Malik Mesellem (@MME_IT) header
Malik Mesellem (@MME_IT) profile picture

Malik Mesellem

@MME_IT

Specialized in Penetration Testing, Hacking, InfoSec Training & Evil Bee Hunting | Founder of #bWAPP, a buggy web app | I still believe in heroes!

mmesec.com
Joined February 2011
  • Tweets3.9K
  • Following82
  • Followers4.7K
663Media
Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)Photo by Malik Mesellem (@MME_IT)
🎉 bWAPP has reached 1 MILLION downloads! 🚀 🐝 Our intentionally vulnerable web app helps developers and security professionals worldwide to identify and secure vulnerabilities. Thank you for your trust and support! 🙌 More: sourceforge.net/projects/bwa… #bWAPP #EthicalHacking
11
9
5,636
🚨 Madness! Websites relentlessly scanned and exploited by script kiddies and cyber criminals 🤖💀 The Internet was built on openness, trust and collaboration. We're destroying its very foundations. LOSERS 🤬
1
147
🚨🐘 PHP2Shell: When decades-old bugs become weaponized by AI 💥 Unauthenticated RCE 🔓 Sensitive memory disclosure 🌐 Potential impact across 70% of the web Old flaws. New capabilities. A serious wake-up call! 🔗 wiz.io/blog/php2shell-php-rc… #CyberSecurity #News #PHP2Shell #AI
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
155
🥶🧊 Hackers turned French supermarket fridges into ovens, pushing temperatures up to 50°C! 🍖🔥 Tons of fresh and frozen food spoiled. 💡 The lesson? IoT & OT security matter! 🔐 🔗 bbc.com/news/articles/crq5nz… #CyberSecurity #News #IoT #OTSecurity
Fridges in French supermarkets hit by cyber attack

Fridges in French supermarkets hit by cyber attack

Hundreds of stores were targeted by the overnight hack, which spoiled fresh and frozen food estimated to be worth millions of euros.

bbc.com
125
🚨 Active exploitation alert! Critical Bricksforge WordPress plugin flaw allows unauthenticated attackers to upload and execute PHP code remotely. 🔧 Affected: versions ≤ 3.1.8.9 🛡️ Patch immediately 🔗 thehackernews.com/2026/10/at… #CyberSecurity #News #WordPress #RCE
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress sites.

thehackernews.com
1
1
474
What I like most at Black Hat are the after parties... 🎉🍸...but of course, the intensive training sessions come first 😅 #BlackHatUSA #AzureSecurity #Pentesting #CyberSecurity #Infosec
Image from Malik Mesellem (@MME_IT)
Image from Malik Mesellem (@MME_IT)
Image from Malik Mesellem (@MME_IT)
253
🚨 TrickBot is back with a stealthier command and control method! Researchers have identified a new TrickBot variant that replaces traditional HTTP communications with DNS tunneling, making malicious traffic harder to detect... 🔗 hackread.com/new-trickbot-va… #CyberSecurity #News
New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

Follow us on all major social media platforms @Hackread

hackread.com
246
🔒 A critical #CheckPoint #SmartConsole authentication bypass is already being exploited in the wild, potentially granting full administrative access. Patch. Restrict management access. Review your exposure! 🔥 🔗 thehackernews.com/2026/07/ch… #CyberSecurity #News
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point patches actively exploited CVE-2026-16232, a SmartConsole auth bypass that grants full admin access on exposed management servers.

thehackernews.com
1
284
🚨 Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin Ransomware 🔗 cybersecuritynews.com/cve-20… #CyberSecurity #News
Hackers Exploiting Palo Alto's PAN-OS Vulnerability to Deploy Qilin Ransomware

Hackers Exploiting Palo Alto's PAN-OS Vulnerability to Deploy Qilin Ransomware

Arctic Wolf reveals threat actors exploiting Palo Alto PAN-OS flaw CVE-2026-0257 to deploy Qilin ransomware, bypassing VPN auth for domain-wide encryption.

cybersecuritynews.com
243
🚨 DEF CON 34 Giveaway! 🎟️ I have a few #DEFCON #workshop #tickets available that I won’t be using. Check our socials for an overview... facebook.com/mmebv/ linkedin.com/company/mme/ 👉 Reply if you're attending and would love to join a workshop!
MME | Menen

MME | Menen

MME, Menen. 1,403 followers · 1 talking about this · 7 were here. MME is an independent company specialized in Security Audits, User Awareness, PenTesting & Training.

facebook.com
174
🛑 A new #Linux kernel exploit (CVE-2026-46331) gets root without modifying a single file on disk Details 🔗 thehackernews.com/2026/06/ne… #CyberSecurity #News
New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

CVE-2026-46331 lets local users gain root on affected Linux systems by corrupting page-cache memory through act_pedit.

thehackernews.com
1
4
426
🧪 Optimizing web application security scans for #bWAPP 🔐 Great walkthrough from Qualys on how to fine-tune vulnerability scanning for bWAPP 🐝💻 🔗 blog.qualys.com/product-tech… #AppSec #CyberSecurity #OWASP #bWAPP
What is bWAPP? | Web Application Security Testing Made Easy with Qualys | Qualys

What is bWAPP? | Web Application Security Testing Made Easy with Qualys | Qualys

Learn what bWAPP is and how to optimize a web application security scan for the buggy web application. Discover best practices to strengthen app security with Qualys.

blog.qualys.com
2
281
🚨 FortiBleed: Global compromise of #Fortinet #FortiGate firewalls 🌍🔥 📎 socfortress.medium.com/forti… #CyberSecurity #News #FortiBleed
FortiBleed: Global Compromise of 75,000 Fortinet Firewalls

FortiBleed: Global Compromise of 75,000 Fortinet Firewalls

Intro

socfortress.medium.com
338
🚨 Microsoft has released a mitigation for YellowKey BitLocker bypass (CVE-2026-45585) 🛡️ This exploit could allow attackers to bypass BitLocker protection 🔓 and access sensitive data 💾 🔗 thehackernews.com/2026/05/mi… #CyberSecurity #News
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

Microsoft released mitigations for YellowKey, a publicly disclosed BitLocker bypass tracked as CVE-2026-45585 with a CVSS score of 6.8.

thehackernews.com
681
🚨 Rockstar’s GTA Game Hacked 🚨 Rockstar Games has confirmed a data breach after the hacking group ShinyHunters exploited a third-party integration 🎮🔓💥 Data security & third-party risk strike again… ⚠️ 🔗 More: cybersecuritynews.com/rockst… #CyberSecurity #News #Hacking
Rockstar's GTA Game Hacked - Attackers published 78.6 Million Records Online

Rockstar's GTA Game Hacked - Attackers published 78.6 Million Records Online

Rockstar Games has confirmed a data breach after the notorious hacking group ShinyHunters exploited a third-party integration to access the company’s internal Snowflake data warehouse, ultimately...

cybersecuritynews.com
743
Just signed up for trainings at Black Hat USA 2026 🖤 Back to learning, improving, and pushing limits 💻🔥 Feeling the sweat... but loving every minute 😅 Our mission: delivering top security for our loyal clients 🔐 #PenTesting #SecurityAudit #EthicalHacking #BlackHat #BHUSA
Image from Malik Mesellem (@MME_IT)
605
Since today, my daughter wants to be a 'good' hacker 🦄💻 Cybersecurity just got a whole lot more ✨ magical ✨ #pinkponygirl #metasploit #securityaudit #pentesting
Image from Malik Mesellem (@MME_IT)
516
🚨 Massive iPhone Security Alert Hundreds of millions of iPhones could be at risk 📱 A new hacking technique, DarkSword, is actively being used by Russian threat actors 🇷🇺 🔗 wired.com/story/hundreds-of-… #CyberSecurity #News #iPhone #iOS18 #Infosec #SecurityAudit
Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

A powerful iPhone-hacking technique known as DarkSword has been discovered in use by Russian hackers. It can take over devices running iOS 18 that simply visit infected websites.

wired.com
2
473
⚠️ FortiOS Authentication Bypass Vulnerability Lets Attackers Bypass LDAP Authentication 🔗 cybersecuritynews.com/fortio… #CyberSecurity #News
FortiOS Authentication Bypass Vulnerability Lets Attackers Bypass LDAP Authentication

FortiOS Authentication Bypass Vulnerability Lets Attackers Bypass LDAP Authentication

Fortinet has disclosed a high-severity authentication bypass vulnerability in FortiOS, tracked as CVE-2026-22153 (FG-IR-25-1052), that could allow unauthenticated attackers to sidestep LDAP authent...

cybersecuritynews.com
1
414
🎧📡 Hundreds of millions of audio devices need a patch! 🚨🔐 Prevent wireless hacking & tracking 🔗 wired.com/story/google-fast-… #CyberSecurity #News
Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking

Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking

Flaws in how 17 models of headphones and speakers use Google’s one-tap Fast Pair Bluetooth protocol have left devices open to eavesdroppers and stalkers.

wired.com
391
👀 F5 just confirmed a nation-state breach that went undetected for months 🚨 Hackers stole BIG-IP source code and data on undisclosed vulnerabilities. 🔗 cybersecuritydive.com/news/f… #CyberSecurity #News
Nation-state hackers breached sensitive F5 systems, stole customer data

Nation-state hackers breached sensitive F5 systems, stole customer data

The federal government is scrambling to determine if any agencies have been hacked.

cybersecuritydive.com
1,158
Load more