Pentester & Security Researcher
Joined May 2022
- Tweets145
- Following237
- Followers90
- Likes10.5K
.joward retweeted
If you know someone who knows someone who knows someone at DEFCON looking to trade workshops, pass this on:
I am looking for “From Prompt to Protection: A Practical Guide to Building and Securing Generative AI Applications” workshop ticket, I can trade for “Advanced Ghidra Scripting & Automation.” 😎
Thanks for the help!
#defcon33 #defconworkshop #defcon
.joward retweeted
🚨 It’s happening tomorrow at @_leHACK_ !
I’ll be giving my talk on 𝐀𝐈 𝐑𝐀𝐆 𝐒𝐲𝐬𝐭𝐞𝐦𝐬, where I’ll introduce a technique I developed to extract hidden information from RAG systems, called 𝐔𝐩 𝐚𝐧𝐝 𝐃𝐨𝐰𝐧 𝐓𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞.
🧠 In this talk, we’ll dive into the inner workings of Retrieval-Augmented Generation (RAG), expose potential attack vectors, introduce the Up and Down Technique, and walk through practical mitigation strategies.
📍 Join me at @_leHACK_
🗓️ 27 June
🕐 11:15 AM
🔗 Here is the list of all talks: lehack.org/2025/tracks/confe…
#leHACK #AISecurity #cybersecurity
.joward retweeted
The security research community in Europe and the Middle East just got even stronger. Say hello to these new HackerOne Brand Ambassadors:
🇦🇿 @AzeriumD34132 (Azerbaijan—new club!)
🇧🇪 @dropn0w & @hgreal1 (Belgium—new club!)
🇩🇰 @mthirup (Denmark—new club!)
🇮🇹 @Al7eX91 & @Ciper_942 (Italy—new club!)
🇱🇧 @hasansheet (Lebanon—new club!)
🇸🇪 @joaxcar (Sweden—new club!)
🇳🇱 @yoerivegt (Netherlands)
🇫🇷 @DoomerOutrun (France)
🇵🇹 @secgus (Portugal)
🇹🇷 @jusxing (Turkey)
These ambassadors will fuel research, mentoring, and live events across the region. We’re glad they’re here!
Check out the program: bit.ly/3lMs6lO
#AppSec #EthicalHacking #H1Club
.joward retweeted
I recently attended a few talks on AI security, and honestly, it felt pretty uncomfortable when some speakers tried to explain key concepts.
Many presenters clearly lacked a solid foundation in data science and AI engineering. They didn’t fully understand how models and RAG actually work. Often, they were explaining topics beyond their expertise, mixing concepts up, and spreading misinformation about how things really work.
Please, if you’re preparing a talk and decide to discuss topics outside your comfort zone, it’s your responsibility to understand every detail you put on your slides. Otherwise, it’s obvious that you’re just trying to ride the AI hype without genuine understanding.
.joward retweeted
We're excited to announce our 2nd giveaway, thanks to @hackthebox_eu 🎉 We will pick 5 winners to win a Silver Annual subscription (+ Exam)!
To enter:
1️⃣ Follow @BugBountyDefcon and @hackthebox_eu
2️⃣ Like this ❤️
3️⃣ Retweet this 🔁
You have time until next Friday (09/20).
.joward retweeted
Some of LockbitSupp a/k/a Dmitry Khoroshev's data and PII was exposed as a result of a Yandex data breach.
It exposes his address and food order history. It shows him ordering Cheesecake Factory semi-frequently.
Information via @Info_IntelX
.joward retweeted
> wake up
> check news
> 0day exploited in the wild
> scroll down
> police offices being ransomed
> ransom group threatening to leak data on rape victims
> scroll down
> "nudes in bio"
Happy Friday.
.joward retweeted
andres freund: genius programmer responsible for one of the most widely used pieces of software in the world, just single-handedly stopped a huge attack from happening. nyt journalist: 'i am too fucking stupid to understand his work and won't even try but it's very boring!!!'
.joward retweeted
Today was a big day for the United States government and United Kingdom government. The Federal Bureau of Investigation and U.K. National Crime Agency’s (NCA) Cyber Division unveiled a massive, multi-year long investigation which has led to a catastrophic blow to Lockbit ransomware group and affiliates.
The Lockbit ransomware group Tor domain name displays a list of posts announcing activity performed by law enforcement agencies. It is written in Lockbit format, illustrating they have full control over Lockbit ransomware groups infrastructure.
Law enforcement has done the following
1. Law enforcement agencies will be unveiling sensitive information on Lockbit cryptocurrency and money operations February 23th, 2024
2. Law enforcement, with SecureWorks, will be revealing information on Lockbit tradecraft February 22nd, 2024
3. Law enforcement will be unveiling Lockbit affiliate infrastructure February 21st, 2024
4. Law enforcement, with TrendMicro, will be releasing a detailed analysis on Lockbit future-iterations February 22nd, 2024
5. Law enforcement will be unveiling information on Lockbit's StealBit data exfiltration tool February 21st, 2024
6. Law enforcement will be unveiling sanctions on Lockbit ransomware group at 15:30UTC today
7. Law enforcement, in conjunction with Japanese partners, has released a Lockbit decryptor tool
8. An individual in Poland has been arrested
9. An individual in Ukraine has been arrested
10. Law enforcement plans on unveiling the identity of the Lockbit ransomware group administration February 23rd, 2024
11. The United States government unveiled the indictement of two individuals associated with Lockbit ransomware group: Artur Sungatov and Ivan Kondratyev
12. The United Kingdom NCA has unveiled sensitive information on the Lockbit backend: the administration panel, the blog backend, and the blog source functionality. This includes the images of the source code.
.joward retweeted
Hello everyone,
The last release of CME was my final one for CrackMapExec 😊
I have decided to withdraw myself from the development of the tool to focus on my family and personal projects.
The official repository and the most up-to-date version of CrackMapExec can be found on GitHub at this link ▶️
github.com/Porchetta-Industr…
I want to express my heartfelt gratitude for all the support I've received over the years, from the incredible pull requests and contributions to the generous sponsors.
To close this chapter of my life, I will send the last 5 coins to the last contributors 🪙
I wish all the best for everyone and thank you once again. Peace !
🪂