Full time Bug Bounty Hunter | 2x MVH YesWeHack LHE | @CaidoIO ambassador | Weekly newsletter at https://xitter.cf/t.co/25ZYGAYiQc

Paris
Joined March 2020
I've been doing bug bounty for years. I just published a long piece on what it actually feels like in 2026, and why something fundamental has shifted. aituglo.com/state-of-bug-bou… Would love to get your feedback on it here on X or directly on the blog
9
58
5
321
27,772
Aituglo - Cassim retweeted
I’m not gonna lie, I love bug bounty hunting, and it’s thanks to bug bounty that I am where I am today. But man, at this point, the whole ecosystem feels completely broken… and unsustainable if things keep going this way. Duplicates, lower bounties, endless triage times, and then more duplicates. The market feels completely oversaturated. I love AI and use it for pretty much everything. And let’s be real, hunting without AI isn’t sustainable anymore either. The problem is that everyone now has access to the same (or almost the same) tools, which inevitably leads to similar findings. Some people will say, “Just go back to manual hunting.” But my answer is simple: AI can find those same manual bugs, and often much more. I’ve had the opportunity to get hands-on with Mythos and Daybreak Red, and I can tell you that these models are extremely good at finding complex vulnerabilities and chaining multiple bugs together. So, to those who still believe manual hunters will maintain a significant edge, I think you’re either still in the denial phase or simply haven’t had the opportunity to experiment with these powerful models. Let’s see what the future holds for bug bounty hunting. But I genuinely believe the next two years, at least, will be extremely challenging for anyone trying to make a living from it the way they used to. I love this community and everything it has given me, but right now, I’m pretty pessimistic about where we’re heading.
17
26
3
331
15,149
The most interesting, stimulating part of bug bounty is gone. Codex does the 15 hours of digging in 30 minutes now. It's impressive and a little sad. So I'm learning to find that stimulation somewhere else. aituglo.com/aituweek-102/
2
1
22
1,152
So interesting and true, a must-read for sure
“Security researchers are doomed because of AI.” I kept hearing versions of this, so I went back through 500 years of people saying the same thing every time a machine learned a human skill. Some were idiots. Some were right. Here’s where I landed.
7
803
The problems in bug bounty are exactly the same as two years ago. Focus a niche, pick the right program, dig deep. The only thing that changed is the speed. New aituweek on what a week looks like right now. aituglo.com/aituweek-98/ I also made a first review of my @BusyFocusApp
1
15
934
Aituglo - Cassim retweeted
It’s Thursday, Not bounty thursday but close enough, here’s a live hacking vlog! youtube.com/watch?v=tJhuAINZ… TLDR : Google invited me to Seoul for one of the most unique bug bounty events I've ever attended. I joined an invite-only group of security researchers attempting to find vulnerabilities in their flagship AI products. Together we spent several days trying to break Google's flagship AI products and uncover real impactful security vulnerabilities and attack chains. In this vlog you'll follow the entire journey, from arriving in Seoul, meeting the other hackers, and what it actually feels like to not only hang out with, but also compete against some of the best google VRP researchers in the world. 🏆 Results: • 2nd Place Overall (Most Valuable Hacker) • Most Creative Report Award • And Multiple valid bug bounty submissions. If you're interested in AI security, bug bounty hunting, offensive security, or just curious what these invite-only hacking events look like behind the scenes, this one's for you. Ft hackers like @rez0__ @Rhynorater @0xLupin @busf4ctor @valent1nee @svennergr and many more,
14
19
3
132
19,718
- Show Us Your Most Creative Caido + AI Workflow! We're collecting stories about creatively using Caido with AI to discover, investigate, validate, or disprove bugs. The best stories will be featured at DEF CON and earn some prizes from CTBB & @CaidoIO forms.gle/kGBLJc166UV8AA226
2
10
1
47
8,280
Aituglo - Cassim retweeted
Next Stream 👉️ 5 p.m. CEST on Monday 20th of July in E.N.G.L.I.S.H. 🧨 We'll gather with @TheSytten (Staff) & @aituglo (Ambassador) to chat about the latest @CaidoIO Releases, Plugins, and Adoption of the Agentic Era! - FYI 1 : Not the usual date & time (France & Quebec) - FYI 2 : Not the usual language (English for abroad friends) - FYI 3 : Have a nice say you sexy little bug 😘 - FYI 4 : Go update your wordpress yo, shit's on fire! *sigh* Seeya at twitch.tv/thelaluka 💝
🤖 Made with AI
1
4
7
879
Aituglo - Cassim retweeted
Il lance une IA sur un programme avant de dormir. Au réveil : 10 bugs trouvés. La moitié étaient des doublons. @aituglo vit du bug bounty depuis 4 ans. On a parlé argent, IA, plateforme (@yeswehack, @Hacker0x01...) et de ce qui reste du métier. ▶️ youtu.be/aN1DahbPR4Q
1
12
119
5,046
Everyone posts about the perfect Claude setup. Nobody talks about what you do while it works. Me: I scroll Instagram and spin up three more sessions. Somewhere along the way, I stopped producing and started just consuming. aituglo.com/aituweek-95/
2
23
945
I realized I've been using Claude wrong for months. I just told it "keep going" on a loop and triaged the 50 bugs it threw at me to keep 1 or 2 potential leads. You'd never manage a real intern that way. And I'm discussing it with other stuff on my Aituweek aituglo.com/aituweek-94/
5
44
2,078
Very interesting setup from @Icare1337 !
Meet Jarvis, the Iron Man-inspired Claude Code setup steered by @Icare1337 🤖 This self-managing, multi-agent system has turbocharged his Bug Bounty workflow, but one rule remains ironclad: every finding needs human validation 👇 yeswehack.com/community/llms…
16
3,504
That’s the best pentesting report platform I ever tried, go check it
It's official: Vulnotes is live 🎉 The platform for your entire pentest engagement ✍️ Visual report editor 🔁 Built-in review workflow 📤 Export to docx, pdf, csv.. 🤖 AI: screenshots → findings, translate, rewrite 🔌 API + MCP 👉 vulnotes.com
9
1,069