Alex Wheeler and Ryan Smith Win Pwnie Award for Best Client-Side Bug

DENVER - July 29, 2009 - Accuvant, the nation's premier information security and risk and compliance management consulting firm, today announced that Alex Wheeler, director of research and development for Accuvant Labs, and Ryan Smith, principle research scientist for Accuvant Labs, have received the industry-renowned Pwnie Award for Best Client-Side Bug.

The award, which recognizes the individuals who discover the most technically sophisticated and interesting client-side bug, was presented to Wheeler and Smith during the annual BlackHat USA conference held at Caesar's Palace in Las Vegas, Nevada. The bug discovered by Wheeler and Smith is a static vulnerability in ActiveX's ATL code.

This is Wheeler and Smith's second year in a row winning a Pwnie Award; in 2008 the duo were recognized for "Best Server-Side Bug" for discovery of a default, remote compromise vulnerability in Microsoft's IP stack, which affected Microsoft systems worldwide over IPv4 and IPv6.

"We continue to be impressed with Alex and Ryan's research and development abilities," said Bill Strub, vice president of consulting for Accuvant. "Winning BlackHat's Pwnie Awards two years in a row truly underscores the talent these individuals possess. We're thrilled to have them on our team and expect to see more great things from them in the future. Combined with the skills of our world-class assessment team, Accuvant Labs is well-equipped to help our customers proactively protect their valuable enterprise assets."

The Pwnie Awards ceremony both celebrates and makes fun of the achievements and failures of security researchers and the wider security community. Award categories include Best Server-Side Bug, Best Client-Side Bug, Best Privilege Escalation Bug, Mass 0wnage, Most Innovative research, Lamest Vendor Response, Most Overhyped Bug, Best Song, Most Epic FAIL and the Lifetime Achievement Award.

About Accuvant

Accuvant is the nation's premier national information security and risk and compliance management consulting firm. Accuvant security advisors use industry expertise and proven methodologies to help large enterprises assess their environments, improve their compliance postures, and secure their infrastructures. Headquartered in Denver, Accuvant has 24 offices across the United States. For more information on Accuvant, please visit