SecDim @secdim
Developer security wargame where developers practice real-world security incidents. secdim.com Sydney, Australia (HQ) Joined October 2014-
Tweets460
-
Followers284
-
Following3
-
Likes49
We found two DoS bugs in the toml parser for Node.js: a ~100 KB settings file freezes the process for seconds, a ~200 KB one crashes it. Fixed in toml 5.0.1 (CVE-2026-114143, CVE-2026-114141). Technical writeup:
Four new PHP challenges: a TOCTOU race, a Unicode username takeover, server-side request forgery and command injection. Three are inspired by real incidents at Steam, Spotify and Capital One.
AWS secures the cloud. What you run in it is yours to secure, and S3, IAM, VPC and EC2 each need different hardening. We've updated the nine challenges in our AWS game. Link in the reply.
We will be hosting a 2 day workshop on vibe coding security at NDC London🇬🇧 Come by Room 10 to say Hi if you are attending 👋 👉 secdim.com/news/ndc-londo… #appsec #securecoding #ndclondon
Rails wraps a non-Hash JSON body under _json, and a client can send that key itself. One request, two readings. If authz and the action read different ones, that's a bypass. New Ruby challenge:
We will be speaking AISA CyberCon 2026 in Melbourne 🇦🇺 Only 1 week left!
GlassWorm needed no vulnerability. It shipped as a VS Code extension, hid its loader in invisible Unicode, then spread itself with stolen GitHub tokens. New Incident Response challenge:
Your team writes only part of the code it ships. Dependencies, build tools, CI plugins and AI assistants expand the supply chain you need to defend. Learn how to map and harden it, including AI-related risks.
At NDC Oslo's three-day Attack & Defence AI Wargame, competitors secured their apps while finding flaws in opponents' apps. Maksim Ohvrill led at the second-evening prize ceremony and received the winner's prize. Try it:
An XML parser that accepts external entities can turn untrusted XML into file access, SSRF or command execution. That was the vulnerability identified in http4k in December 2024. Try the SecDim Play challenge, available in six languages.
Aymen Labidi @labidiaymen
2K Followers 1K Following Architect & Engineering Manager at Inetum · Creator of https://t.co/RcLhU3pUah
AI Quick Findings @AIQuickFindings
138 Followers 811 Following
The Voice of Cyber @CorpsTigris
283 Followers 2K Following Cybersecurity & Infosec | Gov, Risk & Compliance | Project & Risk Mgmt | Workforce Training | @Cisco & @CompTIA instructor | @AmericanMensa | Posts are mine
Codebender Cate™ ξ... @Codebender_Cate
2K Followers 4K Following Mother | INTP-T | Cyber-BASc | Gamer | @XboxAmbassadors | @dcgulfcoast | @WGUCyberClub | ΟΣΣ | Former @USArmy | CSIE in progress (1/4) | posts are mine
mark a babcock @markababcock
113 Followers 1K Following
Calum @_____Calum
181 Followers 307 Following AI enthusiast | Let me cook | https://t.co/hqpbfhiZa1 https://t.co/2KENfGzRg5
r0lan @yeyint_mth
2K Followers 2K Following Learning InfoSec by doing InfoSec… ¯\_(ツ)_/¯ #My_views_are_my_own
Magno Logan @magnologan
3K Followers 5K Following Information Security Specialist, International Speaker and Instructor at GoHacking, Biohacker and Novice powerlifter.
Ethan Troy @ethantroy
1K Followers 3K Following security engineering @bot, @spacexsi , prev @cursor_ai opinions are my own
Mukund Jalan @JalanMukund
165 Followers 930 Following I like to make new friends n maintain good relations.
Yechiel @yechiel_www
247 Followers 1K Following AppSec at an healthcare enterprise, diehard Nixer, "Quite openly Jewish". 🇬🇧🇺🇸🇮🇱
RedditDeck @redditdeck
118 Followers 5K Following RedditDeck offers a more convenient Reddit experience by letting you view multiple timelines in one easy interface.
dcodx @dcodx
26 Followers 104 Following Defensive CODing and eXploitation. We help you create secure code using a developer-centric approach.
Viudo del 14 @RobinHood14_
43 Followers 617 Following Me gusta el fútbol, no los futbolistas . También me gusta comentar de mma por aquí
joseLuis_B_R# @joselbr5
104 Followers 482 Following $ echo "CTF player | Golang/Cybersecurity/Linux Student Fan |" $ curl https://t.co/YGnRBSWIwK
Vahid @Vahidx0f
26 Followers 372 Following
Mimikaz @mimikaz7
31 Followers 93 Following works in infosec because breaking things is fun /// my cat holds root access
josephperryman @josephperryman
31 Followers 669 Following
karasuma @karasuma__2
4 Followers 517 Following
Al Montasir Nahid @realamnahid
17 Followers 925 Following A mind in motion, wandering through ideas in search of clarity within complexity.
Guillermo Esteve Oliv... @gesteveoliver
0 Followers 16 Following
wh0am1 🇳🇵 @CYBERWAR142017
48 Followers 2K Following a hacker mindset with security researchers join this link for learning: https://t.co/p17L9ExsOs
shannon @shannon69184090
0 Followers 56 Following
Super Prasu @super3897
0 Followers 2 Following
Sambam4mba @he31707900
21 Followers 2K Following Bor3d hacker of iot devices, security researcher? Security Breacher!
Gavin Fuller @GavinFullerTX
139 Followers 2K Following Azure Cloud & AI Consultant. My opinions are my own.
Martin Orem @martinorem
125 Followers 1K Following
Hackem Cybersecurity ... @hackem
4K Followers 5K Following Consultoría y Capacitación en Ciberseguridad, Ethical Hacking / Pentesting, Forense y Software Libre. #Cybersecurity #Hacking #Pentesting #CEH #OSCP #Forensics
AppSec New Zealand @AppSecNZ
309 Followers 6 Following A non-profit organisation, promoting application security education in New Zealand by hosting and supporting conferences and training events.
Fatesblind @Fatesblind
6K Followers 3K Following Check out "The Quiet Architecture of a Well-Lived Life" on https://t.co/Dlun67hV5n.
Muhammad H. Ali @MuhammadH251999
0 Followers 3 Following
B @gman0x00
22 Followers 609 Following
ShyamSec @shyam_sec
1 Followers 57 Following
Mohammad Almusilhi @DaRealMushi
0 Followers 3K Following
Black Hat @BlackHatEvents
429K Followers 2K Following The World's Premier Technical Cybersecurity Conference Series
Pi3cH @pi3ch
828 Followers 102 Following (Cyber) security Researcher. Serial Founder (@secdim|@sectalks|@elttam). Senior Lecturer (@unsw).
SecTalks @sectalks
2K Followers 8 Following Monthly technical (in)security talks and hands-on challenges, no bullshit!Trends for United States
You might like
