Off By One Security

New streams every Friday! All channel proceeds go back to the community! Check out for our AI-powered offensive security testing platform!

[Stephen Sims @Steph3nSims]

Please join us for the next @offby1security stream at 11AM PT this Friday, May 29th with @Ni_Aimable for a session on "AI Agents as Confused Deputies!"

https://t.co/zZt7I5ZDnc

[Stephen Sims @Steph3nSims]

Confused Deputies and Stolen Tokens: Breaking and Rebuilding MCP Auth with Brooks McMillin https://t.co/vnsMIcHThw

[Stephen Sims @Steph3nSims]

Today's stream at 11AM PT / 2PM ET!

[Stephen Sims @Steph3nSims]

ACID, the offensive AI security testing platform is now available to enterprises. It solves a lot of the challenges seen out there such as using a connector agent that runs on your prem allowing for control & internal testing. Reach out for a demo below:
https://t.co/04sAtW64ap

[Stephen Sims @Steph3nSims]

Join us this Friday (May 22nd) at 11AM PT on the next @offby1security stream with guest Brooks McMillin for a session on "Confused Deputies & Stolen Tokens: Breaking and Rebuilding MCP Auth!"

https://t.co/xN6FAmiO8e

[Stephen Sims @Steph3nSims]

The video from @htejeda & I "The Challenges of Building an AI-driven Security Testing Platform & How We Solved Them" is up on YouTube!

We discuss challenges like transparency, validation, authentication, access limitations, ...

https://t.co/AMzb5RsvZ6

https://t.co/PtGlEs6qtN

[Stephen Sims @Steph3nSims]

Please join us on the next @offby1security stream this Friday at 11AM PT with @htejeda for a session on "The Challenges of Building an AI-driven Security Testing Platform and How We Solved Them." We will be announcing more streams shortly!

https://t.co/0ZD7MEullL

[Off By One Security @offby1security]

Happy to share that we sponsored a K9 Officer's Bullet Proof Protective vest for Axel who works for the Mississippi Department of Corrections!

[Stephen Sims @Steph3nSims]

Five years from now the state of the AI-era cybersecurity industry will have resulted in:

[Stephen Sims @Steph3nSims]

Automated Reverse Engineering with LibGhidra, GhidraSQL, and AI Agents https://t.co/OnCpJwznzI

[Stephen Sims @Steph3nSims]

The stream below with @allthingsida is tomorrow (Friday) at 11AM PT!

[Stephen Sims @Steph3nSims]

With the low barrier to entry for vulnerability research due to AI, that used to require advanced and niche skills, I'm seeing that exploit mitigation bypasses are still difficult for AI. Weaponizing vulnerabilities still requires advanced knowledge. Disclosure != Skill...

[Stephen Sims @Steph3nSims]

Join us next Friday, May 8th at 11AM with Elias Bachaalany (@allthingsida) for the next @offby1security stream on, "Automated Reverse Engineering with LibGhidra, GhidraSQL, and AI Agents!

https://t.co/tLrD3qUvEk

[Stephen Sims @Steph3nSims]

We at @offby1security saw an interesting defense against AI-powered offensive agents recently. Fingerprinting of the agents performing the testing resulted in misleading, honeypot-like responses, attempting to distract or redirect them. It didn't work but worth noting.

[Off By One Security @offby1security]

Going live now!

https://t.co/6M5yrGIuUi

[Stephen Sims @Steph3nSims]

Please join me on the next @offby1security stream tomorrow (Friday) at 7AM PT / 4PM CEST with @Libranalysis for a session on "Live Malware Unpacking: Debugging AgentTesla with DotDumper!"

https://t.co/BU5GKzs7un

[Stephen Sims @Steph3nSims]

Would you be interested in a stream on the @offby1security channel covering the costs between using different Frontier models to discover the same vulnerabilities and the changes to the prompts and testing methodologies to find them?

[Stephen Sims @Steph3nSims]

Offensive Security in Web3 from Exploit Mindset to DeFi Precision Bugs with Josselin Feist https://t.co/Vv67J3hGjK

[Josselin Feist @Montyly]

I will be on @offby1security's stream tomorrow with @Steph3nSims

We will be live, so come join and ask anything

[Stephen Sims @Steph3nSims]

Join me this Wednesday at 10AM PT for the next @offby1security stream with guest Josselin Feist (@Montyly) for a session on "Offensive Security in Web3: From Exploit Mindset to DeFi Precision Bugs!"

https://t.co/HY7DOrqLMG