Michael Dahan (@MiHackThePlanet) | teapawt

Michael Dahan retweeted

We released a blog post @depi_ about Mean Time To Detect vs Meant Time To React, especially applied to Software Supply Chain Beautifully written by @vm00z 🔥 depi.security/blog/20261002-…

Mean Time to Destroy MTTD | Depi

MTTD can make security look better than it is. What matters is how quickly teams understand, contain, and prevent threats before they become breaches.

1

52

2,342

Michael Dahan retweeted

We're building Depi Red Team. Zero to a validated exploit in 3m 56s. Depi does the recon and validation, the red teamer builds the exploit locally on top. We also used Bug Bounty as a sandbox for our research and got XX,XXX$ bounties with it ;D Our team went from hours or days to minutes on the hardest exploits. I need help from Red Teamers and get some feedback. DM me what's missing or let's jump into a call ;D

17

164

10,589

Michael Dahan retweeted

Me a security practitioner stuck on Opus 4.8 because it’s the only model in the Cyber program

@claudeaiSep 22

Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family. It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.

18

307

19,972

Michael Dahan retweeted

Your security team went home. The agent looking for a way into your stack didn’t. Agents are going upstream. Ask the mathematicians.

Agents are going upstream. Ask the mathematicians.

Article · @0xLupin

15

107

32,965

Michael Dahan retweeted

Insane the number of vulnerabilities we are sending at @depi_ in Bug Bounty related to Github Actions. @github made a lot of committment to reduce the attack surface, but we're still finding a huge amount per week that we weaponise end to end. This vuln class is not dead.

1

79

5,100

Michael Dahan retweeted

I read the report. @0xMadder killed it with her first bounty 🔥 Follow her she’s about to drop some crazy research 😁

@0xMadderSep 30

First Tweet, first Bounty, 2026 is going great :))

6

231

20,963

Michael Dahan retweeted

@0xMadderSep 30

First Tweet, first Bounty, 2026 is going great :))

56

1,407

273,544

Michael Dahan retweeted

Like always Inti is doing some wizardry. Seems simple once you have the answer but you need to think about it 😁

Inti De Ceukelaire@securintiSep 8

how i hacked 320+ companies that replaced their cs team with "smart" ai agents: 1. drafted a gdpr request to support@ 2. changed the FROM header from my e-mail to yours (spoofing) 3. put myself in CC 4. ai agent responds with YOUR data to BOTH of us 😈 more tricks: @intigriti

2

83

20,296

Michael Dahan retweeted

Ben Sadeghipour

@NahamSecAug 12

I Went to the World's Biggest Hacker Conference (DEFCON VLOG) 👉🏼 youtu.be/4QQnW170C5g

9

241

12,699

Michael Dahan retweeted

The team is going to drop something huge here 🔥

Bug Bounty Village

@BugBountyDEFCONAug 9

Surprise new talk you absolutely won't want to miss! Team Depi "Melting the Frontier Lab" at 10.30 today in the Bug Bounty Village! A must see!

1

38

4,739

Michael Dahan retweeted

Ben Sadeghipour

Vulnerability disclosures hit different when it’s behind closed doors 👀👀

6

347

29,318

Michael Dahan retweeted

🤯

Ben Sadeghipour

Vulnerability disclosures hit different when it’s behind closed doors 👀👀

47

6,841

Michael Dahan retweeted

Ben Sadeghipour

Private disclosure party 🚨 "Melting the Frontier Labs" with @0xLupin. They're dropping some wild research including how they may have compromised a frontier lab via a supply chain attack. Talk followed by food+drinks. Comment "npm install" for the RSVP link 👇

92

188

23,288

Michael Dahan retweeted

I had the amazing chance to be with @_Worty for his first @Hacker0x01 Live Hacking Event in Berlin ! It was awesome to hang out again with all the hacker friends and tbh he rocked this event 🤟

5

135

4,814

Michael Dahan retweeted

Private disclosure party 🚨 “Melting the Frontier Labs” with @NahamSec. We’ll reveal how we discovered and developed one of our most complex supply chain attack paths, targeting a frontier lab. Talk, food and drinks. Comment “npm install” for the RSVP link 👇

39

93

9,955

Michael Dahan retweeted

Our @defcon talk with @adnanthekhan about how we made $100k+ in Bug Bounty with Supply Chain Attacks is out ! Let me know what you think 😁 youtube.com/watch?v=M3XU-4ce…

Breaking the Chain: Advanced Offensive Strategies in the Software Supply Chain | BBV, DEF CON 33

Speaker: Roni Carta & Adnan KhanPresented at: Bug Bounty Village, ...

3

170

14,219

Michael Dahan retweeted

1/ We found a new way to attack GitHub Actions: a TOCTOU inside workflows using find-comment. Cool thing to spray in Bug Bounty btw :P The cool part ? It was found 100% autonomously by Depi. No human in the loop. Here's the whole chain. 🧵

4

159

10,210

Michael Dahan retweeted

Anyone I know in SF next week up for a coffee ? 😁

8

2,265

Michael Dahan retweeted

Proud of @_Worty and @Vozec1 for the winning the latest @yeswehack LHE ! They are definitely underrated hackers and I’m sure the community will soon have the chance to see how amazing they are 🤟 Congratz 🔥

@yeswehackJun 27

Final score: bugs found, hackers crowned 👑 🥇 @Vozec1 and @_Worty 🥈 swdb 🥉 @PerceSecu 🩸 First Blood: @TheLaluka and p4st1s 💥 Biggest Impact: @Vozec1 and @_Worty Check out the final leaderboard of our #LiveHackingEvent with @PUMA: event.yeswehack.com/events/l…

1

36

3,540

Michael Dahan retweeted

We are currently working with @idnamaa and @Tristan_Phl to get our next batch of stickers out ! We will distribute them in the next conferences we will attend. I'll make sure to always keep some on me ;D So if you see me, don't hesitate to ask for stickers !

1

23

3,210