Best Client-Side Bug

The 12 Logic Bug Gifts of Christmas

Best Cryptographic Attack

Return Of Bleichenbacher’s Oracle Threat

Best Privilege Escalation Bug

Meltdown and Spectre

Best Server-Side Bug

Intel AMT Remote Vulnerability

Lamest Vendor Response


Lifetime Achievement Award

Michał Zalewski

Most Innovative Research


Most Over-Hyped Bug

Holey Beep