Puneet Thapliyal

Chief Information Security Officer | Health Care | Startup Advisor | Venture Partner. Advocate for online data privacy rights.

[Puneet Thapliyal @puneetx]

When GPT and GLP collide

[nic carter @nic_carter]

first vibecoded billion-dollar company?

[Rahul Sood 🏴‍☠️ @rahulsood]

https://t.co/Y6VIoLszMn

[Max Levchin @mlevchin]

The wave of security exploits we are going to see in the age of AI-coded AI bots + people giving AI bots full rights to run code on their machines is going to be quite something, I suspect. It will be OK soon (AI security audits will help) but expect a rough start, IMHO. YMMV.

[Puneet Thapliyal @puneetx]

@geoffreylitt “responsibly vibed”

[Puneet Thapliyal @puneetx]

Bluetooth Headphone Jacking: A Key to Your Phone - https://t.co/tp6JQ8qdTm https://t.co/HCon5vqQQC

[Puneet Thapliyal @puneetx]

Code for the paper "Defeating Prompt Injections by Design"

https://t.co/e0UWUEy7Jq

[Puneet Thapliyal @puneetx]

US charges former Accenture employee with misleading feds on cloud platform’s security - Nextgov/FCW https://t.co/BumxRf15rJ

[Puneet Thapliyal @puneetx]

ChatGPT wrapped 2025!

[Puneet Thapliyal @puneetx]

My @meetgranola Crunched 2025 catchphrase is...

[Puneet Thapliyal @puneetx]

https://t.co/mdZwOzpTWr

[Puneet Thapliyal @puneetx]

@Michael1026H1 @Hacker0x01 Super! Congratulations 🎉

[Puneet Thapliyal @puneetx]

https://t.co/f98DvtjtKH

[Puneet Thapliyal @puneetx]

S1ngularity/nx attackers strike again. Several NPM packages are now serving malware. The most well known amongst them being CrowdStrike.

https://t.co/F2MOxKyyC0

[Puneet Thapliyal @puneetx]

The Salesloft incident: A wake-up call for SaaS security and IPSIE adoption Article https://t.co/RkUoG8TAKa # via @okta

[Puneet Thapliyal @puneetx]

Github support for immutable releases. Improved supply chain security.

https://t.co/nmRRSpRJM0

[Puneet Thapliyal @puneetx]

ChromeAlone - A Cobalt Strike Like Tool That Turns Chrome into C2 Platform https://t.co/LX2n2ihYyL

[Puneet Thapliyal @puneetx]

My favorite conference of the year! with Yash #defcon

[Trail of Bits @trailofbits]

We engineered an attack against @GitHubCopilot to add a hidden backdoor via a malicious GitHub issue. See if you would’ve fallen for it: https://t.co/sbhErMUkic

[Puneet Thapliyal @puneetx]

Code Execution Through Deception: Gemini AI CLI Hijack https://t.co/woF39d24WF

[Puneet Thapliyal @puneetx]

158-year-old company forced to close after ransomware attack precipitated by a single guessed password — 700 jobs lost after hackers demand unpayable sum https://t.co/ott8N6ep7t