Shielder

InfoSec boutique.
Owning things since 2014.
We love to go for the extra mile, where we usually find the best 🦟🐞🪲🪳🐛🐜🕷 the others miss.

[Shielder @ShielderSec]

Blog post: https://t.co/CQr02sFa53
Report: https://t.co/1XFdIbbftF

[Shielder @ShielderSec]

Shielder, with @OSTIFofficial & @CloudNativeFdn, audited a bunch of @kubernetesio Non-Core components.

🔍 19 findings (4 High, 5 Medium, 7 Low, 4 Info)

✔️ Some already fixed, others open or in progress.

Perfect ⏰ for #KubeCon NA day 1!

Full details + public report below ⬇️

[Shielder @ShielderSec]

Meet our very own @smaury92 in Bali for #TheSAS2026
P.S. we know he always travels with some swag 👀

[smaury fp16 @smaury92]

About to hop on the flight to Bali.
Let’s bring some anarchy to the loopback.
#TheSAS2026

[Shielder @ShielderSec]

Blogpost: https://t.co/hKRlRsOxVR
Report: https://t.co/nvxa1JeWbi

[Shielder @ShielderSec]

With @OSTIFofficial and @sovtechagency we audited @symfony YAML, the library bundled in that PHP framework that all your friends probably run somewhere in their stack. If that's true, please update and read the attached blogpost to find out if you're affected!
Links ⏬

[Shielder @ShielderSec]

Dropped some swag at @WarConPL 👀

[The Linux Foundation @linuxfoundation]

Inspektor Gadget has completed its first security audit. Three vulnerabilities fixed, six hardening recommendations addressed — coordinated by @OSTIFofficial and led by @ShielderSec.
> https://t.co/zM4EN0cl0Y

[Mindless @Mindlaess_]

Well that was a ride! Happy to share that I've been awarded with the OMSE certificate after successfully completing the "Offensive Mobile Security Expert" course and exam by @8kSec .

Thanks to @ShielderSec for this training opportunity and to @8kSec for their top-notch content!

[Brian Benz @bbenz]

The @OSTIFofficial coordinated #InspektorGadget’s first independent security audit, backed by @CloudNativeFdn and performed by @ShielderSec. Nice example of transparent OSS security work.
https://t.co/xfECL5f7KO
#Kubernetes #eBPF #OpenSource #Security

[Shielder @ShielderSec]

Can a hostile container sneak past your eBPF tracing? Sometimes, yes.

With @OSTIFofficial & @CloudNativeFdn we audited Inspektor Gadget - 3 vulns (fixed), 6 hardenings, 6 bypasses (io_uring, openat2, jumbo frames…).

Work by @ndaprela & @suidpit👏

🔗 https://t.co/LktKoqX7it

[Shielder @ShielderSec]

@suidpit @kubernetesio @OSTIFofficial https://t.co/oQxPRptrFg

[Shielder @ShielderSec]

#KubeCon EU starts today and guess what? Our very own @suidpit will be on stage with a panel about the @kubernetesio Security Audit we performed during 2025 with the support of @OSTIFofficial!
🗓️ March 25 - 16:45 CET
📍 Hall 8 | Room F

[Shielder @ShielderSec]

Attending @1ns0mn1h4ck?

Meet @not4nhacker @Luk3ros and @Sev1rus from our AppSec and Red teams!

They are eager to discuss about breaking complex authentication implementations and relaying all the things to DA!

[Shielder @ShielderSec]

Love breaking things just to see how they work? 🐛🔨

​A @ShielderSec delegation is on the ground at @fosdem, and we're looking for fellow hackers and security researchers.

​If you are passionate about securing the Open Source world, we definitely need to talk!

[Shielder @ShielderSec]

Happy New Year, Hackers! 🎆
We’re looking forward to a 2026 full of crazy exploits, instant patches, and - most importantly - YOU, the amazing human beings behind the screens.

[Shielder @ShielderSec]

Bootloaders acting weird? 🐛
If you are at #39c3, catch @ShielderSec's own @Th3Zer0 to geek out over bootloader oddities and low-level vulnerabilities.

[Shielder @ShielderSec]

Live in less than 20 min!
https://t.co/nXOixOTBWB

[Shielder @ShielderSec]

Want to learn more about our approach into auditing complex libraries and writing cool exploits?

Attend @OSTIFofficial's meetup where our very own @Th3Zer0 and @suidpit will talk about the "Security Audit of OpenEXR"

🗓️: Dec 02
🕗: 20:00 CET

RSVP: https://t.co/j3slgeZ4Pq

[Shielder @ShielderSec]

Great achievement of our very own @Paupu_95 🎉

[Paolo Cavaglià @Paupu_95]

Huge thanks to #theSAS25 organization and ppl who voted for this amazing prize! It's been a real pleasure!

[Shielder @ShielderSec]

🔥🔥🔥

[TheSAS2026 @TheSAScon]

So, Symantec/Broadcom PAM seems to contain code in PHP, Java, and Perl simultaneously. Guess how many issues are hiding there? @Paupu_95 keeps the tension high, and we still don’t know the answer. This #TheSAS2025 talk is quite thrilling.