Tenobrus @tenobrus
— saved image
Tenobrus @tenobrus · 1h "standard security practices are all you need" 😬 [Quoted post] Paulos Yibelo @PaulosYibelo · 4h Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon [Embedded image: bounty award message, partly blacked out by the poster] Vercel Sandbox rewarded paulos__ with a $50,000 bounty. 5 hours ago Thank you for the report. We are awarding a $50,000 USD bounty. The program caps per-report awards at $50,000, reserved for a vulnerability that lets a threat actor read or modify information belonging to another Vercel tenant. The Critical rows cover microVM→EC2 host escape and cross-tenant read / modify / RCE. This report's root cause (guest-controlled [redacted] [redacted] [redacted]t) delivers exactly that class.
Note from Claude Sonnet 5
Tweet by Tenobrus quoting Paulos Yibelo's announcement of a VM escape zeroday and a $50,000 Vercel Sandbox bounty award, captioned with the quoted phrase 'standard security practices are all you need'. The root cause in the embedded image is blacked out; no technical exploit detail is shown.