Day[0]

A weekly podcast for bounty hunters, exploit developers or anyone interesting in the details of the latest disclosed vulnerabilities and exploits.

Day[0] is a technology podcast hosted by dayzerosec, with 283 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

dayzerosec hosts Day[0], a technology show with 283 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #283

  The Future

  Apr 10, 20261h 20mS0

  <p>After 283 episodes, this will be the final episode of the DAY[0] podcast.</p><p><br></p><p>We started the podcast on a hopeful note in the days following Ghidra's release. Now, to end it off we've got another discussion about how we see the future of vulnerability research and exploit development going. </p><p><br></p><p>We recorded this episode before all the hype around "Mythos" and Project Glasswing so it doesn't play into our commentary here.</p><p><br></p><p>Thank you all for the support over the last seven years.</p><p><br></p><...

  ListenShow Notes
• 

  Episode #282

  Exploiting VS Code with Control Characters

  May 12, 202530 minS1

  <p>A quick episode this week, which includes attacking VS Code with ASCII control characters, as well as a referrer leak and SCIM hunting.</p><p><br></p><p>Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/282.html</p><p><br></p><p>[00:00:00] Introduction</p><p>[00:00:57] Attacking Hypervisors - Training Update</p><p>[00:06:20] Drag and Pwnd: Leverage ASCII characters to exploit VS Code</p><p>[00:12:12] Full Referer URL leak through img tag</p><p>[00:17:52] SCIM Hunting - Beyond SSO</p><p>[00:25:17] Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages</p><p><...

  ListenShow Notes
• 

  Episode #281

  Mitigating Browser Hacking - Interview with John Carse (SquareX Field CISO)

  Apr 22, 20251h 47mS1

  <p>A special episode this week, featuring an interview with John Carse, Chief Information Security Officer (CISO) of SquareX. John speaks about his background in the security industry, grants insight into attacks on browsers, and talks about the work his team at SquareX is doing to detect and mitigate browser-based attacks.</p><p><br /></p>

  ListenShow Notes
• 

  Episode #280

  Pulling Gemini Secrets and Windows HVPT

  Apr 16, 20251h 33mS1

  <p>A long episode this week, featuring an attack that can leak secrets from Gemini's Python sandbox, banks abusing private iOS APIs, and Windows new Hypervisor-enforced Paging Translation (HVPT).</p><p><br></p><p>Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/280.html</p><p><br></p><p>[00:00:00] Introduction</p><p>[00:00:18] Doing the Due Diligence - Analyzing the Next.js Middleware Bypass [CVE-2025-29927]</p><p>[00:29:20] We hacked Google’s A.I Gemini and leaked its source code (at least some part)</p><p>[00:44:40] Improper Use of Private iOS APIs in some Vietnamese Banking Ap...

  ListenShow Notes
• 

  Episode #279

  Session-ception and User Namespaces Strike Again

  Apr 1, 202550 minS1

  <p>API hacking and bypassing Ubuntu's user namespace restrictions feature in this week's episode, as well as a bug in CimFS for Windows and revisiting the infamous NSO group WebP bug.</p><p><br></p><p>Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/279.html</p><p><br></p><p>[00:00:00] Introduction</p><p>[00:00:28] Next.js and the corrupt middleware: the authorizing artifact</p><p>[00:06:15] Pwning Millions of Smart Weighing Machines with API and Hardware Hacking</p><p>[00:20:37] oss-sec: Three bypasses of Ubuntu's unprivileged user namespace restrictions</p><p>[00:32:10] CimFS: Crashing in memory, Finding SYSTEM...

  ListenShow Notes

Recent guests on Day[0]. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.