@HackWitHerr

hackwither, security researcher & professional curious cat

Joined August 2023
  • Tweets14
  • Following10
  • Followers19
Bandana retweeted
APIsec
@apisec_aiSep 24
Last week on the GISEC Dark Stage in Dubai: "the ai let me in," a live demo of how chained MCP vulns turn an AI assistant into the way in. From APIsec Labs. #GISEC2026 #HackwithHer
1
2
126
A must read for anyone in Appsec! @HackWitHerr Bandana Kaur at @apisec_ai just released the most in-depth BOLA research, I've seen in years. The reality of BOLA findings does not match the reality of API testing. BOLA shows no meaningful decline from 2023 to 2026, a time where the most awareness of the problem peaked. So, the gap isn't knowledge, it's testing techniques and remediation. Check it out: labs.apisec.ai/research/bola…

Broken object level authorization: from invoice IDs to AI agents

What 200 disclosed HackerOne reports say about the half of BOLA almost nobody tests.

labs.apisec.ai
3
18
1,113
hot take that shouldn't be hot: most "AI red team" results aren't statistically valid, or the methodology isn't transparent enough to independently verify validity. #AISecurity
1
29
Pagoda, 98 Duryea Dr, Reading, PA 19602, United States in 1906??
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
1
1
200
i’ve watched a few videos of guys going through osint challenges and my conclusion is that you learn all of this and more by just being a curious girl on the internet
3
2
1
29
5,248
OSINT challenge :)
5
1
21
5,469
Load more