The presentation explores how the Brazilian CVE-Hunters Project transformed beginners with zero published research into recognized vulnerability researchers contributing to global cybersecurity. By breaking down the myth that CVEs require genius-level exploits or zero-days, the talk reveals a structured, repeatable methodology that turns curiosity into impact.
Key topics include how vulnerability research can be systematized, how responsible disclosure works behind the scenes, and how publishing a first CVE can change technical credibility, career trajectory, and confidence.
The speaker emphasizes this goes "beyond a technical presentation" to provide "a blueprint for moving from learning hacking to becoming a researcher" and contributing meaningfully to the security ecosystem, framing the first CVE as about "responsibility, growth, and raising the bar for global security."
Presented at La Villa Hacker — DEF CON 2026