Maple Grove Report

Maple Grove Report

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.


When I first discovered Excel’s dynamic array functions, my entire approach to spreadsheet design shifted. They replaced my clunky, multistep workarounds with smart, self-expanding formulas that adapt as data grows, turning complex workflows into single-cell systems.

If you’re still managing your datasets using manual copy-paste routines or dragging fragile formulas down thousands of rows, mastering these core functions will completely transform how you interact with Excel.

Core dynamic array functions are available in modern versions of Excel, including Microsoft 365, Excel 2021, Excel 2024, and Excel for the web.

How dynamic arrays change data flow in Excel

The end of CSE and the rise of the spill range

Traditionally, Excel formulas produced one result in one cell, forcing you to copy calculations down an entire column. Dynamic arrays fundamentally change this workflow by allowing a single formula to output a block of data that automatically expands or contracts based on the source size.

This behavior is called spilling. When you type a formula and press Enter, the data populates an area marked by a thin blue border known as the spill range. Importantly, this capability comes from an upgraded calculation engine rather than just a new set of functions. In modern Excel, formulas can return multiple results, and both new and existing functions can spill into neighboring cells when required. This replaces the need for old Ctrl+Shift+Enter (CSE) array formulas, which are notoriously difficult to build and troubleshoot.

Isolate specific rows without clicking any buttons

In the past, filtering an Excel dataset meant using the “Filter” button on the ribbon, ticking boxes, and copying results elsewhere. But the moment the source data changed, those results became outdated.

The FILTER function replaces that workflow entirely. Instead of hiding rows, it returns matching data into a separate spill range:

=FILTER(array, include, [if_empty])

Suppose you have an Excel table named EmployeeMaster. When you select a region in cell G2, you want the matching results to spill from cell I2.

An Excel worksheet containing a data grid of employee records alongside a region cell and an empty destination cell for an output range.

After entering the following formula in I2, the output updates automatically when the data changes or when a different region is selected:

=FILTER(EmployeeMaster, EmployeeMaster[Region]=G2, "Region not found")

SORTBY: Organize lists pragmatically

From fixed ordering to reference-driven sorting

Basic ribbon sorting (“A–Z”) works for reordering static lists, but it quickly breaks down in dynamic dashboards where new rows are continuously added to the dataset. Excel’s SORT function already improves on this by turning ordering into a formula-based operation. However, it relies on column positions, which makes it fragile when your dataset structure changes over time.

A more flexible approach is the SORTBY function, which removes that dependency entirely. Instead of sorting by column index, it sorts using explicit reference arrays—meaning your logic is tied to the data itself, not its physical layout. This shifts sorting from positional logic to data-driven logic, which is far more resilient in real-world dashboards:

=SORTBY(array, by_array, [sort_order])

For example, in the EmployeeMaster dataset, you can sort directly by MonthlySales without relying on column position or altering the underlying dataset:

=SORTBY(EmployeeMaster, EmployeeMaster[MonthlySales], -1)
An Excel workbook showing a SORTBY formula applied to arrange the entire master dataset in descending order based on the MonthlySales column values.

Because it references the field directly using a structured reference, the sorting layer survives structural changes to the dataset. At this point, you’re no longer managing calculations—you’re defining how data flows through the workbook.


An Excel spreadsheet with '=A2#' written on it and a blurred laptop in the background.


You need to know what the hash sign does in Excel formulas

Smash the hash in a flash!

UNIQUE: Clean up messy data by removing duplicates

Strip away repetitive entries to build clean dimensions

Building clean lists of departments, names, or IDs in Excel used to require destructive tools like “Remove Duplicates”, which don’t respond to new data.

Now, the UNIQUE function returns a live list of distinct values:

=UNIQUE(array, [by_col], [exactly_once])

For example, typing:

=UNIQUE(EmployeeMaster[Department])

into cell P1 scans your table and produces a clean list of unique departments that expands as new ones are added to the source dataset.

An Excel worksheet showing a UNIQUE formula used to extract a list of distinct values from the Department column into a clean spill range.

If you need a fully contained, single-cell pipeline, you can combine FILTER, UNIQUE, and SORTBY to extract data, remove duplicates, and apply a strict order in one formula.

OS

Windows, macOS, iPhone, iPad, Android

Free trial

1 month

Microsoft 365 includes access to Office apps like Word, Excel, and PowerPoint on up to five devices, 1 TB of OneDrive storage, and more.


XLOOKUP: Retrieve data arrays without breaking layouts

Pull multiple adjacent columns simultaneously from a single lookup value

The XLOOKUP function is often framed as merely a replacement for VLOOKUP, but its real strength in modern Excel lies in how naturally it fits the spill model. It can return entire records instead of single values, spilling results horizontally when given a multi-column return range, without depending on column positions.

Here’s the syntax:

=XLOOKUP(lookup_value, lookup_array, return_array, [if_not_found], [match_mode], [search_mode])

In our EmployeeMaster table, you can retrieve full employee details by passing a lookup target from cell G2, matching it against the ID column, and setting the return array to span multiple headers:

=XLOOKUP(G2, EmployeeMaster[EmployeeID], EmployeeMaster[[EmployeeName]:[MonthlySales]])

The result spills horizontally from the formula cell into adjacent columns, and because it’s not dependent on fixed column indexes, it remains stable even if the table structure changes.

An Excel worksheet showing an XLOOKUP formula configured to return a multi-column array of data for a specific employee ID.


Illustration of the Excel XLOOKUP function with large arrows pointing right and down across a green spreadsheet, showing multiple criteria cells highlighted around it.


How to Use XLOOKUP With Multiple Criteria in Excel

XLOOKUP is more versatile than you think.

VSTACK and HSTACK: Combine scattered data sources

Fast, formula-native layout stacking without heavy tooling

Consolidating separate Excel datasets has traditionally required manual copying or using Power Query. For lighter, formula-first workflows, VSTACK (vertical stack) and HSTACK (horizontal stack) let you combine arrays directly inside cell calculations without launching external data-prep tools. This makes them ideal for fast, formula-first data assembly.

The syntax for stacking vertically is:

=VSTACK(array1, [array2], ...)

And to stack horizontally, you use:

=HSTACK(array1, [array2], ...)

This workflow shines when you have separate tables representing simple, cyclical logs. For example, suppose you have three Excel tables containing quarterly employee metrics (Q1_Master, Q2_Master, and Q3_Master). You can stack them end-to-end by typing:

=VSTACK(Q1_Master, Q2_Master, Q3_Master)

This creates a single unified dataset right in your grid that appends the rows seamlessly and reflects changes in the source tables without manual consolidation.

Beyond the core dynamic array functions

Capability map of Excel’s spill-based tools

Once you understand the core dynamic array functions, Excel extends the same spill-based model into a wider set of specialized options:

Capability

Functions

Generate data

SEQUENCE, RANDARRAY

Lookup utilities

XMATCH

Reshape arrays

TAKE, DROP, CHOOSECOLS and CHOOSEROWS

Reformat layouts

WRAPROWS and WRAPCOLS, TOCOL and TOROW

Text parsing

TEXTSPLIT, TEXTBEFORE, and TEXTAFTER

Aggregation

GROUPBY, PIVOTBY

Custom logic

LET, LAMBDA

Iteration tools

MAP, REDUCE, SCAN, BYROW, BYCOL, MAKEARRAY

Together, these extend the same principle throughout Excel: data is no longer processed manually, but continuously reshaped through connected formula layers.


Mastering the future of spreadsheets

Dynamic arrays are among the most transformative changes Microsoft has made to Excel in years, replacing clunky legacy workflows with a model where data updates, reshapes, and recalculates as the workbook evolves. As you start making the most of this modern workflow, knowing how to fix Excel #SPILL! errors will help keep everything running smoothly.



Source link


Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall

Pierluigi Paganini
May 15, 2026

Pwn2Own Berlin 2026 day one saw 22 entries and 24 zero-days across major software, with researchers earning $523,000 in total rewards.

Day one of Pwn2Own Berlin 2026 featured 22 entries targeting widely used technologies, including browsers, operating systems, AI platforms, and NVIDIA infrastructure. By the end of the day, researchers demonstrated 24 unique zero-day vulnerabilities and earned a total of $523,000 in rewards, highlighting ongoing security risks across major enterprise and consumer software ecosystems.

Orange Tsai of the DEVCORE Research Team made the headlines; he chained four separate logic bugs to escape the Microsoft Edge sandbox, a technically demanding achievement that earned him $175,000 and 17.5 Master of Pwn points in a single attempt. It was the kind of result that reminds you why this competition exists: not to embarrass vendors, but to surface flaws in controlled conditions before someone with worse intentions finds them first.

“Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points.” reads the post by Zero Day Initiative.

Windows 11 was successfully exploited three times during the day: by Angelboy and TwinkleStar03 of the DEVCORE Internship Program, by Marcin Wiązowski, and by Kentaro Kawane of GMO Cybersecurity. Each demonstrated a distinct privilege-escalation zero-day on a fully patched system, earning $30,000 apiece. Three different researchers, three different bugs, one operating system. That pattern alone is worth noting.

Valentina Palmiotti (@chompie1337) of IBM X-Force Offensive Research had arguably the most productive individual day, picking up $70,000 across two separate wins: a $50,000 award for a zero-day in the NVIDIA Container Toolkit, and another $20,000 for rooting Red Hat Linux for Workstations.

“chompie of IBM X-Force Offensive Research (XOR) used a single bug to exploit NV Container Toolkit, earning $50,000 and 5 Master of Pwn points.” continues the post.

On the NVIDIA side, Satoki Tsuji of Ikotas Labs exploited an overly permissive allowed list vulnerability in NVIDIA Megatron Bridge for $20,000, while haehae collected another $20,000 for a separate Megatron Bridge zero-day, and rounded out the day with a further $20,000 for dropping a zero-day in the Chroma vector database.

AI platforms were a prominent target throughout the day, reflecting this year’s competition theme around enterprise and artificial intelligence technologies. k3vg3n chained three bugs, including a server-side request forgery and a code injection, to bring down LiteLLM, walking away with $40,000. Two separate teams, Compass Security and maitai of Doyensec, each collected $40,000 for independently exploiting OpenAI’s Codex coding agent. STARLabs SG earned another $40,000 for a zero-day in LM Studio.

“k3vg3n chained 3 bugs including SSRF and Code Injection to take down LiteLLM. $40,000 and 4 Master of Pwn points. Full win.” states the post.

Not every attempt succeeded. Le Duc Anh Vu of Viettel Cyber Security could not get their OpenAI Codex exploit working within the time limit, and Park Jae Min’s attempt against the Oracle Autonomous AI Database also fell short.

At the end of day one, DEVCORE Research Team sits atop the leaderboard with $205,000, a commanding lead built almost entirely on Orange Tsai’s Edge chain. Valentina Palmiotti follows in second place at $70,000.

Day two brings a new set of targets to the stage, including Microsoft SharePoint, Microsoft Exchange, Apple Safari, Mozilla Firefox, Cursor, Anthropic Claude Code, and additional attempts against Windows 11, Red Hat Enterprise Linux, and several AI platforms. The full prize pool across all categories exceeds $1,000,000. Per competition rules, all targets run the latest available software versions, and vendors receive 90 days to patch any zero-days demonstrated on stage before public disclosure.

Last year’s Berlin edition paid out $1,078,750 for 29 vulnerabilities. With $523,000 already awarded after a single day and a full schedule still ahead, 2026 is shaping up to exceed it.

Pierluigi Paganini

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

(SecurityAffairs – hacking, Pwn2Own Berlin 2026)







Source link

Recent Reviews