DEF CON 33 - The 2025 Pwnie Awards - Ian Roos, Mark Trumpbour
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 36:36
The Pony Awards 2025 celebrates achievements and failures in cybersecurity research [0:13], highlighting vulnerabilities with humor.
Key Takeaways:
• AMD won for using an example cryptographic key for over seven years [3:00]
• Scheduled Disclosure won for Most Underhyped Research, demonstrating remote power side channel attacks on modern x86 CPUs [14:07]
• The Samsung Galaxy S24 exploit won Best Mobile Bug for a multi-bug chain at Pwn2Own [17:14]
• A Linux kernel vulnerability took Best Privilege Escalation for its complex quadruple race condition [19:38]
• Linux CVE CNA received the Lamest Vendor Response award for dismissing an HFS Plus vulnerability [25:38]
The awards blend technical recognition with entertainment, acknowledging both brilliance and missteps in cybersecurity [35:29].
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello. Good morning. That was way better. [ __ ] The All right. Uh, so hello everybody. Uh, welcome to the Pony Awards. Uh, we've got a very, uh, really great show for you this year. Uh, really good nominees. Uh, nobody destroyed 40% of the internet this time. Uh, so like it's a little underwhelming, but it it'll it'll be good. You guys will like it, I promise. Um the uh so yeah, let's uh get this going along. First of all, thank you so much to our sponsors. Red Balloon Include Security and of course Summer Con. Uh as a reminder, the ponies are a purely volunteer effort. Uh so huge shout out to our sponsors, but rest assured the only people getting paid throughout all of this are going to be bartenders. Uh and with that, uh let's kick it off. So, first I'd like to invite uh I believe it's …