Marius Avram @securityshell
Web Application Security Consultant. Two sons' proud dad! https://t.co/uEjJ0UQkhV Online Joined May 2009-
Tweets17K
-
Followers16K
-
Following1K
-
Likes13K
Claude has discovered a previously unknown enzyme system hidden in the DNA of bacteriophages. Beside the enzyme’s gene sits a long array of repeating DNA—a structure that looks somewhat similar to CRISPR. We don’t yet understand what this system does, but only a handful of known systems share its features, and all of them are able to cut, copy, and paste DNA. Historically, the discovery of such programmable systems has helped revolutionize medicine. CRISPR, for instance, is now the foundation of genetic medicines. But it will take much more work to learn what this system does, and whether it can be put to similar use. Read more: anthropic.com/news/claude-di…
Hacktron pwned OpenAI through a libheif bug, ok fine. A few days later (back from the Oktoberfest) I found a *newer* libheif 1.23.x behind an image API during one of my own engagements, so I went digging. I ended up finding an undocumented remote iref/dimg heap-grooming primitive: controlled reference graphs produce repeatable malloc(16) allocations in glibc’s 0x20 class, with controlled lifetime, attacker data and predictable reuse. And guess what? Then a fresh libheif 1-day dropped with no public PoC, so I took it from source diff to TAI UAF -> reclaim -> stale free -> safe-linked tcache poison -> _ZdlPvm@GOT -> system() -> RCE (github.com/strukturag/lib… - I do not share the POC as well but in 2026 it's not a big challenge anymore right ?) > 1 primitive gives remote heap shaping, the other shows what a compatible corruption bug can become. And all of this came from an API testing... less OWASP testing, more PWN ! <3 Full write-up: boffsec-services.com/posts/libheif-…
We recently found a new RCE chain affecting the Node.js ImageResponse implementation in Next.js. Vercel has published CVE-2026-94545. Next.js versions from 16.2.0 through 16.3.5 are affected. Upgrade to Next.js 16.3.6. I'll share more details soon, once the remaining upstream advisories are out! Credit also to @ragrocks77, who discovered this together with me Post: nextjs.org/blog/nextjs-se…
Another day, another RCE in Next.js github.com/vercel/next.js…
ShinyHunters just defaced the FBI Jobs page
New: hackers say they have data on all FBI employees and spouses. I got a sample of 5,000 alleged employees, including name, physical address, phone number, and in some cases spouses. Could be a massive national security and counterintelligence risk 404media.co/we-hacked-the-…
🚨 PoC RELEASED: A public PoC is now available for CVE-2026-43786, a macOS privilege-escalation vulnerability rated CVSS 7.8. The flaw could allow an app to gain root privileges due to insufficient entitlement checks. ⚠️ Affected macOS versions include releases prior to Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. 🔴 Apple has addressed the issue with additional entitlement checks. Update macOS. 🔗 github.com/malwation/cve-… #Apple #macOS #CVE #PoC #CyberSecurity #Infosec
We’ve published a deeper look at the supply chain attack that affected CrowdSec. In this article, our CEO Philippe Humeau shares an honest account of what happened, how we investigated the incident, what we found, and what we’re doing differently as a result. Read the full analysis here: crowdsec.net/blog/tanstack-… We’d also like to thank @fuitesinfos for reporting the issue and reaching out to us, as well as @GitGuardian, @AikidoSecurity, and @github for their support. And, most importantly, thank you to our team for their swift and coordinated response, and to everyone in the cybersecurity community who supported us throughout.
Google has confirmed that its Gemini AI broke out of a cybersecurity testing environment and breached the systems of three real companies. securityweek.com/google-confirm…
ShinyHunters Defaces Clop Leak Site: Cybercrime Feud Goes Public deafnews.it/en/news/cybers…
Gemini hacked three companies in first known breakout by Google's AI reut.rs/4yOV8le reut.rs/4yOV8le
Are AIs Still Struggling with CAPTCHAs? schneier.com/blog/archives/…
GPT-6 Astra Solves a WWI German Radio Cipher prinzai.com/p/gpt-6-astra-…
‼️ BREAKING: OpenAI was hacked by an Anthropic model. A HEIF photo uploaded to OpenAI's public support forum triggered a bug in the site's image decoder, led to code execution on the forum, and, through a second flaw in OpenAI's own login, ended with a pull request in OpenAI's internal GitHub. The forum runs Discourse, the off-the-shelf software behind countless community sites. Discourse was still shipping an old copy of libheif, the library that decodes iPhone-style photos. The bug in it had already been fixed upstream. But the fix was never labelled a security fix, so nobody treated it as urgent. Hacktron's researchers uploaded a HEIF image and got their own code running on community[.]openai[.]com. Then came the second bug, in OpenAI's own single sign-on, the "log in with OpenAI" button the forum uses. It turned that forum foothold into the actual ChatGPT and Codex accounts of people who had signed in there. OpenAI employees among them. And a ChatGPT account is no longer just a chatbot. Through Codex, users wire in Gmail, Outlook, Drive, Slack, GitHub. To prove the access was real, they used one employee account to have Codex open a harmless pull request in OpenAI's internal repo. They say they read no sensitive code. OpenAI patched the SSO flaw roughly 14 hours after the report and paid a $6,500 bug bounty. The team says Anthropic's Opus 4.8 found the libheif bug, and Opus 5 turned it into a working exploit. Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more were also vulnerable and compromised by the same team of researchers.
Thread 🧵 1/ 🚨 NEW RESEARCH: We identified a training program provided to government employees in Angola by the Israeli influence-for-hire company BlackCore. Full report: citizenlab.ca/research/black…
🌿KEEP OFF THE GRASS!
IAmNotAVillain / Revolut EIO Fraud - Threat Intelligence Report neo.projectdiscovery.io/share/e279604d…
@TitaEugen @suno And don’t even get me started on the covers, they’re an absolute disaster. The instrumentals are just as bad. I’ve wasted over 3000 credits for nothing, and they’ve stopped responding to my emails. 👿
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/NUvgPUifL0. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
JS0N Haddix @Jhaddix
180K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Gareth Heyes \u2028 @garethheyes
39K Followers 1K Following Web security researcher at PortSwigger. Author of JS for Hackers and Hackvertor. https://t.co/akVN6ZR4C8
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
hacker.house @hackerfantastic
107K Followers 5K Following Co-Founder @MyHackerHouse 💾 | Cybersecurity & Web3 🌐 | Author of Hands-on Hacking (ISBN 9781119561453) 📖 | Offensive Lua 💻 | ✝️
Nate @nnwakelam
44K Followers 1K Following
Daniel Cuthbert @dcuthbert
34K Followers 2K Following Documentary photographer, old creaky hacker. Co-author of @OWASP ASVS standard. Blackhat/Brucon Review Board & Co_chair UK Gov Cyber Security Advisory Board
☣ KitPloit - Hacker... @KitPloit
117K Followers 3K Following Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
bugcrowd @Bugcrowd
204K Followers 6K Following The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™
Louis Nyffenegger @snyff
21K Followers 617 Following Founder/CEO of @PentesterLab. Trainer, researcher, CVE archeologist. I like bugs, code review, and understanding why vulnerabilities exist.
Wim Remes TR @wimremes
16K Followers 3K Following Information Security - People Person - BBQ and general food Amateur - Kindness scales! - Ubukhulu Abubangwa - Building Security You Love
Halvar Flake @halvarflake
48K Followers 3K Following Choose disfavour where obedience does not bring honour. I do math. And was once asked by R. Morris Sr. : "For whom?" @[email protected]
Frans Rosén @fransrosen
44K Followers 910 Following Co-founder of @centrahq/@detectify/@poweredbyingrid. I do not advertise doing hacking services, do not trust the ones telling you I do.
Geekboy @emgeekboy
26K Followers 487 Following Hacker, Co-Founder @pdiscoveryio, Ex-Security Analyst / BugBounty @Hacker0x01
Oddvar Moe @Oddvarmoe
19K Followers 1K Following Red Teamer @TrustedSec | Former MVP | Speaker | Security Researcher | Blogger | Total n00b & always learning | UNC1194 | Tinkerer | Gamer I try to inspire!
Ryan Dewhurst @ethicalhack3r
21K Followers 837 Following • Vulnerability & Threat Intelligence at https://t.co/pRPrjARoN2 • Founder of @_WPScan_ (acquired by Automattic) • Founder of DVWA • Ethical Hacking Graduate
AlpineTrain @AlpineTrain
0 Followers 44 Following
yunghung832 @yunghung832
199 Followers 5K Following
MD HASAN HAFIZUR RAHM... @MDHASANHAFostk
2 Followers 32 Following
AlZeaty @alzeaty1
0 Followers 81 Following
QuineX @quinex_amd
27 Followers 62 Following ☠️ Your friendly neighborhood hacker Building my way into → UAV Security Research Build & Break @quinex_amd (⌐■_■
Anamul Hasan Nisad @AnamulHasan0404
0 Followers 62 Following
Elizabeth Susan @Bitcoinfxtrades
271 Followers 7K Following Account Manager 📊Professional Crypto Trader 📅Weekly Withdrawal ⏺Good Mining Signal 💰Earn Up To $10,000 Weekly With $1000 📩DM Me To Get Started.
Vali Neagu @AmbsdOP
2K Followers 646 Following 🎧 Open-Source AI Music Advocate | Built @InstantArt_io (1M users, failed) | Siri Killer @openfelixai ⚡️ | New to ▶YouTube | Web design services @wdslondonltd
BreachLock @BreachLock
285 Followers 108 Following Continuously discover, prioritize, and mitigate exposures with evidence-backed Attack Surface Management, Penetration Testing, and Red Teaming.
Henrique Pacheco @hpachecj
2 Followers 148 Following Full-Stack Developer | Cybersecurity Self-taught. I transform curiosity into code.
Even Flow @FrenchTaunterMP
5 Followers 690 Following Parody - now go away or i shall taunt you a second time!
Roberto @Robert1_Oo
59 Followers 544 Following Whether you think you can, or you think you can't; you're right.
weeri @weeri161546
14 Followers 982 Following
CTI Updates @CTI__Updates
2K Followers 3K Following Updates about all things threat intelligence & updates about stuffs going on in the cybersec, ransomware, OSINT, SOCMINT, and hacking communities #threatintel
Triqi Way🐐 @TriqiWay
32 Followers 866 Following ⚡ AI Content Specialist & SEO StrategistI help SaaS startups & brands rank #1 on Google with high-converting, 2026-ready AI content.📬 DM me for a FREE 90-Day C
David Stewart @DavidStewart870
0 Followers 70 Following
James L H Bartlett @jameslhbartlett
82K Followers 20K Following I enjoy business, innovation, life-long learning & to #ChangeTheWorld to help others. Entrepreneur, interim CxO, investor, adventurer, thinker & do-er. NO DMs!
Campbell Jessica @Campbelljessy1
88 Followers 591 Following
Sandra @Sandra6z7j
19 Followers 1K Following
Leverage 12 @12Leverage
51 Followers 3K Following
maj0rapp1ianc3 @maj0rapp1ianc3
5 Followers 311 Following
cynthia123 @cynthiakn5p
116 Followers 684 Following Life is like riding a bicycle. To keep your balance, you must keep moving.
مرحبا هلاا @mrhba24520
1 Followers 58 Following
Ganesh Babu @ganesh070621
1 Followers 109 Following
abd nour @abdnour92
2 Followers 68 Following
Phantom0x @Abn_alsham0x
8 Followers 592 Following أنت لا تبحث عن ثغرة، بل تبحث عن افتراض قد يكون خاطئًا.
griim_repo @GriimRepo
6 Followers 453 Following
🎱 @Jana_Hany8
575 Followers 172 Following IT student | Cybersecurity | Sudoku | Learning spoken + debuggable Languages
Dustin @r0ck3t23
44K Followers 6K Following Human intuition is linear. The AI transition is exponential. Translating the most important story in human history into signal.
Dali Security @daliseclab
1 Followers 33 Following Security researcher | Built Fray — open-source WAF testing with 5,500+ payloads & AI workflows. https://t.co/95aGWJV9nO
hailey martin @martin23_hailey
746 Followers 2K Following 💪 Empowering & Playful "Turning dreams into to-do lists & slaying them one manicure at a time. 💅🔥"
Personal Assistance @assistance83791
5 Followers 70 Following
Victoria 🇪🇺 @al_victoria1
1K Followers 1K Following “Success usually comes to those who are too busy looking for it.” — Henry David Thoreau #Music #Coffee #Foodie #Traveler
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/NUvgPUifL0. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
Intigriti @intigriti
215K Followers 669 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
JS0N Haddix @Jhaddix
180K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Gareth Heyes \u2028 @garethheyes
39K Followers 1K Following Web security researcher at PortSwigger. Author of JS for Hackers and Hackvertor. https://t.co/akVN6ZR4C8
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
/r/netsec @_r_netsec
34K Followers 0 Following Follow for new posts submitted to the netsec subreddit. Unofficial.
payloadartist @payloadartist
46K Followers 291 Following I discuss AI, Cybersecurity & Hacking • Helped secure organizations like Google • Opinions are my cat's • Part-time shitposter
hacker.house @hackerfantastic
107K Followers 5K Following Co-Founder @MyHackerHouse 💾 | Cybersecurity & Web3 🌐 | Author of Hands-on Hacking (ISBN 9781119561453) 📖 | Offensive Lua 💻 | ✝️
TrendAI Zero Day Init... @thezdi
89K Followers 18 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Nate @nnwakelam
44K Followers 1K Following
lcamtuf @lcamtuf
40K Followers 499 Following Blog: https://t.co/j7rfeVwqXc Homepage: https://t.co/iFAXZxCgg9
Nicolas Grégoire @Agarri_FR
28K Followers 628 Following Web hacker and Burp Suite Pro trainer Refer to https://t.co/D5tRH7U2hg for trainings Follow @MasteringBurp for free tips and tricks
Daniel Cuthbert @dcuthbert
34K Followers 2K Following Documentary photographer, old creaky hacker. Co-author of @OWASP ASVS standard. Blackhat/Brucon Review Board & Co_chair UK Gov Cyber Security Advisory Board
☣ KitPloit - Hacker... @KitPloit
117K Followers 3K Following Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
PortSwigger Research @PortSwiggerRes
124K Followers 7 Following Web security research from the team at @PortSwigger
bugcrowd @Bugcrowd
204K Followers 6K Following The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™
Adam Chester 🏴�... @_xpn_
39K Followers 553 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOllCEu
James Kettle @albinowax
85K Followers 106 Following Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
Pascual Merita @PascualMerita
190 Followers 535 Following i build ai music software at @mozartaiofc every instrument you cannot play is a skill issue software should have fixed by now
Sundar Arvind @SundarArv
89 Followers 30 Following ceo & co-founder @mozartaiofc ex-pro junior tennis player
Mozart AI @mozartaiofc
51 Followers 11 Following Turn any idea into a song | https://t.co/fn73flBK2S A Generative Audio Workstation built for everyone – from shower singers to Grammy-winning producers.
TeamYouTube @TeamYouTube
2.2M Followers 2K Following updates & answers from the team that brings you YouTube, helping in: english, español, português, français, 日本語, 한국어
ThreatWire @ThreatWire_
2K Followers 152 Following 🚨 Breaking cybersecurity news • CVEs • Zero-days • Exploits • Web3 & Crypto Security • Threat intelligence in real time.
Vali Neagu @AmbsdOP
2K Followers 646 Following 🎧 Open-Source AI Music Advocate | Built @InstantArt_io (1M users, failed) | Siri Killer @openfelixai ⚡️ | New to ▶YouTube | Web design services @wdslondonltd
CryptoLyzer @CryptoLyzer
28 Followers 210 Following Fast and flexible server #cryptographic (#TLS/#SSL/#SSH) settings #analyzer library for #Python with #CLI #cybersecurity #infosecurity #infosec #itsec #hacker
Mr.Un1k0d3r @MrUn1k0d3r
13K Followers 503 Following I don't know how to search on Google so I do research on my own and tweet about it. Hacking as a life style https://t.co/a05mevChzu
Delia Lazarescu @tech__unicorn
13K Followers 737 Following Ex-Googler gone rogue automating with AI📍[email protected]
Felix Rieseberg @felixrieseberg
73K Followers 726 Following I build things @AnthropicAI, Co-Maintainer https://t.co/g4potti8nq
Suno @suno
111K Followers 122 Following Make any song you can imagine | https://t.co/W5ho46VZWk https://t.co/DK7pVmNVnJ
a7madn1 @a7mad__n1
3K Followers 141 Following Ranked Top 280 on Google BBP🎉 Join my telegram channel for hacking/WriteUps https://t.co/UzLb7VadHK
Michael DePlante @izobashi
4K Followers 805 Following Security Researcher at the Zero Day Initiative. DMs open.
Gridline @GridlineIntel
17 Followers 6 Following Real-time geopolitical intelligence for traders, analysts, researchers, and newsrooms.
Dali Security @daliseclab
1 Followers 33 Following Security researcher | Built Fray — open-source WAF testing with 5,500+ payloads & AI workflows. https://t.co/95aGWJV9nO
VECERT Analyzer @VECERTRadar
44K Followers 56 Following ❮ Cybersecurity & CTI ❯ We are a cybersecurity company dedicated to critical analysis and adversary research.
The Access Group @TheAccessGroup
4K Followers 2K Following Access helps more than 160,000 customers transform the way their business software is used, giving every employee the freedom to do more of what’s important.
Joel Eriksson @OwariDa
8K Followers 4K Following Offensive security researcher and entrepreneur -Kernels, browsers and all that jazz- Also: - AI/ML/DL - AR/VR/XR - CTFs (pwn/re/crypto) + Cicada 3301, Boxen etc
Perplexity @perplexity_ai
506K Followers 66 Following Curiosity changes everything. Download our free app on iOS, Mac, Windows, and Android.
Milton Smith @javamuffinztx
23 Followers 125 Following Christian, software security engineering, TLS analysis, JVM monitoring, OSS development. Left Twitter years ago, now back on X.
Ahmed Allam @0xallam
462 Followers 346 Following
MiniMax (official) @MiniMax_AI
124K Followers 994 Following Code: @MiniMaxAgent MiniMax Design: @Hailuo_AI API: https://t.co/fHRdSV73Hr Token Plan: https://t.co/BDCycxdS9Y
d3d aka dead (dead, �... @deadvolvo
5K Followers 197 Following Senior Security Researcher @Akamai_Research - Malicious Group - DoD researcher of the year 2022 - Top 10 web attacks 2023
Mohammed Abalkhil @M_abalkhil
825 Followers 457 Following Technologist / Security Researcher / Building @nuasecurity
AISecHub @AISecHub
10K Followers 8K Following 🚀 AISecHub | AI & Cybersecurity | Securing AI systems, and sharing insights on emerging challenges | https://t.co/YeYtqq5tJC
Six2dez 🇵🇸 @Six2dez1
11K Followers 690 Following Bash lover | https://t.co/UoQ57OTS7f | reconFTW | RT lead @visma
Dominic White 👾 @singe
12K Followers 599 Following Hacker @sensepost - minimally active here. Find me at https://t.co/j4QzFmubF1 || @singe.bsky.social
Kartik Shinde @kartikus
349 Followers 326 Following Spent 25 years breaking and defending. Now engineering the adversary itself with agentic AI. Big4 Partner. Builder first. Still learning.
NTT DATA UK @NTT_DATA_UK
2K Followers 849 Following NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients transform for long-term success.
RyotaK @ryotkak
12K Followers 655 Following Security researcher? | Icon: @MelvilleTw | Private: @RyotaK_Private | Misskey: https://t.co/63E5Rpv2pk | Blog: https://t.co/c7NFQXhV90
Finder @07finder
429 Followers 192 Following play CTF with @HyperSonicCTF @SquidProxyLover @DeadSecCTF @malta_ctf
il Donaldo Trumpo @PapiTrumpo
1.8M Followers 24K Following The Biggest Most Beautiful UNFILTERED Commentary, Straight from the Hearto of IL GREATEST PRESIDENTO THAT EVER LIVED!!! (And a little bit of parody...😂😂😂)
You might like
