k3m

🐶

[Vitor Falcão "busfactor" @busf4ctor]

https://t.co/tVuFQJxvO9

[k3m @k3mlol]

AI: Self RCE is RCE!, no argument 🐸

[k3m @k3mlol]

For companies, platforms could add more value by helping with remediation and architecture-level security improvements.

Security has no silver bullet.

[k3m @k3mlol]

I think the biggest problem in bug bounty today is the platforms themselves. Filtering spam reports only treats the symptoms, not the root cause. Platforms should educate hunters on what actually qualifies as a security vulnerability.

[shubs @infosec_au]

https://t.co/rLl6ZzmuvY

[k3m @k3mlol]

Also, bug bounty platforms shouldn’t focus on building their own AI scanners. They should help hunters use AI more effectively by providing better tools, workflows, and guidance.

[k3m @k3mlol]

If someone repeatedly submits spam, temporarily restrict submissions until they complete training or pass an assessment. Build a shared standard for report quality.

[NetAskari @NetAskari]

See how Chinese red-team / pen-testers see China's e-government infrastructure and witness how they assess security flaws in the govt run service infrastructure ( has diagrams and pictures ) : https://t.co/oncjuBZ162

[Abdulaziz Almadhi @3zizMe_]

New write-up: CVE-2025-52665 (RCE) in UniFi OS by @CatchifySA .

https://t.co/EKbyHvr3d5

Enjoy!
#infose

[k3m @k3mlol]

@zeyu1337 bro, try the red underwear in the rest of year

[k3m @k3mlol]

no one visited my twitter 😭

[XBOW @Xbow]

XBOW automatically runs expert-level attacks across all webapps, giving security teams unprecedented scale.

@XBOW reported 1092 vulnerabilities on HackerOne in just a few months, including RCE, XXE, SQLi, SSRF, exposed secrets, and XSS.

[k3m @k3mlol]

@tabaahi_ same here, move to slack already

[TrendAI Zero Day Initiative @thezdi]

Fantastic! Ho Xuan Ninh (@Xuanninh1412) and Tri Dang (@trichimtrich) from Qrious Secure successfully demonstrated their exploit of #NVIDIA Triton. Will it be unique or another bug collision? They are off to the disclosure room to find out. #Pwn2Own #P2OBerlin

[f(gautham)💤 @gauthamzzz]

The Bybit hack is officially the largest crypto heist in HISTORY.

$1.46B+ stolen and still counting. That's 16% of ALL previous crypto hacks COMBINED.

Here's what happened, what we know, and why this could change everything 🧵👇

[unusual_whales @unusual_whales]

The hack, what the Treasury called a "major incident", happened in December when Chinese state-sponsored hackers breached the department's computer security guardrails by compromising third-party cybersecurity service provider BeyondTrust.

Read more: https://t.co/pb2UyIvg3c

[k3m @k3mlol]

@adnanthekhan @msftsecresponse bro, you should focus on their products, not their internal or infra assets. their program scope indeed need to be improved.

[The Straits Times @straits_times]

Chinese group accused of hacking Singtel in telecom attacks https://t.co/wIQF8Q1pRR

[Sea Security Response @Seasecresponse]

We reported a total of 51 bugs (low to critical impact) for IoT devices used by Singapore Smart City and Smart Building.
https://t.co/WLDvEzg3CE

[daniel @hackermondev]

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
https://t.co/8pkfFsXRWR

[k3m @k3mlol]

@vysecurity cool tool!