Ben Grap @blightzero
Pentester, computing enthusiast Dune Joined June 2008-
Tweets249
-
Followers144
-
Following628
-
Likes426
💥 Introducing "Januscape" (CVE-2026-53359) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization. "16 years" latent. Successfully used as a 0-day exploit in "Google kvmCTF". To the best of public knowledge, the first KVM exploit research triggerable on both Intel and AMD. Details: januscape.io
GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup nebusec.ai/research/v8-cv…
Dear Network, I'm hiring a Cloud Security Researcher that wants to work at the forefront of investigating new cloud intrusions. You will bring a solid understanding of IAM. Using this knowledge you will dig through cloud activity logs (AWS CloudTrail, Azure Activity Logs) to find
There are no words.
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction. github.com/devttys0/delink
Linux kernel instrumentation from Qemu and gdb: A technique to analyze binaries or kernel modules that may try to monitor themselves. In this blog post Professor @Mad5quirrel explains the trick blog.quarkslab.com/linux-kernel-i…
By @iambrandonsalt: 'Google is Killing Independent Sites' retrododo.com/google-is-kill…
Latest additions to JA4+ include TCP fingerprinting! Technical write up: github.com/FoxIO-LLC/ja4/… If you see an Epson Printer logging into your Okta server, you're about to have a bad day. JA4T/S available now in Arkime, Wireshark, JA4TScan tool is coming next week as a zmap module. Blog post after that.
PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow mobile-hacker.com/2024/01/23/exp… #NetHunter
New @elastic blog post "Discovering anomalous patterns based on parent-child process relationships" covers a lot of material from my ProblemChild @CamlisOrg talk. elastic.co/blog/discoveri…
Nice. About the current #Citrix unauth #RCE: it is a simple stack overflow, the affected binary was compiled without PIE, has executable stack, and also there are no stack canaries (on some versions). Back (at least) 10+ yrs in time. :)
Bishop Fox Team X Research Alert ⚠ We've created an #exploit for the critical #vulnerability #CVE-2023-3519, which allows for #RCE. There are 61,000 affected appliances exposed on the internet, and roughly 53% of them are unpatched. Patch yours now. bfx.social/3Y40x6K
Spannend, was in @pvmagazine steht. pv-magazine.de/2023/04/14/pet… Die Bundestagsverwaltung wollte die Petition verhindern. Danke, @AkkuDoktor, dass du das nicht akzeptiert hast. Da sollte wohl Demokratie unterdrückt werden. unterschreibt. Jetzt erst recht petition.akkudoktor.net
CrowdStrike has discovered the first-ever Dero cryptojacking operation targeting Kubernetes infrastructure. Learn more: crwdstr.ke/6014346tA
🚨 The 2023 Global Threat Report is now live. Discover the latest activities of the world’s most dangerous adversaries and CrowdStrike’s recommendations for protecting your business against modern attacks. Access the report: crwdstr.ke/60123vKer
Learn how to modify and exploit a Linux Kernel vulnerability to escape container environments, and how CrowdStrike can help to prevent and hunt for similar threats. crwdstr.ke/60103X0Jg
CrowdStrike recently discovered a new exploit method using CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access. crwdstr.ke/60123Jq8I
U.S. Department of Health and Human Services (HHS) has issued a warning about ongoing #ransomware attacks targeting #healthcare entities in the country. Read: thehackernews.com/2022/12/royal-… #infosec #malware
Take a deep dive into wmiexec usage seen from multiple incident response investigations and learn more about the indicators that can help defenders detect wmiexec. ⬇️ crwdstr.ke/6018MJrju
oliver @oliver165487
3 Followers 160 Following
0x313233 @0x313233
0 Followers 106 Following
thedizking @rowe_phill10489
4 Followers 58 Following
stormythunder4K @stormythunder4K
117 Followers 158 Following The world sees colours while I see ones and zeroes
Nancy P @TokyurekYa46220
12 Followers 1K Following Just a silvery girl who feels broken and dreams glowing tomorrows 🌼
Abishek M @abishek19739
0 Followers 69 Following
Taylor D. Grah @GrahD33664
0 Followers 71 Following
Tewrou @TewroubMTIVTT
40 Followers 4K Following
Hesheth @Hesheth150880
87 Followers 7K Following A strong woman is one who is determined to do what others are determined not to do.
teemumeet @pinginintherain
12 Followers 418 Following
Dillon Franke @dillon_franke
2K Followers 443 Following Fuzzing, MacOS, vuln research @Google. Jesus Follower
Patrick Walker @HomeSen
586 Followers 503 Following Haxor and breaker of things. ⟦#GXPT, #OSCE3, #OSED, #OSEP, #OSWE, #GREM, #OSCE, #GASF⟧; former https://t.co/EIaEyX6c5N; Inactive member of team ALLES! https://t.co/mj2FcRNnwm
Jerry Strohschein @SchmigShanan
11 Followers 168 Following
Abhishek Barla @barlabhi
52 Followers 788 Following Security Researcher | Reverse engineer | Former CTF player @teambi0s
Nils Ole Timm @Firzen14
1K Followers 649 Following Cyber security professional, @[email protected], ALLES!
Adhithya Suresh Kumar @amun_rha
681 Followers 1K Following Detection Engineer @SentinelOne | Reverse Engineer | Former Lead & CTF Player @teambi0s
Nathan @Ampere_Sand
98 Followers 2K Following math, security, music. DFIR. he/him. @[email protected]. pfp by @jasjanken. for written thoughts visit bsky
Sebastian Walla @SebastianWalla
219 Followers 620 Following Did a Cybersecurity Bachelor and Master in Computer Science with a focus on Security. Deputy Manager - Cloud Threat Intelligence Opinion/Thoughts are my own.
Pedro Joaquín @_hkm
5K Followers 4K Following My passion: #cybersecurity #pentesting #ai / @_tropicon / https://t.co/zWuNCo05RM / https://t.co/rFkim1CBxo / @_websec / @GuadalajaraCON / M3x4
Butch Coolidge @vulnerablecodes
91 Followers 2K Following #chess #math #datascience #machinelearning #deeplearning #autonomous #robotics #python #golang #Pwn2Own #zeroday #exploit #redteam #bugbounty #bugbountytips
Alexandra Kulagina - ... @AlexandraKulag3
436 Followers 3K Following 📍🇫🇮 - Talks about 👉 IoT Cybersecurity / Firmware Security / Device Security 💻 - Sales & Marketing Specialist @binareio - 📧 [email protected]
localh0t @localh0t
227 Followers 473 Following
Alan Suderman @AlanSuderman
6K Followers 1K Following
devansh ⚡️ @0xAsm0d3us
18K Followers 4K Following Staff Security Researcher | RL/Evals (cybersec) | Polymath’ing
Servando Miguel @ServandoMiguel
20 Followers 888 Following
`Ivan @Ivanlef0u
11K Followers 4K Following
Ethan Burger @h_burguesa
197 Followers 1K Following security research, IoT / embedded defense, bug bounties. once wrote a paper on RE'ing hdds and got job offers from Russia & almost sued in the same week.
Andrew Orr @xorrbit
779 Followers 1K Following Vulnerability Research Engineer, hardware hacker, SkullSpace founder. He/Him
Maxim Sutulizz @sutulizz
5 Followers 433 Following Only a life lived for others is a life worth while.
Silas Cutler (p1nk) @silascutler
14K Followers 2K Following You may know me from your logs Principal Security Researcher @Censysio #Threats / #CTI / #Malware / #Hacking
YB S. @0c0c0c0c
3 Followers 103 Following
Stu Kennedy @NoobieDog
2K Followers 1K Following Maker, Hacker, Security Researcher, Motorsport Enthusiast! https://t.co/hySp2AIQa0
Blue. @leileis20
0 Followers 4K Following
Mizrahi Guilhem @MizrahiGuilhem
4 Followers 338 Following
stash @stash_pomichter
9K Followers 819 Following building 🦾 @dimensionalos • dropout @mit | https://t.co/MCCE5ujP0H
Andy Gill @ZephrFish
20K Followers 666 Following Security Researcher, RT, Director & Course Author at @ZephrSec |Staff on @CuratedIntel | Lab Creation @XintraOrg | https://t.co/gvGwReANzD - check out my RT course
tobi lutke @tobi
513K Followers 2K Following Shopify CEO by day, Dad in evening, hacker at night, Aspiring comprehensivist. + qmd !
Rado RC1 @RabbitPro
5K Followers 683 Following Exploitation, hardware, embedded, reverse engineering, automotive security. Pwn2Own Master of Pwn Flashback team (@FlashbackPwn).
Peter Steinberger �... @steipete
592K Followers 2K Following Polyagentmorous ClawFather. Came back from retirement to mess with AI and help a lobster take over the world. @OpenClaw🦞 + @OpenAI
Jan Rosenow @janrosenow
49K Followers 497 Following Professor of Energy & Climate Policy at Oxford University Energy programme lead @ecioxford @OrielCollege Senior Associate @cisl_cambridge
flux @0xfluxsec
4K Followers 1K Following Senior Security Research Engineer @elastic | Opinions are my own | Rust | Ex-Red Team | Security & Systems Dev | https://t.co/QIih2B7vya https://t.co/VC3xsm0Wvq
Lukasz Kaiser @lukaszkaiser
14K Followers 98 Following
ACM-VIT Student Chapt... @ACM_VIT
426 Followers 111 Following We are a team of driven and dedicated students working towards making technology more accessible. #BecauseTechnologyMatters
w4llz @w4llz_Team
117 Followers 0 Following W4llz CTF Team We turn caffeine into solves CTFtime: https://t.co/6WVfuoI2h5
Gabriel Lespérance @GabLesperance
1K Followers 2K Following working on https://t.co/lXxLBSP8vE, CTO @ https://t.co/Ya8A3Jy548, betaworks Alumni, CS @ McGill, prev CTO @ https://t.co/NcHWDGwhQH, 4x Deloitte Fast 50
Katie🌻Moussouris (... @k8em0
110K Followers 10K Following @LutaSecurity CEO @payequitynow MIT&Harvard visiting scholar, @MasonNatSec fellow, 1/2 Chamoru, hacker @k8em0.bsky.social Legacy blue check
RustFS official @RustFSofficial
785 Followers 20 Following High-performance, reliable, and cost-efficient storage built for the AI era.
Brian Pak @brian_pak
4K Followers 205 Following ai + security + alpha CEO @theori_io / @xint_official → building the world's best AI hacker 9x DEF CON CTF winner CMU CS '11 | founded PPP & MMM
ClaudeDevs @ClaudeDevs
699K Followers 2 Following Official updates for developers building with @ClaudeAI
CrowdStrike 24Hours o... @24HoursofSpa
41K Followers 246 Following #Spa24h 🇧🇪🎢 The world's biggest GT3 race
0xor0ne @0xor0ne
94K Followers 508 Following Cybersecurity | Reverse Engineering | Vulnerability Research | Embedded & Silicon Security | My Tweets, My Opinions :)
Brad Spengler @spendergrsec
7K Followers 4 Following President of @opensrcsec, developer of @grsecurity Personal account
Annika Leister @AnnLei1
8K Followers 3K Following Politische Reporterin im Hauptstadtbüro @tonline; AfD/BMI; war vorher u.a. Reporterin für Landespolitik @berlinerzeitung
/last30days @slashlast30days
4K Followers 1 Following Skill for searching /last30days on X, Reddit and the web. https://t.co/lX2JJDcXWq by @mvanhorn
Allie K. Miller @alliekmiller
109K Followers 2K Following #1 Most Followed Voice in AI Business (2M followers). Former Amazon, IBM. Time100 AI. Fortune 500 and startup AI advisor, public speaker. AI-First courses in 🔗
Google Gemma @googlegemma
101K Followers 0 Following The official home of Google's Gemma. Lightweight, state-of-the-art open models by Google DeepMind, built on Gemini tech. What will you build? 🚀💻
Anthropic @AnthropicAI
1.7M Followers 2 Following We're an AI safety and research company that builds reliable, interpretable, and steerable AI systems. Talk to our AI assistant @claudeai on https://t.co/FhDI3KQh0n.
PandaRE 🐼 🇺🇦 @PandaRE__
20K Followers 650 Following Threat Researcher | Founder @MalbearLabs | Malware Addict
Mario Ellerbrock @marioellerbrock
2K Followers 269 Following Familienvater | Tesla-Fahrer | E-Trucker
Alex Ziskind @digitalix
27K Followers 2K Following Software engineer making videos about dev gear, local AI, and weird tech experiments
RE//verse @REverseConf
4K Followers 30 Following A conference for all things in the reverse engineering universe... https://t.co/X54VHq2eD4
Ryan Dewhurst @ethicalhack3r
21K Followers 837 Following • Vulnerability & Threat Intelligence at https://t.co/pRPrjARoN2 • Founder of @_WPScan_ (acquired by Automattic) • Founder of DVWA • Ethical Hacking Graduate
Josh @JoshPurtell
4K Followers 8K Following Ars longa, vita brevia Your works are wonderful, I know that full well Working on optimization
Isaac Miller 🧩 @isaacbmiller1
2K Followers 1K Following lead maintainer of dspy | prev at normal computing, northwestern
Eric S. Raymond @esrtweet
56K Followers 261 Following Yes, I *am* that ESR. Well, it's the question people usually ask. Programmer, wandering philosopher, accidental anthropologist, troublemaker for liberty.
Omar Khattab @lateinteraction
38K Followers 4K Following asst professor @MIT CSAIL @nlp_mit. https://t.co/VgyLxl0VZz, https://t.co/ZZaSzaRIOF (@DSPyOSS), GEPA, RLMs, Pedagogical RL
alex zhang @a1zhang
38K Followers 1K Following phd student @mit_csail @nlp_mit, previously undergrad @princeton 🫵🏻 go participate in the @GPU_MODE kernel competitions!
Guinxu @guinxu
55K Followers 463 Following Desarrollo videojuegos y comparto el proceso en YouTube (+1M). Trabajando en @FlatworldGame (aventura estilo Zelda x Golden Sun). 🌐 https://t.co/atatCVNDy2
Geekboy @emgeekboy
26K Followers 487 Following Hacker, Co-Founder @pdiscoveryio, Ex-Security Analyst / BugBounty @Hacker0x01
siri@fu4k1 @sirifu4k1
7K Followers 341 Following Web Pentest & girl hh & share anything ｉthink useful about infosec. follow me! 🇸🇬
Prof. Stefan Rahmstor... @rahmstorf
173K Followers 278 Following Professor of Physics of the Oceans & Head of Earth System Analysis at the Potsdam Institute. Public speaker. Dad. I don’t read comments here, I do at Bluesky.
Bob Gourley - e/acc @bobgourley
8K Followers 2K Following CTO at @OODA where we research and report on the future of disruptive tech cybersecurity and geopolitics. Author, Dragon Falls: https://t.co/hWygvsMfcL
Andrew Thompson @ImposeCost
42K Followers 2K Following SVP of Adversary Operations @GreyNoiseIO. Former @USMC and @Mandiant. There's no finish line in security.
Matt Brooks @cmatthewbrooks
1K Followers 231 Following Founder, @unleashedlab; Ex RE; Review board @bsidessg; Still down with @citizenlab
Jürgen Trittin @JTrittin
108K Followers 686 Following Autor, Redner, Grüner - Bundesminister a.D., Ex-MdB & Werder-Fan. BlueSky: @trittin.de
nσise @noisegm
722 Followers 1K Following Founder, CEO @ Track OS @thelmafinance @geosition @trackos everything is computer, but computer isn't everything. ∅ ⇔ ∞ @ethnoculturecaYou might like
