OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
Original title: Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
OffensiveCon Japan 2026, held October 27–28, listed talks on Chrome renderer sandbox escapes via Skia, Telegram sticker-related bypasses described as a zero-click surface, and iOS zero-day discovery with Muse Spark. The public agenda does not describe exploit chains, affected clients, CVE assignments or patches. Other sessions covered hypervisor, GPU, NTFS, Linux io_uring and V8 research, including AI-assisted security work. The report says prior in-the-wild Chrome exploitation shows why sandbox escapes matter, but these talks are not a consolidated advisory.
Unconfirmed: Session titles do not confirm working exploit chains, affected versions, unpatched iOS flaws or active attacks.
- Quang L’s session targets the Chrome renderer sandbox through Skia.
- Saifeldeen Aziz’s Telegram talk cites stickers but names no client or CVE.
- Luke McLaren’s iOS session names Muse Spark without patch details.
- CVE-2025-2783 is cited only as earlier, separate Chrome research.
- Organizations
- OffensiveCon
- Countries
- Japan
From the original article
2 min read at gbhackers.com
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. The published agenda also covered hypervisor exploitation, Windows privilege escalation, Linux kernel techniques, and AI-assisted security research.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.