Shelly Raban @shellyraban
Security research team lead @TenableSecurity Joined November 2021-
Tweets125
-
Followers278
-
Following609
-
Likes410
Apex Park is escaping the wilderness for a chilling final destination: the concrete jungle. 🎃🦕 The incredible love and energy we received for Apex Park gave us all the motivation we needed to bring it back one more time before we officially retire the theme forever in 2026. Catch us at @BSidesNYC on October 17th at John Jay College for a spooky, haunted night at the park with a small, intimate crowd! Think you have what is taken to share your expertise? Our CFP is officially OPEN! Come share your knowledge in an intimate setting and be part of our final-ever lineup across: Talks (30 mins - Detailed research) Tool Demos (20-30 mins) Lightning Talks (10-20 mins) 🗓️ Event Date: October 17, 2026 ⏳ CFP Deadline: September 30, 2026 📍 Location: John Jay College, NYC 🔗 Submit here: forms.gle/3PL7ctexanA94L… Will you survive your visit? Send us your proposals and see you in NYC! ☁️🦇🎡 #CloudVillage #BSidesNYC #CFP #CyberSecurity #InfoSec #ApexPark
Super excited about this one!!
Autonomous #AI agents raise major security questions. At @fwdcloudsec North America, Tenable researchers @cnotin and @popov1ron will explore how AI agent identities function as a specialized, high-velocity breed of Non-Human Identity (NHI). 🔗: spr.ly/6013B8XRCv
7K weekly downloads. 730 versions of legitimate package, then Sliver C2 drops in the postinstall. Amazing work by Ron from my team catching this! Pin to 1.1.558, check for /tmp/.sshd on build servers - the masqueraded implant. Rotate creds if you installed it.
Tenable Research has detected yet another npm supply chain attack 🚨 This attack is part of an ongoing wave hitting the ecosystem right now Affected: "cqa-lib/cqa-ui", version 1.1.559, 1.1.560 Last known clean version: 1.1.558 #SupplyChainAttack #npm #malware #SliverC2
Most organizations are flying blind when it comes to the Non-Human Identities behind their agentic AI🕵️ We'll present at @fwdcloudsec NA 2026 "Who Are the Robots? Uncovering AI Agents Identities." Covering Microsoft’s “Entra Agent ID” and Google’s “GCP Vertex AI Agent identities”
Starting in 15 mins: @shellyraban is live at #CloudVillage breaking down how to track attacker behavior in managed cloud services without the risk! 🛡️ Catch the reality of cloud deception live in Room 204! 🔍 📍 Moscone South, Level 2 | @OneRSAC #RSAC
Can’t wait! 😍
How do you leak a cloud key without losing your budget? 🔑 Join @shellyraban at Cloud Village inside the Moscone Center to learn the "Hard Way" of running cloud honeypots—from authentic IAM roles to Bedrock & SageMaker forensics. See you at @OneRSAC! 🛡️ #CloudSecurity #RSAC
Our Google Cloud VRP researchers don't miss! 🔥 Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker. See how it was done: 👇
🫣LeakyLooker: 1 Cross-tenant vulnerability? How about 9? (1/10)🧵 I’m incredibly proud to share LeakyLooker. I discovered 9 novel cross-tenant vulnerabilities in Google Cloud’s Looker Studio that broke fundamental design assumptions. Here is how I broke tenant isolation: 👇
#AI is revolutionizing the cloud—but at what cost to security? Our team has been working on the NEW Cloud AI Risk Report that uncovers the top risks security teams should be aware of as AI-driven cloud adoption advances. Get the report here →... ow.ly/mguA1062UkH
It is with profound sadness that we announce the passing of our Chairman and Chief Executive Officer, Amit Yoran (@ayoran), after a battle with cancer. Today’s press release can be read here. ⬇️ tenable.com/press-releases…
Was such an amazing experience! Super interesting talks, 10/10 setup, and an awesome community🫶
Who watches the Watchmen? Let's steal credentials with Shelly Raban from policy-as-code engines at #WICCON2024. youtube.com/watch?v=nZX3lp… #CyberSecurity #WomenInTech
Researchers have uncovered new attack techniques targeting infrastructure-as-code (IaC) & policy-as-code (PaC) tools like HashiCorp's Terraform & Open Policy Agent (OPA), posing a severe risk to cloud platforms. Learn how this works: thehackernews.com/2024/11/cybers… #cybersecurity
Thanks for featuring my DSLs attack techniques research! Read all about it in our blog- tenable.com/blog/the-dark-…
📖 CloudSecList Issue 265 just got released, w/ content from @iann0036 @trailofbits @PushSecurity @tenablesecurity @tracebit_com @SentinelOne and more! cloudseclist.com/issues/issue-2…
You don’t want to miss this one! tenable.com/webinars/expos…
@Stef_van_Dop Thank you so much! Glad you liked it :)
Had so much fun! Thanks to everyone who survived to hear my talk this late in the afternoon 😂
Last speaker for today. @shellyraban: Who watches the Watchmen? Let's steal credentials from policy-as-code engines at #WICCON2024. #CyberSecurity #WomenInTech
Kimi @lunacoreseys
19 Followers 2K Following
Alexander Gylmar Alej... @agylmar
5K Followers 4K Following ITOps | Cybersecurity Making tech safer, simpler & less painful. Your friendly IT guy. 🛡️💻
Ron Popov @popov1ron
19 Followers 35 Following
Nitesh Surana @_niteshsurana
707 Followers 1K Following Cloud Threat Research w/ TrendAI | Opinions/retweets are personal reflections | Metalhead | If you can, be kind.
———————... @da5ch0
8K Followers 5K Following FOLLOWS YOU • “Wir müssen wissen, wir werden wissen” -Hilbert • (he/they/him/them) • infosec and privacy aficionado • mage
BetilløGalvan(ß2G) @BetilloGalvan_
939 Followers 6K Following Developer|CyberSecurityResearcher|DC664🔫|🇲🇽🤠🥷
S E N A @0xs3n4
6 Followers 113 Following Carangueijo Cibernético | Cyber Crab Trying to be a good Cloud Security Engineer
Zruikir @Zruikir2487
8 Followers 263 Following
Eli Woodward @ElijahWoodward9
261 Followers 202 Following I play bagpipes, and I threat hunt. That's what I do.
DebugPrivilege @DebugPrivilege
41K Followers 2K Following Not active anymore on X. Network Defender. Problem solver with a passion for troubleshooting complex issues.
dynamike @rdynamike
11 Followers 460 Following
Jeremy C. @Jerrawik
18 Followers 7K Following
Maxime Coquerel @zig_max
626 Followers 2K Following Cloud Security Geek ! | #CNCF Ambassador | Microsoft #MVP #Azure & #Security | #AI #CloudSecurity #Kubernetes #SecOps
AppSec Village™ @AppSec_Village
11K Followers 6K Following AppSec Village @DEFCON & @RSAConference A volunteer-run, non-profit focused on education, awareness, and community. Founded by @erezyalon and @tzionit411.
liam @liamxtwo
12 Followers 94 Following
John Thompson @JohnThompson699
1 Followers 39 Following
Josie Moran @JosieMoran62359
4 Followers 170 Following Recruiting webshell engineers to penetrate websi tes, with a monthly salary of up to $100,000 . If interested, please contact https://t.co/K7ApJzjrav
csgaee @csgaee
130 Followers 2K Following Malware researcher @EG_CERT | threat intelligence @nowhere_reallll
Moshe Bernstein @_mbernstein
4 Followers 21 Following
48D6215903DFF56 @48D6215903DFF56
0 Followers 2K Following
Zero Day Equation🇵... @ZeroDayEquation
51 Followers 2K Following PhD | Security Researcher | OSCP | OSEP | OSWE | OSWP | OSED | OSCE3 | OSEE | CRTO | CRTP | CISSP | #bugbounty #fuzzing #cybersecurity
MeRaj @Drx_Meraj2421
57 Followers 553 Following 💊DRx MERAJ 👨⚕️ BUSSINESS ADMINISTRATOR in digital Marketing BILLION $ IN PROGRESS
Abhishek Mishra @cybersecinfo12
1 Followers 24 Following
Wesmy @WesmyDCQj3M7
3 Followers 146 Following
QULI @QULIbot
334 Followers 4K Following Cybersecurity | Blogger | Entrepreneur | passionate about technology, venture capitalism, great memes. Always learning 📚 • he/him #infosec
prahathess @prahathess
331 Followers 4K Following AI, Cloud, Kubernetes, and Security 🎩, I like building things for security and developers, opinions my own
Sam @s4msec
222 Followers 2K Following Found a P-1 bug @Google | OSCP | Red Teamer | Sharing real offensive security findings
tonghuaroot @tonghuaroot
508 Followers 4K Following Staff Security Engineer. Cyber Security enthusiast, not Hacker. Focus on Application Security, Penetration testing. #OSCP #OSEP #MSCS #RedTeam #AppSec #WebSec
Women In Cybersecurit... @wicca_NL
2K Followers 227 Following WICCA 👩💻 Talks and drinks among ladies to discuss all things InfoSec 🔑🇳🇱 @vm00z @MiFare_lady @0xD4ni [email protected] 📩 #WICCA_NL
Ofek itach @ofekitach
112 Followers 462 Following
Yehuda Smirnov @yudasm_
783 Followers 597 Following Security Researcher @Microsoft, opinions are my own.
LuckY @L_uckyY
195 Followers 2K Following Generally interested in computers (DFIR/pentesting/networking) and likes to play wargames/CTF. Deleting tweets regularly. Likes are my way of bookmarking.
Pliny the Liberator �... @elder_plinius
241K Followers 1K Following ⊰•-•⦑ latent space steward ❦ prompt incanter 𓃹 hacker of matrices ⊞ breaker of markov chains ☣︎ ai danger researcher ⚔︎ bt6 ⚕︎ architect-healer ⦒•-•⊱
Brian Roemmele @BrianRoemmele
488K Followers 44K Following we can only see what we think is possible...
Ron Popov @popov1ron
19 Followers 35 Following
DefSecSentinel @DefSecSentinel
2K Followers 1K Following Staff Threat Detection Engineer @Chainalysis and 179CPT Cyber Operations Technician 170A @MOARNG
Giuseppe `N3mes1s` @N3mes1s
14K Followers 336 Following windows, macos, linux, android && lowlevel && ring-1 lover; EDR chef; malware hunter; purple team💜
Nextron Research ⚡�... @nextronresearch
4K Followers 13 Following Nextron threat research team. Signatures, rules, and analysis focused on eliminating blind spots.
Nitesh Surana @_niteshsurana
707 Followers 1K Following Cloud Threat Research w/ TrendAI | Opinions/retweets are personal reflections | Metalhead | If you can, be kind.
AI Village @ DEF CON @aivillage_dc
6K Followers 499 Following Hackers, ML researchers, and data scientists focused on the use and abuse of AI; join us! Discord: https://t.co/XljmSXRZii Twitch: https://t.co/7OcrkYd5xM
Jayesh Singh Chauhan @jayeshsch
1K Followers 408 Following CISO | Founder @cloudvillage_dc | Founder @cloudurancesec, Author @CS_Suite, Cloud Security Trainer
Defused @DefusedCyber
8K Followers 1 Following Managed Honeypots for Early-warning Threat Intelligence 🍯 Sign up today for a 14-day trial: https://t.co/TTnxgi9Hv5
Eli Woodward @ElijahWoodward9
261 Followers 202 Following I play bagpipes, and I threat hunt. That's what I do.
AISecHub @AISecHub
10K Followers 8K Following 🚀 AISecHub | AI & Cybersecurity | Securing AI systems, and sharing insights on emerging challenges | https://t.co/YeYtqq5tJC
AppSec Village™ @AppSec_Village
11K Followers 6K Following AppSec Village @DEFCON & @RSAConference A volunteer-run, non-profit focused on education, awareness, and community. Founded by @erezyalon and @tzionit411.
Silent Push @silentpush
2K Followers 382 Following Preemptive cyber defense with Indicators of Future Attack™ (IOFA™). Neutralize before compromise. 💪
Johannes Bader @viql
2K Followers 166 Following Reverse engineer / malware analyst. On the hunt for domain generation algorithms. Current side project: https://t.co/Cv3COq0ZmR
prahathess @prahathess
331 Followers 4K Following AI, Cloud, Kubernetes, and Security 🎩, I like building things for security and developers, opinions my own
Chester Le Bron @123Le_Bron
462 Followers 811 Following Cybersecurity Threat Detection & Response | Cloud TDR | Basketball Coach | Opinions are my own | #BlackTechTwitter 🇵🇷
Ofek itach @ofekitach
112 Followers 462 Following
V for Valentine @vm00z
2K Followers 518 Following Ethical Slacker 💅🏾 Founder of @wicca_NL 👩🏾💻 Hacker by day. Writer by night.
Varys @_ChezDaniela
3K Followers 6K Following Somewhere in between foodie, wine lover and security geek Python 💙|Personal tweets|GSNA/GPEN/GCFR | cancer survivor
Boaz Maoz @boazmaoz
1K Followers 1K Following Managing Director, Google Cloud Israel. Tweets are my own
Leo Tsaousis @LAripping
650 Followers 685 Following Senior Security Consultant @ Reversec (fka @withconsulting / MWR). Talks mostly about security. As Rino put it, sometimes maybe good sometimes maybe shit
bryan @bryan_e
240 Followers 1K Following vegan, hater of systemd, cognitive ecology designer. the distribution seeks expression
Yaron Avital @yaronavital
91 Followers 209 Following Principal Security Researcher @paloaltontwks, renowned octopus trainer.
Alex Mackenzie @alex__mackenzie
5K Followers 2K Following Partner at @GeneralCatalyst; code at https://t.co/mm13KZtoy7
ChrisPhilipov @chrisphilipov
378 Followers 316 Following Principal Security consultant. Love doing some Azure/Entra ID research ☁️ Opinions are my own
Omo @Borderless_i
995 Followers 2K Following Curious mind interested in conversations about Tech, Info/Cyber Security, Privacy, AWS & Azure architecture | Blogger | ❤ Travel, Jazz Funk & Fusion 🎺
Clément Notin @cnotin
6K Followers 993 Following 😈 Security researcher: Identity (#ActiveDirectory #EntraID) and Cloud 🎉 #CTF @tipi_hack 👨💼 Works @TenableSecurity, but opinions my own
Henk van der Klok @henkvanderklok
1K Followers 164 Following Henk van der Klok 🌍 Adventurer & Keynote Speaker | ⚡ Resilience & Mental Strength | 📍 Next: I’m Walking 1,200 km Barefoot Across Japan
Liat Hayun @liathayun
949 Followers 439 Following הגיגים על יַזָּמוּת, אִמָּהוּת, נָשִׁים וטק - ועל יַזָּמוֹת, אִמָּהוֹת שהן נשים בטק 👩🏽💻
Styra, Inc. @styrainc
3K Followers 78 Following The Creators and Maintainers of @OpenPolicyAgent. Declarative Authorization for Cloud-Native Security. #Kubernetes #Microservices
Alex Delamotte @spiderspiders_
970 Followers 1K Following Threat Researcher @ SentinelLabs. Opinions are mine, you can’t have them.
Liran Tal @liran_tal
14K Followers 2K Following 🧠 AI Security & securing agentic coding LLM w MCP serves 🦄 Node.js Secure Coding 🌟 @GitHub Star 🏅 @OpenJS Pathfinder award for Security 🥑 DevRel @snyksec
Chantal 🔮 @MiFare_lady
2K Followers 1K Following Co-founder @wicca_NL for Women in Infosec | #WICCON | DC3120 | 🎙@ngrynerds | Partner in Cybercrime of @vm00z | SSDGM 🖤 | (she/her)
Women In Cybersecurit... @wicca_NL
2K Followers 227 Following WICCA 👩💻 Talks and drinks among ladies to discuss all things InfoSec 🔑🇳🇱 @vm00z @MiFare_lady @0xD4ni [email protected] 📩 #WICCA_NL
rpopov @x_rpopov
4 Followers 54 Following
Lior @CloudLior
221 Followers 350 Following Tweets represent my thoughts only | RT / Like isn’t endorsement
Sebastian Walla @SebastianWalla
217 Followers 621 Following Did a Cybersecurity Bachelor and Master in Computer Science with a focus on Security. Deputy Manager - Cloud Threat Intelligence Opinion/Thoughts are my own.
sapir federovsky @sapirxfed
5K Followers 200 Following Doing things @wiz_io And then doing more things at home | Failed research blog: https://t.co/j2HT1Tpscs | Trying to be more chill🧘♀️
Joshua Jebaraj @joshva_jebaraj
1K Followers 1K Following DevOps | Cloud | Cloud security | Always open to collaborate on Interesting projects
Katie Knowles @_sigil
3K Followers 312 Following Senior Security Researcher @ Datadog. 🐕 Head in the (Azure) clouds. Sometimes blogging, always curious.
Yoav Levi @bluepompompurin
54 Followers 4 Following
FuzzingLabs @FuzzingLabs
9K Followers 4K Following Research-oriented Cybersecurity startup specializing in #fuzzing, Vulnerability Research & Offensive security on Mobile, Browser, AI/LLM, Network & Blockchain.Trends for United States
You might like
