am A Bit Nervous
ALT: Deja Skye: I Am A Bit Nervous
000
The Dustin Childs @dustinchilds.bsky.social · 05/10/2026
So many phones!!!!
static.klipy.com
Balthazar Crazy in Straight Jacket
ALT: Balthazar Crazy in Straight Jacket
010
Reposted by The Dustin Childs
TrendAI Zero Day Initiative @thezdi.bsky.social · 05/10/2026
This one makes 40! youtube.com/shorts/ARY6P...
youtube.com
Setting up for Pwn2Own Ireland 2026: This one makes 40!
YouTube video by TrendAI Zero Day Initiative
032
The Dustin Childs @dustinchilds.bsky.social · 04/10/2026
If you visit Kinsale, you should visit Black’s Brewing & Distillery. Great beer, whiskey, and gin. This is their juniper tempest gin and it’s wonderful. Taking the triple threat home.
000
The Dustin Childs @dustinchilds.bsky.social · 04/10/2026
Breakfast with a view. I love Ireland 🇮🇪
020
The Dustin Childs @dustinchilds.bsky.social · 02/10/2026
#Microsoft released an out-of-band Exchange patch today. Not listed as under active attack, but exploitation is more likely. Sorry Exchange admin - your work continues. msrc.microsoft.com/update-guide...
msrc.microsoft.com
Security Update Guide - Microsoft Security Response Center
000
Reposted by The Dustin Childs
TrendAI Zero Day Initiative @thezdi.bsky.social · 01/10/2026
Registration for #Pwn2Own Ireland is closed and the drawing is set. Join us next Monday at 1500 BST (GMT+1) for the drawing for order. This is the first time we've ever had double-digit phone entries, so it should be an amazing contest. youtube.com/live/QpP2xDX... #P2OIreland
youtube.com
Pwn2Own Ireland 2026 - Drawing for Schedule
YouTube video by TrendAI Zero Day Initiative
112
The Dustin Childs @dustinchilds.bsky.social · 01/10/2026
I'll be there!
000
The Dustin Childs @dustinchilds.bsky.social · 26/09/2026
I’m prepared to be hurt again. I’m putting in a cold air intake at the same time, so the stock intake will be out of the way. Fingers crossed.🤞
010
The Dustin Childs @dustinchilds.bsky.social · 26/09/2026
Time to upgrade my Audi. First stop, better spark. This should be fun.
3000
The Dustin Childs @dustinchilds.bsky.social · 16/09/2026
Let me know if this is useful at all. I don't want to just pick on Microsoft and Adobe, but I'm still trying to find what's most meaningful in the Apple release. Let me know what works and what doesn't.
040
The Dustin Childs @dustinchilds.bsky.social · 10/09/2026
The quality problems with releasing nearly 1,000 patches in a month start to show: www.bleepingcomputer.com/news/microso... and www.bleepingcomputer.com/news/microso...
bleepingcomputer.com
September Windows Server updates break Remote Desktop Services
Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, ...
020
The Dustin Childs @dustinchilds.bsky.social · 09/09/2026
There are far too many "n"s in the word unknown.
000
Reposted by The Dustin Childs
Help Net Security @helpnetsecurity.com · 09/09/2026
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor 📖 Read more: www.helpnetsecurity.com/2026/09/09/s... #cybersecurity #cybersecuritynews #patchtuesday #0day #ExchangeServer #SharepointServer #Windows #Kerberos @dustinchilds.bsky.social @satn.am
helpnetsecurity.com
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor - Help Net Security
On September 2026 Patch Tuesday Microsoft delivered a record-breaking number of patches, including for two bugs exploited as zero-days.
021
The Dustin Childs @dustinchilds.bsky.social · 08/09/2026
20 wormable bugs?
110
The Dustin Childs @dustinchilds.bsky.social · 08/09/2026
970 something bugs from Microsoft and an 0-day in Commerce in the wild? yikes. I'll be heads down for a bit sorting this out.
020
The Dustin Childs @dustinchilds.bsky.social · 31/08/2026
I love organization. Pliers are set.
020
The Dustin Childs @dustinchilds.bsky.social · 26/08/2026
Where did you have it last? Have you looked there?
000
The Dustin Childs @dustinchilds.bsky.social · 22/08/2026
Just landed in Seattle. 78 degrees and overcast. Oh how I’ve missed you, Emerald City.
000
Reposted by The Dustin Childs
Help Net Security @helpnetsecurity.com · 12/08/2026
Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) 🔗 Read more: www.helpnetsecurity.com/2026/08/12/a... #patchtuesday #patching #windows #0day #sharepointserver #cybersecurity #cybersecuritynews #ITsec @microsoft.com @dustinchilds.bsky.social @thezdi.bsky.social
helpnetsecurity.com
Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) - Help Net Security
Microsoft's August 2026 Patch Tuesday delivered 400+ security fixes, including one for an actively exploited zero-day flaw (CVE-2026-68820).
011
The Dustin Childs @dustinchilds.bsky.social · 11/08/2026
I tried to get the count right, but between all the revisions from July and cloud fixes, ¯\_(ツ)_/¯
020
The Dustin Childs @dustinchilds.bsky.social · 11/08/2026
Well - at least it's not as bad as last month. #Microsoft releases ~400 patches today. Oof. I'll have my thoughts about the release out soon.
040
The Dustin Childs @dustinchilds.bsky.social · 06/08/2026
One of the best restaurants in the world. So full, but can’t wait to come back.
000
The Dustin Childs @dustinchilds.bsky.social · 22/07/2026
The bug apocalypse continues...
101
Reposted by The Dustin Childs
TrendAI Zero Day Initiative @thezdi.bsky.social · 21/07/2026
#Pwn2Own Ireland returns for 2026! We've got lot's of targets and plan on lot's of good times on the Emerald Isle. We've got a new registration process, so please read the rules carefully to know what to expect. Check it out at www.zerodayinitiative.com/blog/2026/7/... #P2OIreland
zerodayinitiative.com
Zero Day Initiative — Pwn2Own Ireland 2026 – New Targets and Categories
If you just want to read the rules, you can find them here .   Pwn2Own Ireland returns for 2026, and it’s the third year for this event in the Emerald Isle. Despite the dreary Irish skie...
013
The Dustin Childs @dustinchilds.bsky.social · 18/07/2026
Christmas in July at the Sounds game
010
The Dustin Childs @dustinchilds.bsky.social · 17/07/2026
None under active or publicly known.
020
The Dustin Childs @dustinchilds.bsky.social · 17/07/2026
As if Tuesday wasn't enough, #Microsoft released 4 more patches yesterday: CVE-2026-56171: RDP Information Disclosure Vulnerability CVE-2026-58598: Backup Service EoP Vulnerability CVE-2026-58643: Admin Center Spoofing Vulnerability CVE-2026-59117: Windows Terminal RCE Vulnerability
020
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
Including patches for Minecraft and Ages of Empires was chef’s kiss
030
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
Not sure about the discrepancy. One thing I learned a long time ago was however you count bugs, you're doing it wrong. They may have included a cloud bug w/ no user action that I missed.
000
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
And don't miss the CVSS 9.8 RCE bug in the Minecraft Bedrock Dedicated Server. Yes - Microsoft released a security patch for Minecraft! msrc.microsoft.com/update-guide...
msrc.microsoft.com
Security Update Guide - Microsoft Security Response Center
010
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
This is almost cruel to do to sysadmins. 620+ bugs at once? At least only 2 are in the wild.
220
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
Wait - there are how many #Microsoft patches?? More than 600??!? Great googly moogly. Uh.... I'll have my thoughts out soonish. Yikes. Welcome to the bug apocalypse.
140
The Dustin Childs @dustinchilds.bsky.social · 14/07/2026
#Adobe releases 12 bulletins covering 88 CVEs. Nothing from #Microsoft yet. Why is my spidey sense tingling?
020
The Dustin Childs @dustinchilds.bsky.social · 30/06/2026
#Adobe is moving to a twice-monthly patch release as a result of frontier AI models finding bugs. Today, they released two Priority 1 patches for Cold Fusion and Campaign Classic (CVSS 10!). Neither under active attack. Read the announcement at
blog.adobe.com
Protecting customers faster: How Adobe is responding to AI-accelerated vulnerability discovery | Adobe Security Blog
Effective July 14, 2026, Adobe is moving from monthly to twice-monthly publication of Adobe Security Bulletins and Advisories on the second and fourth Tuesday of each month.
131
The Dustin Childs @dustinchilds.bsky.social · 26/06/2026
How can you not be romantic about baseball? Go Sounds!
010
The Dustin Childs @dustinchilds.bsky.social · 18/06/2026
I had an amazing time talking with Chompie during #Pwn2Own Berlin. Her insights into AI assisted vulnerability development are not to be missed. Check out our podcast here or wherever you get yours thecyberwire.com/podcasts/ai-...
thecyberwire.com
Can Agentic AI Really Find Zero-Days? Ask the Hacker Who Won Pwn2Own Berlin 2026
At Pwn2Own Berlin 2026, a security researcher used agentic AI to help her win. The AI surfaced real, verified bugs, then wrongly called her winning bug “not unexploitable in practice.” Spoiler - it was.That uneven record is exactly what security leaders need to understand about the promise and limits of agentic AI. In this episode, host Dustin Childs sits down with Valentina Palmiotti – better known as Chompie – who took home $70,000 for zero-days in the NVIDIA Container Toolkit and Red Hat Enterprise Linux. Drawing from firsthand experience, Chompie shares agentic AI’s proven value for defenders and why human expertise remains essential.
000
The Dustin Childs @dustinchilds.bsky.social · 16/06/2026
Well that's odd. #Adobe released an out-of-band update for the Adobe DNG Software Development Kit (SDK), but they say there are no active attacks, and the deployment priority is 3. Four CVEs - one Critical. Check it out at helpx.adobe.com/security/pro...
helpx.adobe.com
020
The Dustin Childs @dustinchilds.bsky.social · 14/06/2026
Any night at the ballpark is a good night. Let’s go Sounds!
000
The Dustin Childs @dustinchilds.bsky.social · 12/06/2026
Back to my happy place. Time to grab a hotdog and a beer. Go Sounds!
020
Reposted by The Dustin Childs
Catalin Cimpanu @campuscodi.risky.biz · 11/06/2026
Oracle has released an out-of-band security alert for an unauth RCE in PeopleSoft CVE-2026-35273 www.oracle.com/security-ale...
085