Best Client-Side Bug

Adobe Reader Buffer Overflow and Sandbox Escape (CVE-2013-0641)

Best Privilege Escalation Bug

iOS incomplete codesign bypass and kernel vulnerabilities (CVE-2013-0977, CVE-2013-0978 and CVE-2013-0981)

Best Server-Side Bug

Ruby on Rails YAML (CVE-2013-0156)

Best Song

All the Things

Epic 0wnage

Joint nomination to Edward Snowden and the NSA

Most Epic Fail

Nmap: The Internet Considered Harmful – DARPA Inference Checking Kludge Scanning

Most Innovative Research

Identifying and Exploiting Windows Kernel Race Conditions via Memory Access Patterns