Marco Balduzzi

Happy to serve on the PC of ACSAC 2026 (for 5th consecutive year!). Thanks @nicknikiforakis and @mlsec for the invitation. This event has grown over the year in size and quality, and is now clearly a landmark of excellence in our security research community.

Forecasting Future Outbreaks: A Behavioral and Predictive Approach to Proactive Cyber Risk Management trendmicro.com/vinfo/us/secur…

Vulhunt is now open-source, this is a game changer: github.com/vulhunt-re/vul… @binarly_io @vulhuntdev

LiveOverflow P2O series online. I really enjoyed the interview insights regarding the vulnerability research process. With the current rise of AI, there’s often a heavy (and sometimes unjustified) focus on automation. Great work, Manfred! youtube.com/watch?v=NT1VCm…

RIP @41414141 🕯️ youtube.com/watch?v=IZYQIL…

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more: anthropic.com/news/claude-co…

Our team is growing and looking for a strong researcher based out of the US (but open worldwide for exceptional candidates) to drive the exploration of the next threat ecosystem dictated by the rise of emerging technologies! trendmicro.wd3.myworkdayjobs.com/External/job/A…

One more hit for GenAI. Opus 4.6 wrote semi-autonomously a C compiler from scratch that succeeded in buildind the Linux kernel on x86, ARM, and RISC-V! anthropic.com/engineering/bu…

Welcome, 2026! Wishing you all a happy, healthy, and productive year ahead 🚀

How anticipate the risk of future outbreaks by learning from telemetry data behaviors. Our commitment at @TrendMicroRSRCH to stay ahead of cyber attacks with solutions like @TrendMicro's CREM // Presented at eCrime by J.Balaquit, R.Reyes, R.Flores, B.Zigh trendmicro.com/vinfo/us/secur…

📢 #DIMVA26 deadline extended to December 10th! Use the extra time and make it count. dimva26r1.hotcrp.com

Great initiative by @gadievron @dcuthbert @halvarflake @mbrg0 on combining several well-established security tools with agentic automation for vulnerability analysis. Give it a try!

Kernel exploitation enthusiasts: I highly recommend checking out the work of @chompie1337's team on vulnerability research on the CUDA stack, presented at Hexacon. Great job! youtube.com/watch?v=Lvz2_Z…

Mark the date in your calendar, now! :)

Applications are now open for the Internet Society NDSS Fellowship Program! ndss-symposium.org/ndss-2025/empo…

Online! We released the recordings of both research and technical tracks of @nohatcon 2025 youtube.com/playlist?list=…

I'm thrilled to have led to success a committed team of 50 volunteers to what became a leading international, non-profit, vendor-agnostic security conference in Italy. My sincere thanks go to all the friends, supporters, and participants who made last weekend so special!

Great to be back at @nohatcon 2025 - after the opening by @embyte , first track is "No pAIn, No gAIn: How AI Will Hurt Bug Bounty Hunters and How to Fix It", from security researcher and entrepreneur @k8em0 Come say hi 👋🏼