Rajesh Krishnan

cybersecurity marketer - security testing and that bug bounty thang
voracious reader, hacker ally, likes rhinos and trivia and trivia about rhinos

[Rajesh Krishnan @rfkrishnan]

I remember when I didn't plan my weekends around optimizing use of #Claude tokens like it was yesterday.

Because it was yesterday.

https://t.co/RL4a1CfKuD (@erasureinfo)

[Rajesh Krishnan @rfkrishnan]

TIL biometric unlocks can be forced on you by law enforcement but PIN unlocks cannot. https://t.co/pvR4bWyL8V

[Rajesh Krishnan @rfkrishnan]

@inspectiv I was riveted watching the launch. "For all humanity" indeed.

[Inspectiv @inspectiv]

Humanity is going back to the Moon! Cheering on Reid Wiseman, Victor Glover, Christina Koch and Jeremy Hansen as they make history on #ArtemisII — the first crewed lunar mission in over 50 years. Safe travels! 🚀 #Artemis #NASA

[Inspectiv @inspectiv]

⏳ RSA Conference 2026 is around the corner!

We’re heading to San Francisco, are you? If you’re focused on strengthening your security testing program, let’s chat.

Schedule a time to meet with the Inspectiv team and learn how companies are scaling their security testing programs with support from our trusted researcher community and continuous testing approach.

🔗 Schedule time with us here: https://t.co/aqtqj4NrzG

#CyberSecurity #RSAC #SecurityTesting #BugBounty #PenTesting

[Rajesh Krishnan @rfkrishnan]

@inspectiv What can I say, I like trail work and cybersecurity. Actually, I think this was inevitable.

[Inspectiv @inspectiv]

New blog about trail work and cybersecurity. What? No really. https://t.co/1xtwWmwVbX #bugbounty #cybersecurity

[Rajesh Krishnan @rfkrishnan]

@inspectiv I can actually imagine 3-4 wildly differing scenarios for how #bugbounty will evolve in the next few years, with AI affecting things in so many ways.

Key - which part evolves faster - AI's ability to create vulnerabilities in the race for features or find them.

[Rajesh Krishnan @rfkrishnan]

OK, I'd like to see how the #cybersecurity term #Wardriving (#wardriver movie) can turn into an interesting movie.

Trailer https://t.co/8GvpYYAjn2. Also @danedehaan is underrated from my vague recollections. If he got cancelled or something for a good reason, apologies - I missed that.

[Rajesh Krishnan @rfkrishnan]

I recently cleaned up my https://t.co/FIrW6FcPQO permissions, including @IFTTT (after way too many years). I got the "not working" notification from them in hours - first contact since Obama era. So I guess they've been checking my Twitter for years, more than daily. #PrivacyMatters
(still a cool product)

[Rajesh Krishnan @rfkrishnan]

It took me 12 years in the industry to gain this perspectiv (sorry, had to). https://t.co/7ltEckC1si

[Inspectiv @inspectiv]

Even trusted software can hide surprises in your configuration options. Test the third-party apps you rely on to safeguard your customers and infrastructure. Stay proactive, secure, and ahead of emerging threats. #CyberSecurity #BugBounty

[Rajesh Krishnan @rfkrishnan]

I know XSS has never been the most attractive vulnerability type in cybersecurity, esp. bug bounty, but it sure keeps coming up. Our data show it's a bit more prevalent than other sources hint at (like OWASP).

https://t.co/eyWqPffeOD

[Rajesh Krishnan @rfkrishnan]

@corraldev @sec_jota That's for sure. I've worked at 3 bug bounty platforms (currently @inspectiv). Self-taught FTW; I've never seen any correlation between success and training. Many pick up standard certs like OSCP or CISSP for their day jobs along the way though.

[Inspectiv @inspectiv]

🚨 Big news for AppSec teams! The new OWASP Top 10 2025 has dropped — and it’s a game-changer for anyone building or securing web apps. 🔐 Guess which risk continues to dominate? It’s Broken Access Control (BAC), again. According to OWASP, when authorization fails, serious harm follows.

At Inspectiv, our own bounty-data confirms it: we saw that BAC issues made up 38% of vulnerabilities reported via our programs.

👉 Dive into our latest blog post, Broken Access Control: Why It Tops Both OWASP and Inspectiv’s Bug Bounty Reports.

https://t.co/PGyUXvT4Zv.

[Rajesh Krishnan @rfkrishnan]

@inspectiv I helped write this. For us, XSS comes up higher than it would seem to from the new Top Ten list.

Did I mention that's based in part on record-breaking #s of vulns found by @inspectiv last month 😊?#bugbounty #PenTesting

[Rajesh Krishnan @rfkrishnan]

I'm excited to see the new OWASP Top Ten (candidate) out. Supply Chain being high is pleasing. Injection feels low to me, and is backed by our testing data at @inspectiv . Don't sleep on those XSS!

[Rajesh Krishnan @rfkrishnan]

Unencrypted data! Well, I guess if you have to spare compute and datagram resources... this is the use case. 🛰️

Still, stop it everyone. Encrypt everything.

https://t.co/2xu8mkjeAY

[Rajesh Krishnan @rfkrishnan]

@inspectiv Truly #1 all time hacker movie.

[Rajesh Krishnan @rfkrishnan]

@mcipekci @inspectiv Appreciate you! Feels good to be back.

[Rajesh Krishnan @rfkrishnan]

Still in #cybersecurity, back in #bugbounty Marketing with @inspectiv and their fresh approach to making us all safer in our digital lives.

https://t.co/eWYyaaP0Kk

Welcome back everyone!