Mason

[Rishi @rxerium]

🚨 CVE-2026-53435, a high severity (CVSS 8.8) deserialization vulnerability in Jenkins is now seeing active exploitation as per @DefusedCyber.

Scan your infrastructure: https://t.co/Bow5Vo1QGD

Patches are available per the vendor advisory: https://t.co/JgVytDoXfJ

[Mason @DefensivePanda]

@rezoundous Nah, people
Are still putting api keys into LLMs so all the accountants at one place I work use this https://t.co/M2wtQTgwIJ

[Mason @DefensivePanda]

@boardyai It does ;)

[Mason @DefensivePanda]

@pcshipp Follow to see about getting 1,000 active users 😂 https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@vikrambuilds Easy way to tell is if their api secrets are left exposed by the LLM https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@yashhq_22 Validate this https://t.co/M2wtQTfYTb after building it?

[Mason @DefensivePanda]

@Saanvi_dhillon https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@tealou What about protecting from LLMs? https://t.co/M2wtQTgwIJ is that worth discussing?

[Mason @DefensivePanda]

@ayesha_fatiima Yes!! But I’m also sure to make sure to use Redacta to ensure API keys or secrets don’t make their way into the commit! https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@pcshipp I use this LLM protection tool when using any of these https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@YashHustle_22 I’m using an ai protection tool https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@joni_vrbt https://t.co/M2wtQTfYTb

One of many we have

[Mason @DefensivePanda]

@Samaytwt If you’re using these for prod code you should give this tool a look, it will ensure you don’t put API keys or secrets into an LLM https://t.co/M2wtQTfYTb

[Mason @DefensivePanda]

@cybercpu @DaturaDillPickl @sadarlo1 @crazy_vaccine They just don’t know any better. Most of them can’t operate a Google workspace

[Mason @DefensivePanda]

@heyrobinai Gotta protect yourself from leaking PII to the LLMs https://t.co/M2wtQTgwIJ

[Mason @DefensivePanda]

@cybercpu @DaturaDillPickl @sadarlo1 @crazy_vaccine That’s true, I was just talking about a tool I use that I’ve seen protect other small businesses like Accoutants and insurance agents who DO in fact cram forms with people’s personal info into LLMs… not intellectual property. Personally identifiable information (PII)

[Mason @DefensivePanda]

@cybercpu @DaturaDillPickl @sadarlo1 @crazy_vaccine I think we are saying the same thing?

[Mason @DefensivePanda]

@cybercpu @DaturaDillPickl @sadarlo1 @crazy_vaccine It’s actually for PII from being placed into LLMs it doesn’t protect intellectual property, wut?

[Mason @DefensivePanda]

@TechByTaraa https://t.co/M2wtQTfYTb for when the devs keep throwing keys into their good vibes