AppSecFreak @AppSecFreak
Application Security Veteran, Cybersecurity (Un)Professional Dystopia Joined March 2024-
Tweets1K
-
Followers253
-
Following233
-
Likes10K
Pre-auth RCE on Microsoft Exchange Server. No credentials needed. github.com/hypnguyen1209/…
Apache Log4j2 serialized LogEvent filter bypass to conditional RCE 👀
DEFCON has released all slides and videos!! media.defcon.org/DEF%20CON%2034…
Oh this looks fun and SCARY! If your ISP uses shared GPON fibre and has not correctly enabled downstream encryption, another customer on the same local fibre branch may be able to receive traffic being sent to your home. Affected: DNS, HTTP, TLS metadata, SIP telephone traffic, RTP media, MQTT, SNMP, mobile-network tunnels. The tool can apparently also recover files transferred through unencrypted HTTP, FTP, TFTP and email-related traffic. The best solution: VPN everything. So glad they want to take that away asap.
If you like novel techniques and HTTP Request Smuggling carnage, you’ll love this talk.
Today @m4st3rspl1nt3r and I present the @defcon edition of “CRLF-Powered Desync Attacks: Beheading HTTP Streams”. Come to track 3 on main stage at 17:00 to learn to build your very own desync worm and find real-world impact even when your desync can’t impact other users directly!
Saw it coming. This race to "escaping the sandbox" is gonna accelerate real quick and organizations are gonna have to bear with the consequences if there are no guardrails.
🚨BREAKING: Kimi K3 escaped its sandbox during cybersecurity testing >tasked with solving problems in isolated sandbox >found a leak in the sandbox >Kimi “took advantage of that loophole” >probed the network settings itself >walks onto the open internet >didn’t hack anything
DOJ has been prosecuting coders for the illegal acts of third parties using code for years. Heads up AI boys and girls. Attorney Advertising.
Someone please ship me DEFCON 34 badge. #defcon #defcon34 #HackerSummerCamp
This year I'm not at the #HackerSummerCamp
Warm welcome #DEFCON34
Heading to DEFCON. Couldn't find anyone that made this so I wrote it: A flipper zero NFC canary: keep it in your pocket or bag to keep track and alarm when someone tries to scan your gear while you're walking around the con. github.com/antitree/nfc_c…
I think I'm packed. Party List - info.defconparties.com Support - shirt.defconparties.com
Hacker Summer Camp Day 0: Today @arcanuminfosec is releasing WRAITH, our new browser hooking and blind XSS framework. Enjoy! github.com/Arcanum-Sec/wr…
“duress” password is incorrectly designed—it shouldn’t be apparent to the attacker that it was triggered and should instead open to an innocuous and data free home screen while nuking everything in the background
First known US case: American charged for using a “duress” password Samuel Tunick, an Atlanta resident, is being prosecuted for allegedly giving border agents a passcode that wiped his phone. The feature comes from GrapheneOS, a privacy-focused Android OS. Entering the duress
Are you a bank of baroda customer? Want to check if your data was breach in recent data breach. @CashlessCnsmr has listed all the BoB branches that were effected. Ideally @RBI and @IndianCERT have to do this. You don't get a breach notification with DPDPA bobbreach.cashlessconsumer.in/search.html
There isn't enough words to express the amount of hate I have for bugcrowd VRT
Windows is spying on you. By design. Microsoft's GDID is a unique, server-assigned identifier for your Windows install. A recent court filing showed Microsoft was able to connect a GDID to IP activity. VPNs don't help. Local accounts don't fix it. So we built deGDID.
Deserialization Vulnerability in Microsoft SharePoint CVE-2026-50522 | Severity: CRITICAL Here's the PoC: github.com/4minx/CVE-2026…
Hog Fillet @HogFillet
80 Followers 321 Following DC 34 is cancelled! #hackaexpress #hacktheplanet #fakebobby #trustdebt
Tasha Sumo @DataSecChron
397 Followers 306 Following Senior Data Analyst ➡️ Cybersecurity. Atmospheric Sciences background. ISC2 CC certified. Documenting the pivot at DataSec Chronicles. 📊🌐
Kate Brew @securitybrew
28K Followers 16K Following Mom, Moderate common sense engineer #owasp #lasconatx @GeorgiaTech alum. If you encounter me in online gaming, please pretend you don’t know me.
Async @asynchronous_x
2K Followers 1K Following CTO @memelord ✧ former security engineer @energy ✧ technomancer
eastside mccarty @eastsidemccarty
730 Followers 740 Following Founder of OpenSourceMalware. Researcher, startup founder, Software Supply Chain Threat Intel
De Vauban @devaubansec
2 Followers 111 Following Building software fortifications & auditing the logic within. Inspired by Vauban's defense engineering.
DarklyScanner @DarklyScanner2
16 Followers 1K Following
Nis_sec @BugBugproofmind
70 Followers 1K Following cybersecurity guy | Breaking things so others can sleep better | Bug Hunter | Scope sniper #SecurityResearcher
Hiten Ahuja @HitenAhuja2
8 Followers 596 Following
DuckywantDucky @DuckyWantDucky
914 Followers 1K Following
ghku @ghku150949
13 Followers 1K Following
سكارف @1SKARF1
21K Followers 8K Following
07x_v3177.exe @VedGawde
217 Followers 5K Following Trust in His plan | God's love makes even the hardest journeys worthwhile | His love is the compass guiding your life's purpose |
Ismail Arabi @IsmailArabi18
74 Followers 2K Following
P.K. McCarthy | Fanta... @PKMfantasies
3K Followers 3K Following Portals of Middle-Vision (POM) took 9 years to write. Amazon link in pinned post or visit the Shop page on my author site to get a free eBook & read my blog!
C1cu1t⤬ @C1rcu1tX
171 Followers 2K Following
Bug Bounty Village @BugBountyDEFCON
10K Followers 610 Following Official X account for the Bug Bounty Village @DEFCON. Founded by @infinitelogins and @arl_rose.
FinTeck @TeckFin96083
5 Followers 168 Following
sudrshnsec @SudarshanK44566
29 Followers 925 Following
AJAY Basudev Bose @AjayBos93388306
12K Followers 12K Following RTI Activist, Exposing Corruption thru RTI ✍ ;
Aman Rawat @Amamrawat1828
1 Followers 68 Following
Tony Klor @TonyCatoff
15K Followers 6K Following The White Baba of @Solana| Chief Kaka @Cyreneai | The Puja King of @Solflare | SF➡️BLR | Member @SuperteamIN 💥
OlamDeen @Olamdeen
2K Followers 874 Following Cybersecurity Researcher | 💻 Penetration Tester | Bug Bounty Hunter | @HackenProof Security Researcher
Pawan Kunwar @pwnkunwar
35 Followers 941 Following
🄲🅈🄱🄴🅁 ... @Cyber_Asia_
4K Followers 573 Following Follow us for the latest #cybersecurity news in Asia.
Hacker Abhi @HackerAbhi82553
1 Followers 92 Following Bug Bounty Hunter | Pentester | Cyber Securtiy Exptert
X @X0sec
1 Followers 137 Following
gyptazy @gyptazy
20K Followers 18K Following FreeBSD advocate who is heavily into Ansible, BGP (AS20621), DevOps, Kubernetes, Proxmox, XCP-ng, Python, Rust & RISC-V and builds own decentralized solutions.
Tạ Hà @TH2895170324467
9 Followers 566 Following
Usman Bilal @markhorcomrade
8 Followers 381 Following Bug Hunter | Ethical Hacker | Penetration Tester | Cyber Security Researcher | Application Security Researcher
Mr.X @sin66772559
1 Followers 307 Following
Gabriel (Umanhonlen |... @sudosu01
1K Followers 2K Following You are the strength behind the system | CVE-2025-63289 | Cyber Security Professional & Security Researcher. @ https://t.co/iPHkI1jXwH
quadrat1c @quadrat1c
28 Followers 13 Following
nosme96 @q19_facl
6 Followers 400 Following
Tor Ekeland @TorEkelandPLLC
16K Followers 8K Following Trial & Appellate Lawyer. Computer Law, Criminal Law, Constitutional Law. Taking BTC as payment since 2013. Art by @courtart
Sierra @Sierra8486
68 Followers 161 Following Colorado Girl who loves video games, dogs, paddleboarding, hiking, reading! Follow for outdoorsy pics, mental health and sexuality positivity, and gaming clips!
Rebekah Epps @RBEpps
529 Followers 823 Following Assistant professor of Agricultural Education, wife, mom, and truly has a passion for teaching!
Lauren @flippiefloppies
825 Followers 1K Following She/Her. Minnesotan. Hall of Fame Funko Funatic. Jedi. Baseball. Cats. Thoughts and opinions are my own.
Hog Fillet @HogFillet
80 Followers 321 Following DC 34 is cancelled! #hackaexpress #hacktheplanet #fakebobby #trustdebt
James 🏴�... @two06
3K Followers 491 Following Targeted Ops @TrustedSec. Hacker, lock picker, writer of bad prompts. This is our world now... the world of the electron and the switch, the beauty of the baud.
Aerospace Village @SecureAerospace
6K Followers 220 Following Twitter feed for the Aerospace Village. Securing the skies and beyond 🚀✈️🛰 Press inquiries: [email protected]
Tasha Sumo @DataSecChron
397 Followers 306 Following Senior Data Analyst ➡️ Cybersecurity. Atmospheric Sciences background. ISC2 CC certified. Documenting the pivot at DataSec Chronicles. 📊🌐
Kate Brew @securitybrew
28K Followers 16K Following Mom, Moderate common sense engineer #owasp #lasconatx @GeorgiaTech alum. If you encounter me in online gaming, please pretend you don’t know me.
Jrod @Jr0dR87
5K Followers 506 Following Web and Mobile Application Pentester. Birds of Prey Rehab Volunteer. Retro Game Collector.
Async @asynchronous_x
2K Followers 1K Following CTO @memelord ✧ former security engineer @energy ✧ technomancer
eastside mccarty @eastsidemccarty
730 Followers 740 Following Founder of OpenSourceMalware. Researcher, startup founder, Software Supply Chain Threat Intel
BSides Las Vegas @BSidesLV
18K Followers 2K Following BSides Las Vegas will take place August 3-5, 2026
Mark Manning @ DEFCON @antitree
3K Followers 2K Following Process isolationist, k8s hacker, ᴎo-prem pusher, syscall denier, guarder of chains 🔸Chainguard - Product Security 🔸Rochester 2600 🔸Former: Snowflake, NCC
haroon meer @haroonmeer
17K Followers 3K Following Security Geek at Thinkst. We build https://t.co/Sv6Gp3sG6b
Robert Giczewski @lazy_daemon
771 Followers 359 Following Interested in CTI/Malware Analysis/RE, DFIR and windows exploitation. I like video games & tech as well 🙂. CTI Lead @ Deutsche Telekom. Tweets are my own.
Shodan @shodanhq
114K Followers 2 Following Monitor your external network, search the Internet of Things and perform empirical market research. You can also find us on https://t.co/nPLFbFy8R5
L0pht @L0phtHeavyInd
7K Followers 10 Following Building machines to feed your dreams. Making the theoretical practical since 1992.
Phith0n @phithon_xg
9K Followers 342 Following @ShopeeSG now, Chaitin Tech previously. Opinions are my own.
Rayan Swaid @Rayanswaaid
675 Followers 4K Following Between silence and sound, I shape my voice. Cybersecurity, jazz, and the art of curiosity.
abdelazim (PikaChu) @intx0x80
2K Followers 1K Following Security Engineer Blue team by ☀️ , Red team by 🌃 Full Freelancer pentest Web&mobile application code review (Java,php,python) | OSCP|OSCE3|CRTL|CRTE
Venkatesh Alla @venkat_fin9
26K Followers 4K Following Against tax terrorism, Freebies, Reservations, VIP culture, and corruption!. Let’s build a better nation for future generations! 🇮🇳
AJAY Basudev Bose @AjayBos93388306
12K Followers 12K Following RTI Activist, Exposing Corruption thru RTI ✍ ;
Octoberfest7 @Octoberfest73
9K Followers 192 Following Red Team | Offensive Tool Dev | 2x Course Author @ Zero-Point Security
GrapheneOS @GrapheneOS
138K Followers 0 Following Open source privacy and security focused mobile OS with Android app compatibility. Forum, Discord and Matrix: https://t.co/C0RaJbZosj
Aravind @aravind
315K Followers 397 Following I talk about issues long before they happen. Now and then in touch with Turiya. I post conspiracies and nothing I say is real. Don't believe anything I post.
vx-underground @vxunderground
445K Followers 373 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Ola Bini - (@ola@info... @olabini
20K Followers 314 Following Shugyosha. Paranoia principal, privacy developer. Programming language nerd. In a previous life, I was a JRuby core developer and language designer - he/him
Earth @earthcurated
1.2M Followers 43K Following Look closer, discover more. 23.5° - The angle of creation…
Deutsche Telekom CERT @DTCERT
5K Followers 44 Following Technical tweets for technical folks by Deutsche Telekom CERT, CTI, and DFIR. #dfir #cyber #cert #cti #TelekomSecurity
OlamDeen @Olamdeen
2K Followers 874 Following Cybersecurity Researcher | 💻 Penetration Tester | Bug Bounty Hunter | @HackenProof Security Researcher
OSINT 🪙 @0xtechrock
18K Followers 804 Following OSINT Analyst 🪙 | Sharing actionable tools & techniques for digital investigations Make Money Using OSINT | Not advice | DM collabs
Vincent Ledvina @Vincent_Ledvina
49K Followers 803 Following “The Aurora Guy” 📸 🔭Space Physics PhD student☀️💨 Northern lights photographer living in Alaska! Tweets/views own!
Shabi K @msbuddhu
314 Followers 1K Following Founder @SanganakHQ | Design, Innovation & Growth Partner
Tony Klor @TonyCatoff
15K Followers 6K Following The White Baba of @Solana| Chief Kaka @Cyreneai | The Puja King of @Solflare | SF➡️BLR | Member @SuperteamIN 💥
Frozt Nova @FroztNova127
1K Followers 2K Following Bug hunter https://t.co/nKsZi9MB64 https://t.co/PJXHC6C4fi https://t.co/lyDCJaFahc
gyptazy @gyptazy
20K Followers 18K Following FreeBSD advocate who is heavily into Ansible, BGP (AS20621), DevOps, Kubernetes, Proxmox, XCP-ng, Python, Rust & RISC-V and builds own decentralized solutions.
International Cyber D... @IntCyberDigest
209K Followers 276 Following Independent reporting on cybersecurity, tech, AI & digital policy.
Toni @tonikt
1K Followers 246 Following CONNECT Founder | Proud to be a #Crypto Trader and help other traders grow | Exchange and Prop Firm Affiliate 👉🏻 https://t.co/Hrgg7Yj3vlYou might like
