Protecting the World’s Largest Crypto Exchanges & Financial Institutions 🛡️ Stay Secure and Turn your FearsOff 🛡️
Dubai, UAE
Joined October 2014
- Tweets292
- Following17
- Followers2.1K
- Likes282
FearsOff Cybersecurity retweeted
Alibaba just released fastjson 1.2.84 on the archived project
github.com/alibaba/fastjson/…
Original write-up on the fastjson 1.2.83 gadget-free RCE.
Have fun reading, I hope you missed writeups without AI slop.
Comment here your opinion.
fearsoff.org/research/fastjs…
FearsOff Cybersecurity retweeted
The whole fastjson is now vulnerable to RCE, even the latest 2.x.
Upgrade to nonautotype versions or turn on safemode.
FearsOff Cybersecurity retweeted
I heard rumors that an OpenAI model broke into Hugging Face by finding a Squid 0day.
I did find Squid 0day RCE, 6 hours of Opus and Sol.
FearsOff Cybersecurity retweeted
Original write-up on the fastjson 1.2.83 gadget-free RCE.
Have fun reading, I hope you missed writeups without AI slop.
Comment here your opinion.
fearsoff.org/research/fastjs…
FearsOff Cybersecurity retweeted
We found a gadget-free RCE in Fastjson 1.2.83 - the final release of the 1.x line, and still one of the most widely-deployed Java JSON libraries in production today, even with 2.x around.
No classpath gadget. One payload-> RCE.
FearsOff Cybersecurity retweeted
I got permanently banned from @Hacker0x01. Account deleted. No explanation.
Years of work gone overnight. Submission history, achievements, leaderboard ranks, every contribution I made to the security and crypto ecosystems through HackerOne. Wiped, like I was never there.
FearsOff Cybersecurity retweeted
May was another busy month in cybersecurity.
The latest edition of CyberWarfare Chronicles is live and it highlights some of the most notable cyber incidents and developments from across the globe.
FearsOff Cybersecurity retweeted
🎤 Speaker Announcement
We're proud to welcome Marwan Hachem, CEO, FearsOff, as a featured speaker at MENA Blockchain Week 2026.
Marwan Hachem CEO, FearsOff | Cybersecurity Visionary | Ethical Hacker Marwan leads FearsOff, securing leading crypto exchanges, networks, and fintech platforms across Web2 and Web3. He specializes in vulnerability research and supports government CERTs and national cyber resilience efforts.
@FearsOff
ready for powerful insights, real-world strategies, and forward-thinking perspectives shaping the future of Blockchain in MENA.
One City. One Week. One Nation. 🔥
40+ events. 5,000+ attendees. 100+ speakers.
📍 Dubai | May 18 – May 24, 2026
🎟️ Register → luma.com/MENABCW
🌐 menablockchainweek.ae
#MENABCW #ProudOfUAE #Dubai
FearsOff Cybersecurity retweeted
Prediction markets are exploding - turning real-world events into tradable probabilities.
But here’s the part most people are ignoring:
As these platforms grow, they’re becoming prime targets for cyber attacks.
Let’s break it down 👇
• Platforms handling financial bets + sensitive data are magnets for hackers seeking profit or market influence
• A single breach could distort probability signals - shaping trader decisions, media narratives, and even public perception
• APIs, smart contracts, and trading engines create powerful systems… but also expand the attack surface
• Compromised accounts or backend systems could enable strategic trades, data leaks, or silent manipulation
This isn’t just a tech problem.
It’s a trust problem.
And in prediction markets, trust = value.
The platforms that win won’t just be the most accurate…
They’ll be the most secure.
🔐 Building a trading platform, fintech product, or Web3 app? Let’s make it resilient
💥 Hack yourself before someone else does
📩 DM @fearsoff or comment “SECURE” and we’ll reach out.
#CyberSecurity #PredictionMarkets #Web3 #Fintech #PlatformSecurity #CyberRisk #FearsOff
FearsOff Cybersecurity retweeted
So much drama today, people losing their minds over this "new" feature from Anthropic, calling it the death of pentesting and bug bounties. Even stocks tanked for companies that have nothing to do with it. Why?
Because most investors in this space don't know shit about security or what Claude AI actually dropped. We have been running vulnerability scans with various AI models, including Opus 4.6 for months already. This release is basically just a handy button to run what used to be a chain of prompts doing the exact same thing.
Investors: Buy back in.
Bug hunters and pentesters: relax and level up with it. Anthropic’s social media team: Bravo! This clickbait worked out!
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…
FearsOff Cybersecurity retweeted
@consensus_hk 2026 - Hong Kong, Feb 10-12. I’ll be there.
If you’re into Web3, AI, or cybersecurity and want to swap ideas (or grab a quick coffee), let’s connect. Always down to talk crypto/AI protection, smarter threat detection, and stronger digital ops - especially where it overlaps with what we’re building at @FearsOff.
Who's in? DM me and let's make it happen.
#Consensus2026 #HongKong #Web3 #Cybersecurity #Blockchain
FearsOff Cybersecurity retweeted
Our latest research is out!
If you missed a good write-up for nice vulnerabilities, I brought you one!
Enjoy the reading! @FearsOff @Cloudflare
FearsOff Cybersecurity retweeted
🔐 Strategic Partnership: @DigiMaaya × @FearsOff 🚀
@Utsav_DAR, CEO of @DigiMaaya | @mar1hachem, CEO of @FearsOff
When two elite teams come together, they don’t just collaborate they raise the bar.
@DigiMaaya partners with @FearsOff, a globally trusted cybersecurity firm protecting top crypto exchanges, fintech platforms, and critical national infrastructure.
@FearsOff expertise spans offensive security, red & purple teaming, exchange-level assessments, with 24/7 SOC monitoring, incident response, threat hunting, Web3 audits, and enterprise cyber risk advisory.
This partnership hardens @DigiMaaya's exchange infrastructure, user protection, and platform resilience tested the way attackers think, before they strike.
Innovation needs speed. Speed needs security.
#DigiMaaya #FearsOff #Partnership #CyberSecurity #CryptoExchange #Web3Security
FearsOff Cybersecurity retweeted
There is a simple way to find a GitHub profile just by knowing an email.
I have never seen this mentioned publicly.
Curious who already knows this - or who wants to know.
Leave a comment.
#bugbounty #github #OSINT
We at @FearsOff know many secrets! Follow for more!
FearsOff Cybersecurity retweeted
A little morning research.
New React/Next.js CVE-2025-55183 Source code leakage PoC
Bypasses Cloudflare!
@FearsOff #react #bypass #cloudflare
FearsOff Cybersecurity retweeted
Crypto’s noisy, but the signal is clear: Security starts with an offense-first mindset.
Join us as Marwan (@FearsOff - #1 ranked offensive-security firm) breaks down - black/white/gray hats, offense vs defense, CEX vs on-chain vulnerabilities, and how AI is changing the battlefield.
We wrap with concrete tips you can use today.
@mar1hachem
FearsOff Cybersecurity retweeted
I had the pleasure of contributing to a @Cointelegraph article by @ezrareguerra about the UXLink incident.
UXLink hack shows risks of centralized control in DeFi projects.
Believe it or not this was not a paid feature, just an expert opinion.
@FearsOff
Read the full article below:
cointelegraph.com/news/uxlin…
FearsOff Cybersecurity retweeted
How to access servers behind Cloudflare by bypassing the firewall?
@FearsOff #bugbountytips #cloudflare #firewall #bypass
1) Found a sweet hostname but Cloudflare Firewall blocks you? There's a neat trick attackers can use if the origin is misconfigured.
