{ "name": "Corey J. Ball", "author": "Hacking APIs", "creator": "https://xitter.cf/t.co/y3EHBlzHvJ", "is_admin": true }
Grants Pass, OR
Joined May 2020
- Tweets1.4K
- Following851
- Followers14.1K
- Likes4.4K
Pinned Tweet
The Hacking APIs Conference is back for 2026!
HAC NYC returns May 14th. CFP is open.
Got a live API hack? A breach case study? Research that made a security team sweat? Submit it.
Vulnerabilities that shipped. Exploits that worked. Defenses that held.
hAPI_hacker retweeted
Your next security skill starts with a good book.
Save 30% on hacking and security books with code STAYSHARP through October 9.
Print books include the free ebook. Sale excludes preorders.
nostarch.com/catalog/securit…
ALT No Starch Press Cybersecurity Awareness Month sale graphic. Sharpen your defenses with 30% off cybersecurity books using code STAYSHARP through October 9. Excludes preorders. Featured books are Foundations of Cybersecurity, 2nd Edition; Practical AI Security; Cybersecurity for Small Networks; Designing Secure Software; Cybersecurity Tabletop Exercises; and Practical Purple Teaming.
hAPI_hacker retweeted
Huge shoutout to @hAPI_hacker for gifting me an ASCP voucher back in April 🙏
I just passed my ASCP exam! 🎉
Your generosity goes a long way Thank you!
hAPI_hacker retweeted
It takes a while to build the confidence, but there's no future where you're manually reviewing every line of agent code. Not much acceleration in that. You need adversarial agent reviews, you need automated testing, and maybe you spot check. That's it. From prompt to production!
hAPI_hacker retweeted
Absolutely incredible research by @garethheyes
One email, two readers.
:before and :after inject text into the page. An AI browser reading the message does not see that text.
opacity:0.00000001 does the reverse. The victim cannot read the element, but the AI browser can.
Read CSS:the bomb inside your inbox by Gareth to learn more 👇
portswigger.net/research/css…
hAPI_hacker retweeted
In less than 24 months there will be a clip of a high profile CRO explaining this reality to a (much smaller) room of sales reps.
hAPI_hacker retweeted
🌉 Sept. 24: Join us at our next Agents & APIs SF Dev Meetup featuring:
👉 @mlhassett, Sr. Developer Advocate, @canva
👉 @binsquares, founder, @smolmachines (YC P26)
👉 @poojamakes, Sr. Developer Advocate Enterprise Adoption, @astropods_
👉 @anandPa94, founder, @tryscope_app (YC P26)
Sign up here: luma.com/Sept-SF-Agents-APIS…
hAPI_hacker retweeted
Attacker vs. Defender AI Advantage
danielmiessler.com/blog/atta…
hAPI_hacker retweeted
Think you're late to AI security? The field is just starting.....
Sat down with my friend Jason Haddix (@Jhaddix) the guy who literally defined AI pentesting methodology, to show you how to become an AI hacker/pentester from scratch!
Watch the full video here --->
youtu.be/_yfiUQSbdPY?si=qUEv…
hAPI_hacker retweeted
One slot left at apisec|CON. CFP closes midnight PT today.
Oct 21. Single track, ~7 talks.
Theme is exploitability — chains you've actually walked, not CVSS scores you've read.
If you've got the talk, send it:
conf.apisecuniversity.com/
@hAPI_hacker @apisecu
hAPI_hacker retweeted
@apisec_ai
One slot left at apisec|CON. CFP closes at midnight PT tomorrow.
Oct 21. Single track, ~7 talks.
Theme is exploitability — chains you've actually walked, not CVSS scores you've read.
If you've got the talk, send it:
conf.apisecuniversity.com/
hAPI_hacker retweeted
Jev is now available to everyone. No waitlist.
Start using it here: console.typesafe.ai
hAPI_hacker retweeted
Today we are releasing a 1 page version of “Hacking Your Career”
arcanum-sec.github.io/hyc/
We get a bunch of students and early career-seekers looking for resources and advice of getting their 1st gig.
This resource gives all those and more; free trainings, free certificates for your résumé, advice on résumé design, information on career verticals, small sections on interviewing and the hiring process, and more! 🫶🫶
hAPI_hacker retweeted
Hermes now has first-class support in Omarchy, @DHH’s Arch-based agentic Linux distribution.
Install the desktop app from the AI menu, or make Hermes your default terminal agent. Your Omarchy theme sets the colors in the desktop app, the TUI and the CLI.
omarchy.org
hAPI_hacker retweeted
Made a Cybersecurity Resume Reviewer AI skill that I've been using for some mentees, made it public for anyone who is interested in using it as well. Hope others find it useful (also open to feedback or pull requests). github.com/mubix/cyber-resum…
hAPI_hacker retweeted
Cyber is having a moment
Across 21 major software companies, including Apple, AWS, Microsoft, and Google:
- Reported critical vulnerabilities never cleared 100 per month in four years
- Since spring they've jumped to over 600 per month
Charts of the Week: a16z.news/p/chart-of-the-wee…
APIsec|Con is back! This round we are focusing on the future of appsec in the age of AI.
Oct 21, 12 to 4 PM ET. Four hours, no vendor pitches.
Did your agent escape its sandbox and hack your neighbor?
Did your MCP server hand an attacker a valid token because a tool description told it to?
Did a model-written endpoint ship with BOLA and pass every test your other model wrote?
We want to hear from you!
The Call For Papers is open!
hAPI_hacker retweeted
If you're looking for some more advanced reading, @garethheyes figured out how to use CSS in emails to steal passwords. This is what platinum tier security research looks like.
portswigger.net/research/css…
hAPI_hacker retweeted
Cybersecurity depends on people whose work is rarely recognized. The innovators and builders of open source tools. The defenders and incident responders. The mentors.
As a Difference Makers Awards Advisory Board member, I invite you to submit your nomination and recognize the exceptional work across the security community.
Nominations are open now through September 14.
Nominate your Difference Maker here: go.sans.org/H7QUx6
