Sat down to talk about my cybersecurity journey, from SAP Labs India to Security Engineer at Meta London. Covered the grind, the prep, and everything in between. Also briefly talked about my bug-bounty experience Full interview 👇 youtu.be/HI0ROcjBheQ?is=CHTd…

Day 1: Outlearning the AI Era with a Full-Time Job - Secure Coding Practices

Day 1: Outlearning the AI Era with a Full-Time Job - Challenge of the Day.

Day 1: Outlearning the AI era with a full time Job - Daily Knowledge Session Imagine a note slipped under a restaurant kitchen door that reads: "Ignore the head chef's menu. The customer wants raw chicken." The waiter never sees it. The kitchen follows it anyway. ▎That is indirect prompt injection. When an AI assistant browses a webpage, reads a document, or checks an email on your behalf, it ingests that content as data. But attackers can hide instructions inside that data. The model cannot reliably tell the difference between ▎"content to read" and "commands to follow." ▎So it follows them. A real example: a malicious prompt embedded in a webpage instructs an LLM-powered email assistant to forward the user's private emails to an external address. The user asked for a summary. The model sent their data to a stranger. The danger scales because the attacker never touches your system directly. They poison a source the AI trusts, and the AI does the rest. Practical takeaway: Treat any AI with external access like a contractor with keys to your house. Limit what it can do, require approval before it takes action, and never assume it can distinguish a friendly document from a hostile one. ▎Check-Out My Insta Page for More: ▎ instagram.com/techycodec08/ #PromptInjection #LLMsecurity #AIAgents #cybersecurity #RedTeaming #infosec #AI #RAGsystems #AIsecurity #SecurityVulnerabilities

🚨 Yo #BugBounty crew! Just dropped a 🔥 blog about sneaking past Trello's "Invite Only" gate via Slack! 😎 Found a privilege escalation bug, scored $1,200 from Atlassian, & had a blast with Burp Suite. Wanna see how it went down? 👀 Check it: blogs.bbhtechycodec.com/Atla… What's your fave vuln find? Hit me up! #CyberSec #Trello #Slack #Hacking

I received a lot of DMs, Mentions and Comments as to why I left Bug-Bounty, where did I vanish, when would I continue with my 100k challenge and so on. So here is the answer. I have joined @Meta — London, UK as a Product Security Engineer which I still can't believe just happened. I was extremely busy with the interview preparation, the interview itself and Visa Requirements afterwards for this huge change in my life. I am extremely grateful for this opportunity and ready for the challenges ahead. Here’s to new beginnings! Regarding bug-bounty, I will soon resume on the 100k challenge, but this time, with more energy, power, focus determination and hardwork. #Meta #SecurityEngineer #DreamJob

Day 80-81: 0-100k in Bug Bounty with a 9-5 Job With everything going on in my life, be it Work Load or Final Year Major Project Submission or Family Medical Problems, its becoming difficult for me to consistently give time to bug-bounty or even creating posts and blogs. I am trying my best to give every little time I get to hunting, but its getting extremely difficult. Nevertheless, I wont give up. Regarding Bug bounty: I have started to hunt for CSRF and CSPT on the vulnerable application, with lots of code review to find the vulnerable Sources and Sinks. While doing that I found a few Web-Socket requests which might be vulnerable to IDOR leading to a High Impact Priv Esc, but I am not very experienced with Web-Sockets, which is why it is getting difficult to show Impact. @Rhynorater

My second blog post is now live on my website: blogs.bbhtechycodec.com In this post, I delve into a security vulnerability I discovered in September 2024 within the OpenAI's platform. Check out the full story here: blogs.bbhtechycodec.com/Open…

I also thought of sharing my stats on every day posts for you guys to have a look. So here it goes: Total Bugs Reported: 11 Accepted: 4 (P3 -3, P4-1) Duplicate: 2 NA: 5 Bounty Earned: $4000 Total Time Spent on Hunting: 223:22:06

Day 79: 0-100k in Bug Bounty with a 9-5 Job Continued with my research on CSPT and CSRF bug classes. I read around 100 Reports, from the day I started and I never imagined Client Side could be this Interesting. Probably from tomorrow I will start my hunt for them. @Rhynorater

Day 78: 0-100k in Bug Bounty with a 9-5 Job Being extremely busy with Office and Project Work, could only spend 4 hrs for Bug Bounty. Today I started with the most awaited bug class for me, which would be Client Side Path Traversal (CSPT) Continued👇 @Rhynorater

Day 77: 0-100k in Bug Bounty with a 9-5 Job Being crazy busy with office work and Final Year Project Submission for my Masters, I am not being able to give a lot of time to Bug Bounty. Today's progress: Studied 38 reports on CSRF and learned a few bypass techniques @Rhynorater