Aditi Bhatnagar

Building Kira - autnomous product security @ Offgrid Security
Alumna - Atlassian, Microsoft

[Aditi Bhatnagar @4ditiBhatnagar]

One should stay rooted, unless it's Android, ofcourse.
#badjokealert

[Aditi Bhatnagar @4ditiBhatnagar]

AI Stack has changed the security posture drastically, this is the narrative on what we are seeing on the ground. Thanks @hackernoon for covering it.

[HackerNoon | Learn Any Technology @hackernoon]

AI stack has introduced new set of attacks.
By @4ditiBhatnagar
#agenticaistack #cybersecurity...Show more

[Aditi Bhatnagar @4ditiBhatnagar]

@hackernoon AI Stack has changed the security posture drastically, this is the narrative on what we are seeing on the ground. Thanks @hackernoon for covering it.

[HackerNoon | Learn Any Technology @hackernoon]

AI stack has introduced new set of attacks.
By @4ditiBhatnagar
#agenticaistack #cybersecurity...Show more

[Aditi Bhatnagar @4ditiBhatnagar]

Fresh flowers on desk are underrated.

[Aditi Bhatnagar @4ditiBhatnagar]

https://t.co/w8EqWD14nk

[Aditi Bhatnagar @4ditiBhatnagar]

Kira's Hoppscotch finding just made it to @TheHackersNews ThreatsDay Bulletin.

CVSS 10.0. Unauthenticated full server compromise. Found autonomously.

Sitting alongside curl zero-days, Scattered Spider convictions, and nation-state campaigns.

Thank you @TheHackersNews for the coverage. Full bulletin linked.

#kira #offgridsecurity #thehackernews

[Aditi Bhatnagar @4ditiBhatnagar]

Thanks for covering our work @the_yellow_fall

[Daily CyberSecurity @Daily_CyberSec]

A CVSS 10 Hoppscotch mass assignment flaw leads to full server compromise. Unauthenticated attackers can exploit CVE-2026-50160 to overwrite JWT secrets.

#Hoppscotch #CVE202650160 #MassAssignment #CyberSecurity #AppSec
https://t.co/q8s8LPqrCK

[/r/netsec @_r_netsec]

CVE-2026-50160: Four Independent Weaknesses Combine Into a CVSS 10.0 Full Compromise in Hoppscotch https://t.co/2ieDNQokVW

[Aditi Bhatnagar @4ditiBhatnagar]

/clear => review it with fresh pair of eyes

[Aditi Bhatnagar @4ditiBhatnagar]

the local accent way of saying "only this repo nooo" doesn't work quite well with LLMs. It will be like "analyzing every other repo"

[Aditi Bhatnagar @4ditiBhatnagar]

using AI to draft communication sometimes feel like, asking the kid to respond to phone call that you're not home and they end up saying "she is saying she is not at home"

[Aditi Bhatnagar @4ditiBhatnagar]

isn't it funny that dos attack to your agent is causing equivalent damage as your key employee taking sick ooo.

[Aditi Bhatnagar @4ditiBhatnagar]

It starts with disbelief, then it's called a fluke and then it's called a standard.

[Aditi Bhatnagar @4ditiBhatnagar]

the warm feeling when you see multiple users logged in and interacting with the product you made alive

[Aditi Bhatnagar @4ditiBhatnagar]

@vercel_dev Kira https://t.co/YXLLXH22Bq just found multiple high risk issues in this repo - where can we report under responsible disclosure? The security advisory link is 404.

[Aditi Bhatnagar @4ditiBhatnagar]

@rez0__ I feel output is more valuable than where it came from.

[Aditi Bhatnagar @4ditiBhatnagar]

giving it the directory path where the issue is, instead of just letting it grep glob desperately - is kind.

[Aditi Bhatnagar @4ditiBhatnagar]

LLMs act like the insecure kid who crumbles when you ask, “is it really true though?”

[Aditi Bhatnagar @4ditiBhatnagar]

words. so many words are being produced and processed.

[Aditi Bhatnagar @4ditiBhatnagar]

my fav activity while interacting with LLMs is typing gibberish and let tokens be probabilistically matched for LLM to understand what I meant. typos let loose.