My vulnerability disclosure made the news! thehackernews.com/2024/05/ci…

#BSidesNYC CTF is live and running! Good luck to the players! We have a good one for you this year!

👏 "Any open model whose weights have been edited can carry a backdoor" projectdiscovery.io/research…

If your attending @BSidesNYC next weekend (Oct 17) you are in for a treat for the CTF!!! Been working on a MASSIVE UPDATE and a brand new AI hacking adventure that challenges direct/indirect prompt injection, RAG poisoning, agent hacking, and more - all at an easy to intermediate level difficulty. No mocks or simulated challenges either, the game is full featured with real databases, agents, & RAG pipelines you are interacting with. Each chapter requires a unique technique as you play the main character of the story, hack the grid to investigate and solve the mystery of the Genesis Stone's disappearance. Really cool story for this one and a lot of effort went into its plot and challenges to keep it fun, realistic, but solvable. The official CTF for BSides NYC will be private on-prem via CTFd platform, but the challenge will launch to the public afterwards at selara.ai for everyone to play! #BSidesNYC #CTF #AIHacking #AISecurity #PromptInjection #RedTeaming #SelaraAI

Go and star this repo. -> github.com/securekomodo/code… Claude helped me build a utility tool for making great images of console output/code. The name #codeshot been thrown around and most are web based utilities, but this is fully standalone CLI built with Go. Been using it on blogs and technical reports and its quite handy. And has themed window for Mac, Windows, and Kali. So I have a pet-project goal of getting this into official homebrew repo but it needs more stars to become eligible. Give it a star, give it a try, and welcome your feedback to improve. Blog: redlinecybersecurity.com/blo…

New Blog Post: "Hacking the #GrrCON 2026 (15th) Anniversary Badge" redlinecybersecurity.com/blo…

CodeShot turns terminal output into beautiful images for pentest reports, straight from the CLI. No browser or web app, and your data never leaves your machine. github.com/securekomodo/code…

Join our Discord!

Awesome! Thanks for the free ticket!! HackAIcon looks awesome. Thanks for the great CTF challenge! Are we going to see any data released from some of the prompts/ jailbreaks?

Just published a PoC/scanner for CVE-2025-22457 buffer overflow in Ivanti Connect Secure. Safe exploit PoC that confirms crash behavior (triggers log ERROR31093 on appliance) github.com/securekomodo/CVE-… @sans_isc #ivanti #cve #cybersecurity #security #threatintelligence

Hey @Lovesac - what happened? ransomware.live/id/bG92ZXNhY…

Hey @nhl_shop, does it cost extra for a "Moritz Sneider" jersey on site? lol #LGRW 😜 shop.nhl.com/detroit-red-win…

Can someone explain why it’s so impossible to be a @DetroitRedWings fan right now? I pay for cable, I pay for streaming… and I STILL can’t watch the games because of these stupid blackout rules. Come on, NHL, get your shit together! 😤 #LGRW #NHLBlackoutsSuck

With this widespread of a cellular outage, you think someone would have thought to go check in on room 641A by now... 😅 #verizonoutage #verizon #verizondown #verizonsos

I’ve discovered a local privilege escalation vulnerability in Ivanti EPMM (formerly MobileIron) server, publicly disclosed as CVE-2024-22026. Check out my write-up and POC 🔗github.com/securekomodo/CVE-… #CVE #vulnerability #cybersecurity #ivanti #mobileiron

I've found and exploited many vulns in custom software, but finally received my first CVE, CVE-2024-22734, through coordinated disclosure! 🎉 Not my 'coolest' find, but heres my research in the AMCS “Trux” ERP software. #cve #zeroday redlinecybersecurity.com/blo…

Happy Thanksgiving! 🍽 🦃