@OWASP #IoT & #EmbeddedAppSec Project leader | Co-Chair: @CloudSA IoTWG | Author & Tech Reviewer| 🍕 CISO @Cisco
Los Angeles
Joined December 2013
- Tweets2K
- Following2.1K
- Followers2.2K
- Likes2.6K
A-a-ron Guzman retweeted
We want to drop a thanks to @cisco taking on Gold Sponsorship of the BBV this year! It's support like yours that enables us to host this epic Village and without partners like you we simply couldn't do it.
#BugBountyVillage #DEFCON
We’ve updated Cisco’s bounty program page bugcrowd.com/engagements/cis…
Before protecting the wireless IoT in our homes, businesses, and global events, he was a hacker cold-emailing companies.
Now a CISO, Aaron shows hackers how to get the biggest return on Cisco's program.
youtu.be/-FMwi_V6XeY
A-a-ron Guzman retweeted
Before protecting the wireless IoT in our homes, businesses, and global events, he was a hacker cold-emailing companies.
Now a CISO, Aaron shows hackers how to get the biggest return on Cisco's program.
youtu.be/-FMwi_V6XeY
A-a-ron Guzman retweeted
Tracing the evolution of vuln disclosure from pre-bounty days to modern large-scale programs, @scriptingxss highlights the growing complexity of managing submissions, scaling security operations & maintaining strong relationships with the researchers.
youtu.be/-FMwi_V6XeY
A-a-ron Guzman retweeted
⚒️ Tune in to Hardware Vulnerabilities: Lessons from the Vendor Frontlines, where vendors spill the truth and the hardware spills…well, vulnerabilities. #hw_ioNL2025 is wide awake now!
On Panel: Adam Laurie, Aaron Guzmann and Sebastian Paul Avarvarei.
👉hardwear.io/netherlands-2025…
A-a-ron Guzman retweeted
When hardware sneezes, the whole system catches a cold🤧
Join Aaron Guzmann, Adam Laurie & Sebastian Avarvarei at #hw_ioNL2025 as they share frontline vendor stories—and reveal what never to do when your chips start behaving strangely
👉hardwear.io/netherlands-2025…
#Panel #hardware
A-a-ron Guzman retweeted
Here’s the second half of our Friday lineup at @DEFCON – and it’s just as stacked. 🔥
@DaneSherrets, @Shlibness, @mgianarakis, Jordan Macey, @CryptoGangsta, @scriptingxss, @nytr0gen_, @erbbysam, and @BrunoModificato.
See you there. 👀 #BugBounty
Excited to share the bounty & VDP evolution story with a sneak peek into the massive opportunities we're cooking up for our researcher community 🧑🍳
Real program data, real researcher, & business impacting outcomes🚀 we’re running a WiFi 7 program now🛜
#DEFCON #bugbountyvillage
We’re excited to announce that Aaron Guzman (@scriptingxss) will be speaking at the Bug Bounty Village at DEF CON 33!
Stay tuned for more details on their talk, you won’t want to miss it.
#BugBounty #DEFCON #BBV #BugBountyVillage
A-a-ron Guzman retweeted
Don't miss "To Pay or Not to Pay? The Battle Between Bug Bounty & Vulnerability Disclosure Programs" by Aaron Guzman (@scriptingxss) on Friday, August 8 at 04:00 PM inside the Village.
Read more at bugbountydefcon.com/agenda
#BugBounty #DEFCON33
A-a-ron Guzman retweeted
We’re excited to announce that Aaron Guzman (@scriptingxss) will be speaking at the Bug Bounty Village at DEF CON 33!
Stay tuned for more details on their talk, you won’t want to miss it.
#BugBounty #DEFCON #BBV #BugBountyVillage
Presented at @owasp Global SF this week on the IoT security testing guide (ISTG) project released earlier this year 👏 it was awesome to connect with old friends and learn of their perspectives for the future. Amazing event! 🤩
Come learn about OWASP ISTG from Luca and I 😎
Join us next month for a TechTalk where experts Aaron Guzman and Luca Pascal Rotsch will present their comprehensive #OWASP #IoTSecurity Testing Guide, providing essential methodologies for pen testing in the #IoT field. Register here: loom.ly/b9oOptA
A-a-ron Guzman retweeted
Strengthen Enterprise Security Through Collaboration at Planet Cyber Sec AppSec SoCal!
Join Omar Minawi, @scriptingxss, Shelby Pace and Natalya Krecker for "How to Win Friends and Influence Trust: Reducing API AuthZ Risks Through Collaborative Defenses."
Discover:
- Power of security and API team collaboration
- Leveraging security research community
- Overcoming API testing challenges
- Collaborative defense strategies
Gain insights to mitigate API AuthZ risks and promote a security-centric culture.
planetcybersec.com/061224-co…
#PlanetCyberSec #AppSecSoCal #AppSec #CyberSecurity #APIAuthZRisks #CollaborativeDefenses
A-a-ron Guzman retweeted
Introductions are happening for the State of {Absolute} AppSec panel at @LASCONATX. Joining @cktricky and @sethlaw are @ejcx_ , @wickett, and @scriptingxss. Hop in to the discussion here: youtube.com/watch?v=g5JJ07jk…
A-a-ron Guzman retweeted
Aaron Guzman's insightful talk helps us discover OWASP's IoT Security Testing Guide for effective penetration tests and dive into robust methodologies and tools. #PlanetCyberSec #AppSecSoCal #AppSec #infosec
#IoTSecurity
@scriptingxss
We are excited to announce that the “IoT Security Testing Guide” project is ready for peer review! 🎉🔬Your expertise and insights play a crucial role in improving the guide’s quality and relevance.
owasp.org/www-project-iot-se…
Whether you are an experienced IoT security tester or someone passionate about ensuring the security of connected devices, your contributions are highly welcome. Join us in this collaborative effort to strengthen IoT security testing practices and make a positive impact!