Offensively Defensive Continuous Developer #TryHarder
Joined June 2018
- Tweets402
- Following496
- Followers1K
- Likes643
rezaduty retweeted
๐จ Uniform token-level trust regions are not enough for LLM RL!
Our new paper: Beyond Uniform Token-Level Trust Region in LLM Reinforcement Learning.
We introduce CPPO, a drop-in mask that reallocates divergence budget by position & prefix drift ๐
arxiv.org/pdf/2606.10968
rezaduty retweeted
Continuous Delivery Security Labs 2026
open.substack.com/pub/devsecโฆ
๐ฅ Start engineering your career โ career.hadess.io
#githubactions #argocd #devsecops #devops #cd #github
rezaduty retweeted
Cybersecurity Career Coach that Turns Rookies into Pros.
After 7+ years creating content and collaborating with top security engineers & researchers, we've seen the same gaps over and over:
How to actually start and How to keep growing
we built: career.hadess.io
#job
rezaduty retweeted
CVE-2025-9959: smolagents Python Sandbox Escape
hazardlab.substack.com/publiโฆ
Python sandbox implementations often focus on blocking dangerous attribute access patterns like `obj.__class__` but forget that the same introspection is achievable through method invocation.
#python #cve
rezaduty retweeted
Last Friday at @BlackAlpsConf 2025, @noraj_rawsec explored the hidden security challenges of #Unicode ๐ค
With 1,000+ pages of specs, even small mistakes can become attack vectors.
Dive into the details ๐ synacktiv.com/ressources%253โฆ
rezaduty retweeted
Iโve been hunting on H1 for almost 3 years, ranked #18 in 2025, have always tried to contribute positively to the hacker community. Iโve earned around $500k in bounties and was on the road to $1M. Yet I donโt even have HSM, and I feel I havenโt been recognized as I should 1/4
@Hacker0x01 is now banning people without explanation or providing how the terms and conditions were violated. While other platforms are advancing, H1 revolutionary new vision is to track hackers on social media, make assumptions and ban them without a real proof.
rezaduty retweeted
๐ฆ๐ฒ๐ฐ๐๐ฟ๐ฒ ๐ฏ๐ ๐๐ฒ๐๐ถ๐ด๐ป ๐ฅ๐ฒ๐ฎ๐นโ๐ง๐ถ๐บ๐ฒ ๐๐ผ๐บ๐บ๐๐ป๐ถ๐ฐ๐ฎ๐๐ถ๐ผ๐ป โ ๐๐๐๐ฎ๐ฐ๐ธ & ๐๐ฒ๐ณ๐ฒ๐ป๐๐ฒ ๐ฃ๐น๐ฎ๐๐ฏ๐ผ๐ผ๐ธ
open.substack.com/pub/devsecโฆ
Donald ๐ฑโโ๏ธ, a developer and chaos wrangler, watched PacketPete, our mischievous red-teamer, go wild on his real-time stack ๐
rezaduty retweeted
NEED YOUR HELP!
My Friend/Teacher Soroush (@irsdl) Is looking for a new company to join, you know him as the .NET-God, the guy who has popped exchange, sharepoint, has maintained ysoserial_.net for years, contributed to the exploitation scene numerous times, taught all of you about what .net ghost webshells are, taught you about what viewstate exploitation is, how .net remoting exploitation issues can be solved, iis cookieless, web_config exploitation, countless of blogs, talks, techniques,...
but companies keep saying:
"we aren't hiring right now!"
if i was in position of hiring, woudln't wanna miss out on having one of THE BEST in my team
you're retweet is Extremely appreciated โค๏ธโ๐ฅ
soroush, if you see this, don't hate me, had to do it without telling you
rezaduty retweeted
๐ฆ๐ฒ๐ฐ๐๐ฟ๐ฒ ๐ฏ๐ ๐๐ฒ๐๐ถ๐ด๐ป - ๐๐
๐ฒ๐ฐ๐๐๐ถ๐ผ๐ป ๐ฎ๐ป๐ฑ ๐๐ถ๐น๐ฒ ๐ ๐ฎ๐ป๐ฎ๐ด๐ฒ๐บ๐ฒ๐ป๐
open.substack.com/pub/devsecโฆ
Syd, a senior Spring developer, trusted her file upload service with basic extension validation. "Only .pdf and .jpg files allowed," she thought.
#appsec #devsecops
rezaduty retweeted
Say hello to Eternal Tux๐ง, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130)
willsroot.io/2025/09/ksmbd-0โฆ
Cheers to @u1f383 for finding these CVEs + the OffensiveCon talk from gteissier & @laomaiweng for inspiration!
rezaduty retweeted
Secure by Design Frontend Security
open.substack.com/pub/devsecโฆ
Imagine Frontend used dangerouslySetInnerHTML to render user comments without sanitization. An attacker crafted malicious JavaScript that stole authentication tokens from other users' browsers.
Learn more ๐
rezaduty retweeted
๐๐ฐ๐ฐ๐ฒ๐๐ ๐๐ผ๐ป๐๐ฟ๐ผ๐น ๐ ๐ถ๐ฑ๐ฑ๐น๐ฒ๐๐ฎ๐ฟ๐ฒ ๐ฃ๐น๐ฎ๐๐ฏ๐ผ๐ผ๐ธ
open.substack.com/pub/devsecโฆ
Imagine zero trust applied only to north-south traffic. East-west service calls trusted cluster networks implicitly.
Learn more ๐
rezaduty retweeted
๐ฆ๐ฒ๐ฐ๐๐ฟ๐ฒ ๐ฏ๐ ๐๐ฒ๐๐ถ๐ด๐ป - ๐ช๐ฒ๐ฏ ๐ฆ๐ฒ๐ฟ๐๐ถ๐ฐ๐ฒ & ๐๐ฃ๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ย
open.substack.com/pub/devsecโฆ
The panic began. It wasn't the new API. Learn more ๐
rezaduty retweeted
๐ฆ๐ฒ๐ฐ๐๐ฟ๐ฒ ๐ฏ๐ ๐๐ฒ๐๐ถ๐ด๐ปย - ๐๐๐๐ต๐ฒ๐ป๐๐ถ๐ฐ๐ฎ๐๐ถ๐ผ๐ป
open.substack.com/pub/devsecโฆ
#appsec #authentication #identity #security #devsecops #bugbountytips #oauth #oidc
rezaduty retweeted
Behavioral Intelligence - BEHINT
Ever heard of stealing conversations from a lightbulb? turning desk lamp vibrations into crystal-clear audio. Pure side-channel magic from Ben-Gurion's mad scientists.
full analysis: open.substack.com/pub/redteaโฆ
#osint #redteam #ai #behint
rezaduty retweeted
Java Spring Bug Hunter's Secure Coding Playbook
open.substack.com/pub/devsecโฆ
#appsec #java #productsecurity #spring #springsecurity #devops #devsecops #bugbountytips
rezaduty retweeted
๐๐ช๐ฆ ๐ฃ๐ฟ๐ผ๐ฎ๐ฐ๐๐ถ๐๐ฒ ๐๐ฒ๐ณ๐ฒ๐ป๐ฐ๐ฒ: ๐ง๐ต๐ฒ ๐๐ฟ๐ ๐ผ๐ณ ๐ช๐ฎ๐ฟ ๐ถ๐ป ๐๐น๐ผ๐๐ฑ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐
open.substack.com/pub/devsecโฆ
#aws #cloud #redteam #devops #devsecops
rezaduty retweeted
AI For OSINT - Texture Intelligence
Read the full analysis: lnkd.in/dYakXZSf
The Pentagon leaks weren't solved by cyber forensicsโthey were cracked by GRANITE PATTERNS.
#ai #osint #redteam #pytorch #generativeai
rezaduty retweeted
๐๐ผ๐ป๐๐ฎ๐ถ๐ป๐ฒ๐ฟ ๐ข๐ฆ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐ฃ๐น๐ฎ๐๐ฏ๐ผ๐ผ๐ธ
open.substack.com/pub/devsecโฆ
Maya ๐ฉโ๐ป was about to docker pull redis:latest when her security scanner screamed - the image contained 47 critical vulnerabilities and suspicious network activity!
#devops #devsecops #containers
