Lav Kumar Vishwakarma

I build production AI agent systems and I know how they break.

[Lav Kumar Vishwakarma @LAV_K_V]

AWS (@awscloud) credited me for CVE-2026-16584, a High-severity flaw in its API MCP Server.

The server could appear healthy when its policy failed to load, skipping deny/gate checks.

If policy isn’t ready, the server isn’t ready.

https://t.co/blmY1KXc13

#MCP #AISecurity

[Lav Kumar Vishwakarma @LAV_K_V]

@intigriti 842 450

[Lav Kumar Vishwakarma @LAV_K_V]

@010Shivam pura saal lga hoga banane me, lekin sahi hai 🤩

[Lav Kumar Vishwakarma @LAV_K_V]

Highly recommend CTF https://t.co/ZIxXgcWTgB by
@NahamSec and @bbuerhaus

I spent 3 days to reach the 9th level but got stuck on it then writeup came out. But these are really challenging levels. Especially 9th one 😪

writeup: https://t.co/LjUx5ajt32

[Lav Kumar Vishwakarma @LAV_K_V]

@leemsparks @bbuerhaus @NahamSec Yes red isn't working 😞

[Lav Kumar Vishwakarma @LAV_K_V]

@bbuerhaus @NahamSec can you plz share any other hint for level 7 🙂

[Lav Kumar Vishwakarma @LAV_K_V]

I am in DW news :)

Thanks @JordanWildon

[Lav Kumar Vishwakarma @LAV_K_V]

@import_errror @Cinepolis Did you got any reply or have any contact?

[Lav Kumar Vishwakarma @LAV_K_V]

Hi
@Cinepolis

I want to report a critical security issue to you. How can I contact you?

[Lav Kumar Vishwakarma @LAV_K_V]

@IndiaCinepolis I have shared a detailed description in DM.

[Lav Kumar Vishwakarma @LAV_K_V]

@wongmjane @JordanWildon In Yandex still, 75k links are available. Even if all search engines remove the crawled links but the "Web Archive" already have more than 80k links and most of them are still working :)

[Lav Kumar Vishwakarma @LAV_K_V]

@na5n33t They don't have a bug bounty program. It was a reward for responsible vulnerability disclosure.

[Lav Kumar Vishwakarma @LAV_K_V]

Received first swag of 2020😃

#bugbounty #swag

[Lav Kumar Vishwakarma @LAV_K_V]

@Varade19 @9503Singh @Twitter agree

[Lav Kumar Vishwakarma @LAV_K_V]

Yay, I was awarded a $750 bounty on @Hacker0x01! https://t.co/MN4dX2Dkdt #TogetherWeHitHarder

[Lav Kumar Vishwakarma @LAV_K_V]

@_stevo Yes, I think so as the eye symbol appeared in the final step. If you need spoiler I can help with you that 😀

[Lav Kumar Vishwakarma @LAV_K_V]

@snipeyhead Are we looking for this?

[Lav Kumar Vishwakarma @LAV_K_V]

Thanks to #National #Critical #Information #Infrastructure #Protection #Centre for Giving Acknowledgement.

#nciipc

[Lav Kumar Vishwakarma @LAV_K_V]

@BittrexExchange
Hi, It has been 3 weeks and my account verification status is still pending. Now support is also not responding. Can you check it. Ticket number 745822