rezaduty

Offensively Defensive Continuous Developer #TryHarder

[HADESS @Hadess_security]

Stop Googling cybersecurity skills.

+499 infosec skills, structured paths, career mapping; all in one place.

This is how you actually learn.

https://t.co/f0E5SZ6nnK

#infosec #job #career

[HADESS @Hadess_security]

Continuous Delivery Security Labs 2026
https://t.co/dnEaOK332d

🔥 Start engineering your career → https://t.co/M93OmX3cSo

#githubactions #argocd #devsecops #devops #cd #github

[HADESS @Hadess_security]

Cybersecurity Career Coach that Turns Rookies into Pros.
After 7+ years creating content and collaborating with top security engineers & researchers, we've seen the same gaps over and over:

How to actually start and How to keep growing

we built: https://t.co/M93OmX3cSo

#job

[Hazard Lab @thehazardlab]

CVE-2025-9959: smolagents Python Sandbox Escape
https://t.co/SXF1s3SNJG

Python sandbox implementations often focus on blocking dangerous attribute access patterns like `obj.__class__` but forget that the same introspection is achievable through method invocation.

#python #cve

[Synacktiv @Synacktiv]

Last Friday at @BlackAlpsConf 2025, @noraj_rawsec explored the hidden security challenges of #Unicode 🎤

With 1,000+ pages of specs, even small mistakes can become attack vectors.

Dive into the details 👉 https://t.co/bjShLC2ksV

[Yasho @YShahinzadeh]

I’ve been hunting on H1 for almost 3 years, ranked #18 in 2025, have always tried to contribute positively to the hacker community. I’ve earned around $500k in bounties and was on the road to $1M. Yet I don’t even have HSM, and I feel I haven’t been recognized as I should 1/4

[HADESS @Hadess_security]

𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 𝗥𝗲𝗮𝗹‐𝗧𝗶𝗺𝗲 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻 — 𝗔𝘁𝘁𝗮𝗰𝗸 & 𝗗𝗲𝗳𝗲𝗻𝘀𝗲 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸
https://t.co/0KmtGQ7rAO

Donald 👱‍♂️, a developer and chaos wrangler, watched PacketPete, our mischievous red-teamer, go wild on his real-time stack 👇

[SinSinology @SinSinology]

NEED YOUR HELP!

My Friend/Teacher Soroush (@irsdl) Is looking for a new company to join, you know him as the .NET-God, the guy who has popped exchange, sharepoint, has maintained ysoserial_.net for years, contributed to the exploitation scene numerous times, taught all of you about what .net ghost webshells are, taught you about what viewstate exploitation is, how .net remoting exploitation issues can be solved, iis cookieless, web_config exploitation, countless of blogs, talks, techniques,...
but companies keep saying:

"we aren't hiring right now!"

if i was in position of hiring, woudln't wanna miss out on having one of THE BEST in my team

you're retweet is Extremely appreciated ❤️‍🔥

soroush, if you see this, don't hate me, had to do it without telling you

[HADESS @Hadess_security]

𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗘𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗙𝗶𝗹𝗲 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁
https://t.co/usvKK4f0VG

Syd, a senior Spring developer, trusted her file upload service with basic extension validation. "Only .pdf and .jpg files allowed," she thought.

#appsec #devsecops

[Crusaders of Rust @cor_ctf]

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130)

https://t.co/Cbk9MBo91v

Cheers to @u1f383 for finding these CVEs + the OffensiveCon talk from gteissier & @laomaiweng for inspiration!

[HADESS @Hadess_security]

Secure by Design Frontend Security
https://t.co/O4B9WhLc7b

Imagine Frontend used dangerouslySetInnerHTML to render user comments without sanitization. An attacker crafted malicious JavaScript that stole authentication tokens from other users' browsers.
Learn more 👇

[HADESS @Hadess_security]

𝗔𝗰𝗰𝗲𝘀𝘀 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗠𝗶𝗱𝗱𝗹𝗲𝘄𝗮𝗿𝗲 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸
https://t.co/U4gEeC7Pfs

Imagine zero trust applied only to north-south traffic. East-west service calls trusted cluster networks implicitly.
Learn more 👇

[HADESS @Hadess_security]

𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗪𝗲𝗯 𝗦𝗲𝗿𝘃𝗶𝗰𝗲 & 𝗔𝗣𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 
https://t.co/VHJe2qUH3L

The panic began. It wasn't the new API. Learn more 👇

[HADESS @Hadess_security]

𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻
https://t.co/cRcQIOZ84b

#appsec #authentication #identity #security #devsecops #bugbountytips #oauth #oidc

[HADESS @Hadess_security]

Behavioral Intelligence - BEHINT
Ever heard of stealing conversations from a lightbulb? turning desk lamp vibrations into crystal-clear audio. Pure side-channel magic from Ben-Gurion's mad scientists.

full analysis: https://t.co/yPjQ51ZVKc

#osint #redteam #ai #behint

[HADESS @Hadess_security]

Java Spring Bug Hunter's Secure Coding Playbook
https://t.co/EzPiMpULIy

#appsec #java #productsecurity #spring #springsecurity #devops #devsecops #bugbountytips

[HADESS @Hadess_security]

𝗔𝗪𝗦 𝗣𝗿𝗼𝗮𝗰𝘁𝗶𝘃𝗲 𝗗𝗲𝗳𝗲𝗻𝗰𝗲: 𝗧𝗵𝗲 𝗔𝗿𝘁 𝗼𝗳 𝗪𝗮𝗿 𝗶𝗻 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆
https://t.co/2HADE2MayB

#aws #cloud #redteam #devops #devsecops

[HADESS @Hadess_security]

AI For OSINT - Texture Intelligence
Read the full analysis: https://t.co/YWxr5B1A9H

The Pentagon leaks weren't solved by cyber forensics—they were cracked by GRANITE PATTERNS.

#ai #osint #redteam #pytorch #generativeai

[HADESS @Hadess_security]

𝗖𝗼𝗻𝘁𝗮𝗶𝗻𝗲𝗿 𝗢𝗦 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸
https://t.co/E9DlaTIx2Z

Maya 👩‍💻 was about to docker pull redis:latest when her security scanner screamed - the image contained 47 critical vulnerabilities and suspicious network activity!

#devops #devsecops #containers

[HADESS @Hadess_security]

Container Attack & Defend
https://t.co/47m68ixb0U

#container #devops #devsecops #redteam #eks #kubernetes #docker