hAPI_hacker retweeted
Your next security skill starts with a good book.
Save 30% on hacking and security books with code STAYSHARP through October 9.
Print books include the free ebook. Sale excludes preorders.
nostarch.com/catalog/securit…

ALT No Starch Press Cybersecurity Awareness Month sale graphic. Sharpen your defenses with 30% off cybersecurity books using code STAYSHARP through October 9. Excludes preorders. Featured books are Foundations of Cybersecurity, 2nd Edition; Practical AI Security; Cybersecurity for Small Networks; Designing Secure Software; Cybersecurity Tabletop Exercises; and Practical Purple Teaming.
hAPI_hacker retweeted
Absolutely incredible research by @garethheyes
One email, two readers.
:before and :after inject text into the page. An AI browser reading the message does not see that text.
opacity:0.00000001 does the reverse. The victim cannot read the element, but the AI browser can.
Read CSS:the bomb inside your inbox by Gareth to learn more 👇
portswigger.net/research/css…
hAPI_hacker retweeted
In less than 24 months there will be a clip of a high profile CRO explaining this reality to a (much smaller) room of sales reps.
hAPI_hacker retweeted
🌉 Sept. 24: Join us at our next Agents & APIs SF Dev Meetup featuring:
👉 @mlhassett, Sr. Developer Advocate, @canva
👉 @binsquares, founder, @smolmachines (YC P26)
👉 @poojamakes, Sr. Developer Advocate Enterprise Adoption, @astropods_
👉 @anandPa94, founder, @tryscope_app (YC P26)
Sign up here: luma.com/Sept-SF-Agents-APIS…
hAPI_hacker retweeted
Attacker vs. Defender AI Advantage
danielmiessler.com/blog/atta…
hAPI_hacker retweeted
Think you're late to AI security? The field is just starting.....
Sat down with my friend Jason Haddix (@Jhaddix) the guy who literally defined AI pentesting methodology, to show you how to become an AI hacker/pentester from scratch!
Watch the full video here --->
youtu.be/_yfiUQSbdPY?si=qUEv…
hAPI_hacker retweeted
One slot left at apisec|CON. CFP closes midnight PT today.
Oct 21. Single track, ~7 talks.
Theme is exploitability — chains you've actually walked, not CVSS scores you've read.
If you've got the talk, send it:
conf.apisecuniversity.com/
@hAPI_hacker @apisecu
hAPI_hacker retweeted
Replying to @apisec_ai
@apisec_ai
One slot left at apisec|CON. CFP closes at midnight PT tomorrow.
Oct 21. Single track, ~7 talks.
Theme is exploitability — chains you've actually walked, not CVSS scores you've read.
If you've got the talk, send it:
conf.apisecuniversity.com/
hAPI_hacker retweeted
Jev is now available to everyone. No waitlist.
Start using it here: console.typesafe.ai
hAPI_hacker retweeted
Today we are releasing a 1 page version of “Hacking Your Career”
arcanum-sec.github.io/hyc/
We get a bunch of students and early career-seekers looking for resources and advice of getting their 1st gig.
This resource gives all those and more; free trainings, free certificates for your résumé, advice on résumé design, information on career verticals, small sections on interviewing and the hiring process, and more! 🫶🫶
hAPI_hacker retweeted
Hermes now has first-class support in Omarchy, @DHH’s Arch-based agentic Linux distribution.
Install the desktop app from the AI menu, or make Hermes your default terminal agent. Your Omarchy theme sets the colors in the desktop app, the TUI and the CLI.
omarchy.org
hAPI_hacker retweeted
Made a Cybersecurity Resume Reviewer AI skill that I've been using for some mentees, made it public for anyone who is interested in using it as well. Hope others find it useful (also open to feedback or pull requests). github.com/mubix/cyber-resum…
Cyber is having a moment
Across 21 major software companies, including Apple, AWS, Microsoft, and Google:
- Reported critical vulnerabilities never cleared 100 per month in four years
- Since spring they've jumped to over 600 per month
Charts of the Week: a16z.news/p/chart-of-the-wee…
hAPI_hacker retweeted
If you're looking for some more advanced reading, @garethheyes figured out how to use CSS in emails to steal passwords. This is what platinum tier security research looks like.
portswigger.net/research/css…
hAPI_hacker retweeted
Cybersecurity depends on people whose work is rarely recognized. The innovators and builders of open source tools. The defenders and incident responders. The mentors.
As a Difference Makers Awards Advisory Board member, I invite you to submit your nomination and recognize the exceptional work across the security community.
Nominations are open now through September 14.
Nominate your Difference Maker here: go.sans.org/H7QUx6
hAPI_hacker retweeted
The new attack surface is AI.
- AI enabled web-app and APIs
- AI enabled infrastructure
- Employees using AI harnesses
- Organizations turning on AI productivity features
Attacking AI is a one of a kind course that teaches methodology to assess each one of these scenarios. Join us for the next cohort!
arcanum-sec.com/training/att…
hAPI_hacker retweeted
Microsoft warns of max severity Entra ID flaw exploited in attacks
bleepingcomputer.com/news/mi…
bleepingcomputer.com/news/mi…
hAPI_hacker retweeted
Learn OSINT with a free investigation platform, practical OSINT training, and real workflows for validating data, cross-referencing evidence, and building stronger investigative skills.
bit.ly/use-maltego-for-free
Thank you to Maltego for sponsoring this video!
#osint #maltego #digitalinvestigations
























