Sayaan Alam

Security Researcher, innovating next generation of cybersecurity | Red Teamer | Bug Bounty Hunter

[Sayaan Alam @ehsayaan]

Do listen guys!!! Thanks for the opportunity @synack

[Synack @synack]

New episode of WE'RE IN!

Discover @ehsayaan's journey from teenage hacker to the SRT Acropolis.

🎧Listen on Spotify: https://t.co/cjRyZPrkZn

#EthicalHacking #Pentest #SynackRedTeam #Cybersecurity

[Sayaan Alam @ehsayaan]

Finally my friend @Dinosn coming to India, can’t miss this edition!!!

[Security BSides Ahmedabad @bsidesahmedabad]

The people shaping the global cybersecurity community aren’t just building defenses.
They’re building the culture around hacking itself. 🔥

We’re excited to welcome @Dinosn as a Keynote Speaker for BSides Ahmedabad 0X07.

Straight from Swiss 🇨🇭, Nicolas is widely known as a hacker, community-driven security professional, and one of the most influential voices on X within the cybersecurity space.

He is currently the Head of Threat & Vulnerability Management at @Henkel

Recognized among the Top 23 cybersecurity influencers by @SentinelOne and featured in’s “200 Cybersecurity Influencers On Twitter Making a Difference,” by @CheckPointSW , Nicolas has built a reputation for connecting researchers, hackers, and defenders worldwide.����

He is also recognized with @SynackRedTeam Titan Recognition three times and Mentor of the Year honors for his contributions to the global security community. 🏆

Expect insights from someone who lives and breathes the hacker mindset every single day.🔥

Get ready for conversations that challenge perspectives and inspire the next generation of security researchers.⚔️

🎟️Secure your spot now: https://t.co/ppHZdsuaUv

#BSidesAhmedabad #cybersecurity #bugbounty #hacking #cybersecurity

[Sayaan Alam @ehsayaan]

3800 repos!!!

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[Sayaan Alam @ehsayaan]

@itz_mg_ This guy has killed many shackles 🙌🏻

[Sayaan Alam @ehsayaan]

🙂

[Grafana @grafana]

🚨 We recently discovered that an unauthorized party obtained a token with access to the Grafana Labs GitHub environment, enabling the threat actor to download our codebase. (1/6)

[Sayaan Alam @ehsayaan]

🔥

[TrendAI Zero Day Initiative @thezdi]

Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[Sayaan Alam @ehsayaan]

here we are!!!!

[News from Google @NewsFromGoogle]

The Google Threat Intelligence Group has detected the first known instance of a threat actor using an AI-developed zero-day exploit in the wild. While the attackers planned a wide-scale strike, our proactive counter-discovery may have prevented that from happening. This finding is part of our new report on AI-powered threats.

[Sayaan Alam @ehsayaan]

@garrytan cybersecurity peeps have been pulling you lately, what’s up? Is it a sign, hahaha🤣

[Sayaan Alam @ehsayaan]

@HatforceSec @garrytan @ycombinator Better way is to make a policy for all of those startups to have a responsible disclosure policy for their product where they could receive reports individually :)

[Sayaan Alam @ehsayaan]

Hey @garrytan @ycombinator how can i report serious security vulnerabilities in YCombinator? Do you guys have a bug bounty program?

[Sayaan Alam @ehsayaan]

@HatforceSec @garrytan @ycombinator I think its not just an operation but a very crucial responsibility. Collecting vulnerabilities on behalf of 100s of companies makes it very complex to manage/track those vulnerabilities especially when you have to communicate between different teams.

[Sayaan Alam @ehsayaan]

@ArmanSameer95 @Bugcrowd Superb!!!! Proud of you brother🙌🏻

[Sayaan Alam @ehsayaan]

@OriginalSicksec @wld_basha Well done bro. Congrats

[Sayaan Alam @ehsayaan]

@rauchg @infinitelogins I can’t DM you, please text. I have something that might be very helpful for you at the moment.

[Sayaan Alam @ehsayaan]

@_naaash_ @amazon @H4cktus @Jayesh25 @itz_mg_ Well done guys!!!

[Synack @synack]

New episode of WE'RE IN!

Discover @ehsayaan's journey from teenage hacker to the SRT Acropolis.

🎧Listen on Spotify: https://t.co/cjRyZPrkZn

#EthicalHacking #Pentest #SynackRedTeam #Cybersecurity

[Sayaan Alam @ehsayaan]

@0xLupin Well done, interesting finding!

[Sayaan Alam @ehsayaan]

Around 7 years ago, I started in security with pure curiosity and a lot of trial & error.

Today, I got to share that journey on a podcast with @SynackRedTeam 🎙️

Grateful for every opportunity that shaped this path.

🎙️Listen on Spotify: https://t.co/GepUSHmGdz

[Sayaan Alam @ehsayaan]

@MyntraSupport Still there is no resolution yet

[Sayaan Alam @ehsayaan]

@damian_89_ Sure thing :)