Stephen Fewer
huzzah! Hit on the first attempt; a three bug chain with a container escape for unauth RCE on the host OS 😁
TrendAI Zero Day Initiative
📢 Confirmed: @stephenfewer of @rapid7 used three bugs, including an SSRF and a command injection, to exploit the Home Assistant Green (which isn't actually green). He earns himself $40,000 and 4 Master of Pwn points. #Pwn2Own