Alberto

Pentester | BSCP & eWPTX holder | Computer Engineer

[Alberto @avilsec]

@TheSecOpsGroup 🫡🫡

[The SecOps Group @TheSecOpsGroup]

🚨 𝗜𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗶𝗻𝗴 𝗖-𝗔𝗜/𝗠𝗟𝗣𝗲𝗻 𝘃𝟭.𝟮: 𝗕𝘂𝗶𝗹𝘁 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗠𝗼𝗱𝗲𝗿𝗻 𝗔𝗜 𝗧𝗵𝗿𝗲𝗮𝘁 𝗟𝗮𝗻𝗱𝘀𝗰𝗮𝗽𝗲

𝘌𝘯𝘨𝘢𝘨𝘦 𝘸𝘪𝘵𝘩 𝘵𝘩𝘪𝘴 𝘱𝘰𝘴𝘵 🗨️ (𝙡𝙞𝙠𝙚, 𝙘𝙤𝙢𝙢𝙚𝙣𝙩 & 𝙨𝙝𝙖𝙧𝙚) 𝘢𝘯𝘥 𝟯 𝙡𝙪𝙘𝙠𝙮 𝙥𝙧𝙤𝙛𝙚𝙨𝙨𝙞𝙤𝙣𝙖𝙡𝙨 𝙬𝙞𝙡𝙡 𝙬𝙞𝙣 𝙖 𝙁𝙍𝙀𝙀 𝘾-𝘼𝙄/𝙈𝙇𝙋𝙚𝙣 𝙚𝙭𝙖𝙢 𝙫𝙤𝙪𝙘𝙝𝙚𝙧.

As prompts and attack techniques continue to evolve, AI systems are being tested in increasingly creative ways. To keep pace with the rapidly changing LLM security landscape, we’ve updated the challenges in C-AI/MLPen and are excited to release v1.2 of the exam.
✅ 𝗧𝗵𝗲 𝗻𝗲𝘄 𝘃𝗲𝗿𝘀𝗶𝗼𝗻 𝗶𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗲𝘀 𝘁𝗼𝘂𝗴𝗵𝗲𝗿 𝘀𝗰𝗲𝗻𝗮𝗿𝗶𝗼𝘀 𝗮𝗻𝗱 𝗺𝗼𝗿𝗲 𝗮𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗼𝗯𝗷𝗲𝗰𝘁𝗶𝘃𝗲𝘀 𝗱𝗲𝘀𝗶𝗴𝗻𝗲𝗱 𝘁𝗼 𝗯𝗲𝘁𝘁𝗲𝗿 𝗿𝗲𝗳𝗹𝗲𝗰𝘁 𝗿𝗲𝗮𝗹-𝘄𝗼𝗿𝗹𝗱 𝗔𝗜/𝗟𝗟𝗠 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗮𝗱𝘃𝗲𝗿𝘀𝗮𝗿𝗶𝗮𝗹 𝘁𝗲𝗰𝗵𝗻𝗶𝗾𝘂𝗲𝘀.

💥 𝗨𝘀𝗲 𝟳𝟱% 𝗗𝗶𝘀𝗰𝗼𝘂𝗻𝘁 𝗖𝗼𝗱𝗲: 75-OFF at checkout

If you work in 𝗔𝗜 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗼𝗿 𝗟𝗟𝗠 𝗽𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴, it’s a great opportunity to put your skills to the test and validate them through a practical challenge.
Here's your shot 👉 https://t.co/NBLAfVQ5rD

#AI #MachineLearning #ArtificialIntelligence #DeepLearning #DataScience #AISecurity #MLSecurity #CyberSecurity #LLMSecurity #AIThreats #LargeLanguageModels #LLM #GenAI #AIInnovation #TechTrends #AIEngineering #MLOps #AIDevelopment #SecureAI #ResponsibleAI #LearningInPublic #TechCommunity #Pentesting

[Alberto @avilsec]

@0xTib3rius @chmscory New video soon? :)

[Daniel @nearlydaniel]

turns out the secret to maintaining deep friendships is just having my ai agent text all my friends “yoo what’s good lol” at random times every week

[Bernardo Quintero @bquintero]

33 años después, el enigma del virus Málaga por fin tiene respuesta.

Ha sido muy emocionante cerrar el círculo.

Gracias por acompañarme en esta historia.

https://t.co/BJH4Y73CYy

[godiego @_godiego__]

Toda la gente que hace bug bounty que conozco ha aprendido por su cuenta y con material publico. Si crees que con un curso de un año vas a ser bug hunter y ganar dinero estas muy equivocado, el dinero lo van a ganar otros. Entiendo que digan que bb es un scam viendo el panorama…

[Ghost St Badmus @commando_skiipz]

Dear Founders, CTOs, Managers, and Developers,

I want you to read the quoted tweet and genuinely imagine this happening to your own product, the one you’re building or have already built.

The truth is, the founders of Bunni probably never took security seriously. And just like them, many of you still don’t, because “security doesn’t make money,” right? “We’re a small business,” “hackers won’t bother with us,” “we’ll deal with it later.”

That mindset is exactly how companies end up in situations like this.

Every time I get the opportunity to speak with people in your position, I emphasize one thing: invest in security early. Hire at least one competent security engineer. Budget for external penetration testing, not for compliance, but to protect your brand, your customers, & your reputation.

Security might not directly generate revenue,
but it prevents you from losing everything you’ve built.

Yes, security is expensive.
Yes, security is a choice.
But the cost of a breach is a hundred times greater, and when that day comes, you’ll realize it’s no longer a choice, it’s a debt you’ll have no option but to pay.

Please, take this as a wake-up call.
Reflect, & start taking security seriously, before someone else forces you to.

Help tag any founder, engineering manager, or developer to read this.

[𓃠🪬 @adeitys4]

the average ai user mind cannot comprehend the godly experience of witnessing your own human brilliance when you lock in for a tight deadline

[vx-underground @vxunderground]

Weird stuff going on. This is a CRAZY anime arc. I beg you to read this post. This shit is crazy.

Check this shit out

June 16th, 2025: @phrack reports suspected offensive state-sponsored activity from China and/or North Korea targeting South Korea. They notify KR-CERT (Defense Counterintelligence Command).

*In other words, evidence of China and/or North Korea successfully hacking companies in South Korea.

June 26th, 2025: South Korean government responds

July 17th, 2025: Phrack notifies KISA, Ministry of Unification, LG Uplus Corp, KR-CERT about offensive operations from China and/or North Korea

August 15th, 2025: Phrack e-mails terminated from Proton.

September 9th, 2025: Everyone starts screaming at Proton on social myself (us included). Proton apologizes and re-instates Phracks Proton e-mail

... then the twist

September 24th, 2025: South Korean parliament launches an investigation into the allegations against China and/or North Korea. They want to investigate the companies which were compromised

September 25th, 2025: South Korean government says they are going to perform an on-site inspection on several of the alleged compromised facilities

September 26th, 2025: A government data center is burned to the ground. 96 servers destroyed. All evidence gone. This includes evidence of China and/or North Korean offensive operations.

September 27th, 2025: Server fire reported to be caused by a Lithium-ion battery. The batteries that caused the fire were made by one of the companies which was compromised by China and/or North Korea

October 2nd, 2025: Another location which was believed to be compromised by China and/or North Korea is burned to the ground. All evidence gone.

October 2nd, 2025: A South Korean government official who was appointed to manage these inspections and overviews commits suicide

What the fuck is going on? How did a simple Lithium-ion battery burn an entire data center to the ground? Is it weird that another massive data center burned to the ground a few days later? Why did these fires only impact servers which were believed to be hacked by China and/or North Korea? Why are government officials killing themselves? Why the fuck is this not getting more attention? Why does my tummy hurt?

Find out next time on Dragon Ball Z

[Joseph Thacker @rez0__]

if someone invented an app that would let you know which server and channel in Discord made the most recent notification sound... they'd make a million dollars.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

New episode is out! — https://t.co/fsyFjR0KK4

Releasing the episode on Monday so you have something to listen to during your travel to DEFCON =)

Diego Djurado joins us to discuss XBOW's architecture, hunting approach, hallucination challenges, and AI's future in bug bounty. He also shares his hacking journey and achievements.

[Brendan Dolan-Gavitt @moyix]

@ryancbarnett @rez0__ @ThisIsDK999 @Xbow Hey, it worked for George Dantzig!

[Joseph Thacker @rez0__]

@ThisIsDK999 @Xbow no im saying that i bet they simply gaslight it to improve its resilience and odds that it "keeps looking"

[Adam Wathan @adamwathan]

Product idea: Notion except every keystroke doesn't feel like I'm SSH'd into a server on Mars.

[Lasagne Manne @LasagneManne]

@vxunderground Talked to a guy who had access a while back and got a sneak peak/chance to buy the source, its not just ww2 its actually most cod games that are effected. there is a current p2c selling with these features and people are getting their pcs turned into botnet zombies

[Johann Rehberger @wunderwuzzi23]

Prompt injection is fascinating.... 🧐

[Joseph Thacker @rez0__]

You'll hate my new post on my blog.

Or maybe you'll love it.

"This is How They Tell Me Bug Bounty Ends" 😊 Enjoy!

[Frances Lorenz @frances__lorenz]

Remember when AI researchers used to be like, "this is a neural network, isn't it cool? It can say DOG or CAT if you show it a DOG or a CAT :)" and now they're like, "we're gonna make God before China does" okay