Sabitlenmiş Tweet
Ishwar Kumar
3.1K posts
Ishwar Kumar retweetledi
@Defi_Nerd_sec Hey @DarkNavyOrg , do you have something similar for other languages such as - typescript, go, c/c++, JavaScript etc with similar benchmarks and results?
Thanks
English
Really cool work! We’ve also been exploring on blockchain node/client with DarkNavy’s client auditor skills: github.com/DarkNavySecuri…
Great to see more builders pushing Web3 security forward!
Plamen Tsanev@p_tsanev
For the longest time node clients were gatekept and untouched by free AI auditing tools, but that is NO MORE! 🚀💫 Not only is your AI subscription auditing for you, but you can even choose which one! 🤯 More deterministic, more precise. BETTER 🏆 "Plamen" V2 is live 😈🤖
English
XSS2RCE in Edge + Microsoft Store (2022). Forgotten Web APIs enabled RCE on any signed-in device; all now retired.
jinmo.github.io/blog/2026/05/1…
jinmo123@jinmo123
I’ll share the story behind CVE-2022-33649 in a few days before I forget…🤔 an interesting bug and methodology
English
Ishwar Kumar retweetledi
Ishwar Kumar retweetledi
Let's gooo...... 🥳🥳🥳
Positive Technologies Global@PTsecurity_EN
WSL2 gives attackers room to move where defenders often do not look. Trojan Penguin in the Windows covers new attack vectors, EDR blind spots, and a full chain from low privilege to ransomware deployment. At #PHTalks Kuala Lumpur 🇲🇾: phtalks.ptsecurity.com
English
Ishwar Kumar retweetledi
WSL2 gives attackers room to move where defenders often do not look. Trojan Penguin in the Windows covers new attack vectors, EDR blind spots, and a full chain from low privilege to ransomware deployment. At #PHTalks Kuala Lumpur 🇲🇾: phtalks.ptsecurity.com
English
More than a year ago. Some killer security researchers came out of this internship. Many got hired in big companies with good salaries - very welcome.
If another internship cohort sounds interesting, do comment below - let's see if there are people that would want this
pashov@pashov
Pashov Audit Group security researcher internship coming soon. Learn by doing, 100% practice. Real audits, real projects. Like/RT this post if you'd be interested in this. There will be lots of slots, I've thought of a scalable model to do this right, full announcement soon🫡
English
@0x3b33 Hey, how do you deal with it? How do you explain it's Exploitibiliy to the devs?
Thanks!
English
Patterns I keep seeing in web3 audits:
– Developers add whole new feature 3 days before the audit
– There are no scripts to 1 click pause everything
– Upgradeability plan is "we’ll figure it out"
- Admin permissions are "they are our guys, nothing bad will happen"
None of those are Solidity bugs. All of them can cost 8 figures.
English
Solved it in 1st try!! Thanks @8kSec for the challenge💪🥳
8kSec@8kSec
🚨Nobody’s solved these AI Labs yet! academy.8ksec.io/course/ai-expl… We’ve just launched a hands-on lab series focused on AI and LLM security exploitation. The series includes 10 practical challenges covering: - Prompt injection and LLM logic abuse - Unauthorized tool and agent access - Adversarial ML and model evasion - Data poisoning and neural backdoors - Privacy leakage from overfitted models - AI supply-chain compromise Each challenge puts you in a red team role. You exploit the system, submit a real solution, and earn a verified certificate after review. Start hacking: academy.8ksec.io/course/ai-expl…
English
Ishwar Kumar retweetledi
Ishwar Kumar retweetledi
Dexarmour was selected as the MVP winner as part of the Cyber Security Grand Challenge 2.0 conducted by @nasscomCoEIoT & @DSCI_Connect
Our focus is on addressing the growing threat of fake and clone apps that imitate trusted brands.
dexarmour.com
More updates soon
English
Ishwar Kumar retweetledi
We’re so hyped on the below release.
So hyped we’re doing some giveaways!
We are giving away 8 free seats to our Advanced Client Side course.
All you have to do is retweet and like the below post!
Winners chosen next week 🫶
JS0N Haddix@Jhaddix
Executive Offense - (Release) The Arcanum Prompt Injection Taxonomy v1.5 executiveoffense.beehiiv.com/p/executive-of…
English
Inspired by @0xSimao, I'm looking to onboard 3 auditors to join me on an upcoming private audit.
You'll:
- Work directly alongside me
- Gain real experience on an upcoming high-profile project
- Earn a good amount for the time spent (7 days)
I'm also bringing another trusted auditor I've worked with before, making a total of 5 auditors.
Requirements:
- Must have experience auditing DeFi projects (specifically different AMMs) or at least contest experience
- 100% isolation and availability for the 7-day audit starting from 17th Dec.
- Curiosity (yep, I can sense that)
Drop me your work proof in my DMs and comment under this post so that I can look into your DMs.
Will be announcing the team on 15th Dec, 2025.
English
