Viyat Bhalodia

Red team @ Robinhood; application security and vulnerability research. OWASP OWTF project co-lead.

[Fotis Chantzis @ithilgore]

Proud to see our work on agent security @openai highlighted in Forbes. Securing AI agents means bringing identity, credential, and access controls directly into the developer workflow, and Codex is a major step in that direction.

https://t.co/08gLLmwwst

[Fotis Chantzis @ithilgore]

We’ve spent a lot of time on the framework underneath Codex, so it can move quickly on routine work while stopping for review when the risk changes.

Here’s how we use sandboxing, approvals, network policy, and telemetry to run Codex safely @OpenAI:

https://t.co/SXsYDARw40

[Fotis Chantzis @ithilgore]

Keeping your data safe when an AI agent clicks a link: https://t.co/jbmBzIpqai - really proud of the work the team is doing @OpenAI

[Viyat Bhalodia @viyat]

@iangcarroll Congrats dude!!

[Ian Carroll @iangcarroll]

This is an absurd vulnerability and should be retracted: https://t.co/4V9HNcgdKA

[7ASecurity @7aSecurity]

🔥𝗕𝗹𝗮𝗰𝗸 𝗙𝗿𝗶𝗱𝗮𝘆 𝗦𝗮𝗹𝗲🔥
🎆50% off any self-paced #hacking course! Use code 𝗕𝗙𝗖𝗠50🎆
🚀Take advantage now!🚀
https://t.co/xCPEOq6nXI
NodeJS, Electron, Android, ios
#MobileSecurity📱#javascript #websecurity

[7ASecurity @7aSecurity]

This #privacy audit looks like the first LeaveHomeSafe #pentest ever, way below commercial apps:
Broken SSL validation, SD Card Leaks, 2FA Logic bypass, Screenshot leaks, several Face Recognition artifacts, etc. https://t.co/ZdwRW3vy5G

[Viyat Bhalodia @viyat]

@MtStHelensNVM @MSHInstitute Is there an indication of the cloud level on Wed?

[7ASecurity @7aSecurity]

👉Epic @owasp Virtual Training open!
⏰May 25-26 @ 12:00 - 16:00 EDT
📱Hacking #iOS and #IoT apps by Example
🕸️Hacking Modern #Web apps: Master the Future of Attack Vectors
Full line up: https://t.co/MLUHd0VS3T
📝Register: https://t.co/KGLrIBCaKy

[7ASecurity @7aSecurity]

🥁𝗙𝗿𝗲𝗲 𝗪𝗼𝗿𝗸𝘀𝗵𝗼𝗽: Hacking Modern Web apps with RCE and Prototype Pollution

💯hands-on: Lifetime access to slides, recording and vulnerable #NodeJS apps!

⏰Feb 11th, 18:00 - 19:00 CET

Register now!
https://t.co/3Wvb2wK62c

[7ASecurity @7aSecurity]

Do you want to learn about #Hacking #Android apps? No need to leave home!
"Hacking Android and IoT apps by Example" @ @owasp AppSec Days

Register now!

April 28-29, 12pm EST (USA) / 6:00pm CET (EU)
https://t.co/kDHqdmKpO6

[George RR Martin @GRRM]

2020 was directed by me.

[7ASecurity @7aSecurity]

Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors @HITBSecConf #HITB2020AMS

Register now, cut off date is March 9th. Please RT

https://t.co/BH36QM5VLT

[ Got 5 x 10% discount: [email protected] ]

[7ASecurity @7aSecurity]

Honored to be part of @HITBSecConf, join us for 100% hands-on training in 2020.04: Advanced Pwning & Fixing of #NodeJS and Electron apps, shells, injections and fun! #HITB2020AMS https://t.co/jRMLbZUO5X

[Davy Douhine @ddouhine]

Interesting talk by @7aSecurity about IJOP Chinese surveillance mobile app #deepsec

[Phil Venables @philvenables]

The Art of Influencing. A thread.

A critical measure of success for most security roles is the ability to influence. I’ve often found people think influence skills are innate - you have them or you don't. But, as with most “soft skills”, they can be learnt. Here are some:

1/16

[7ASecurity @7aSecurity]

Honored to be part of @WEareTROOPERS again, join us for 100% hands-on training in March 2020: Advanced Pwning & Fixing of Node.js and Electron apps, shells, injections and fun! #TR20 https://t.co/WIIVFvioA9

[7ASecurity @7aSecurity]

2020.04: @HITBSecConf Amsterdam hack #nodejs & #electron apps 90% hands-on, lifetime access to training portal with video recordings, lower price now! https://t.co/jRMLbZUO5X

[WellBuiltStyle @WellBuiltStyle]

Want immediately elevate your look?

Upgrade your footwear.

Similar looks here with the varsity style bomber. But check out the footwear. Notice how the suede boots add more polish and elevate the look vs the sneakers.

Credit: https://t.co/WkHOgPHdr2, https://t.co/Ili22nXTRK

[7ASecurity @7aSecurity]

Hack Android & iOS apps, Deep dive into the @OWASP_MSTG and MASVS, get lifetime training portal access, unlimited email support, and more! LASCON Austin TX October 22-23, plz RT https://t.co/dOurPGvcOe https://t.co/onPZiraCaL