Assetnote @assetnote
Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure. assetnote.io Joined July 2017-
Tweets165
-
Followers10K
-
Following0
-
Likes34
Earlier this year, our Security Research team discovered a high-risk secondary context path traversal issue in Omnissa Workspace One UEM (CVE-2025-25231). We also developed a chain to RCE on instances in the wild. You can read our detailed research here: slcyber.io/assetnote-secu…
The final research blog from @SLCyberSec's Christmas in July concerns three more critical vulnerabilities that our security researchers have uncovered in Adobe Experience Manager Forms: two paths to RCE and a pre-authentication XXE slcyber.io/assetnote-secu…
Our Security Research team at @SLCyberSec found four vulnerabilities in the quality management platform ETQ Reliance, including a critical Remote Command Execution: slcyber.io/assetnote-secu…
Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-secu…
Our Security Research team at @SLCyberSec discovered a pre-authentication RCE vulnerability in Sawtooth Lighthouse Studio (CVE-2025-34300). It affects all versions up to 9.16.14. Read more here: slcyber.io/assetnote-secu…
Continuing @SLcyber’s Christmas in July posts, our Security Research team discovered a pre-authentication NTLM hash disclosure vulnerability in DNN (formerly DotNetNuke), assigned CVE-2025-52488. Read more on our blog here: slcyber.io/assetnote-secu…
For our first Christmas in July research post: How we managed to get persistent XSS on every Adobe Experience Manager Cloud instance three times! slcyber.io/assetnote-secu…
We’re trying to buck the trend of critical vulnerabilities all landing at the end of the year, much to the despair of security professionals! This July, we’ll be publishing a series of vulnerabilities across the month. Stay tuned: slcyber.io/assetnote-secu…
Our team recently used a novel technique to increase the impact of what seemed to be only a blind SSRF. This novel technique involving HTTP redirect loops and incremental status codes led to full HTTP response leakage. Read more on @SLCyberSec blog here: slcyber.io/assetnote-secu…
Our security research team discovered a critical pre-authentication SQL injection vulnerability in Halo ITSM, a popular IT support software, often externally exposed and sensitive: Read more here: slcyber.io/assetnote-secu…
Our security research team recently analyzed the authentication bypass vulnerability in Next.js (CVE-2025-29927). Our blog post details how to detect this vulnerability with more reliability. Read more here: slcyber.io/assetnote-secu…
Our security research team discovered a pre-auth RCE (CVE-2025-27218) in Sitecore XP 10.4. You can read our research here: slcyber.io/blog/sitecore-…
Our security research team discovered an authentication bypass in Palo Alto's PAN-OS management interface. Our discoveries come shortly after exploit chains were released at the end of 2024 after a deeper investigation. You can read our research here: slcyber.io/blog/nginx-apa…
We are thrilled to announce that Assetnote has been acquired by Searchlight Cyber! This is an exciting new chapter for our team as we continue our mission of providing our customers with a market-leading ASM solution. Joining forces with Searchlight Cyber means that we will be…
🛠️ Building attack surface visibility from scratch taught us a crucial lesson: DNS wildcard detection requires more than open-source tools. Dive into our engineering journey: Spotify: buff.ly/3MO7jZu Apple Podcasts: buff.ly/4gTsgzQ YouTube:…
Modern enterprise infrastructure isn't just cloud-centric - it's protected by WAFs and CDNs. This architectural shift creates new challenges for traditional asset discovery approaches. Understanding your entire attack surface requires adapting to these architectural realities.…
🔒 The automation challenge in security: Many orgs struggle to automate vulnerability detection safely. Our solution? Finding the sweet spot: - Automated discovery - Proven exploitability - Zero disruption - Safe execution Learn how we make it work 🎧 Spotify:…
What looks like a niche vulnerability in one attack surface becomes a pattern when you look across thousands. That's the power of automated depth in modern ASM. Listen to our full discussion: Spotify: buff.ly/3YN4H3D Apple Podcasts: buff.ly/3TuyLzg YouTube:…
🔍 The origin story of true ASM: 'We need to capture everything - new ports, changes, technologies - anything that could lead to exploitation.' But monitoring isn't enough. Real ASM combines: - Real-time asset awareness - Scalable coverage - True exploitability assessment Listen…
🛡️ Finding vulnerabilities is just the first step. The untold story: Our teams often spend weeks developing effective mitigations, working to have solutions ready before vendor patches. Because security isn't just about discovery - it's about protection. Learn more 🎧 Spotify:…
Intigriti @intigriti
195K Followers 657 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
Sam Curry @samwcyo
98K Followers 1K Following
JS0N Haddix @Jhaddix
167K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Julien | MrTuxracer �... @MrTuxracer
37K Followers 444 Following Freelancer | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | ❤️ Reversing | Mobile Hacker | https://t.co/pcWduPOt0n
Hussein Daher @HusseiN98D
49K Followers 199 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Luke Stephens (hakluk... @hakluke
96K Followers 2K Following Hacker, marketer. I manage socials and produce amazing technical blogs for cybersecurity orgs. Founder of @hacker_content and @haksecio
STÖK ✌️ @stokfredrik
135K Followers 1K Following Hi.. im that hacker / creative that your friends told you about., 💫🔮
Katie Paxton-Fear @InsiderPhD
93K Followers 2K Following Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her
Harsh Bothra @harshbothra_
43K Followers 740 Following Freelance Pentester & Consultant • Cobalt Core Lead & Pentester • Author • Speaker • Blogger • SecurityExplained • Project Bheem • Learn365 • Views are personal
Bug Bounty Reports Ex... @gregxsunday
53K Followers 616 Following Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.
Md Ismail Šojal �... @0x0SojalSec
31K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
Tuan Anh Nguyen⚡️... @haxor31337
15K Followers 2K Following 29 y/o Bug Bounty Hunter and Red Teamer at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
Justin Gardner @Rhynorater
35K Followers 2K Following Christian | Full-time Bug Bounty Hunter | Host of @ctbbpodcast | Advisor @CaidoIO | 4x LHE MVH | 🗣️ English, 日本語 | ♥️ @mariahchan_ ♥️
Masonhck357 @Masonhck3571
16K Followers 790 Following 🔍 Top 100 Bug Bounty Hunter @ Bugcrowd | 🇩🇴 Dominican | Ethical hacking fanatic | 🎮🎵 Lover | Keeping the digital world safe. opinions are that of my own
Kanhaiya Sharma 🇮�... @krishnsec
18K Followers 584 Following Hacker | Top 25 @Bugcrowd all-time | MVP | Top 12 P1warrior
ReconOne @ReconOne_bk
20K Followers 54 Following Tweet about Bug Bounty, Recon, Recon Tips and Attack Surface Management.
MICHAEL MUGII @michael_mugii
13 Followers 368 Following PROTAGONIST OF MY STORY. Nailing the art of effortless existence.
CX330.tw | Cyber Vamp... @CX330Blake
71 Followers 820 Following A Cyber Vampire because I'm only awake at night 🧛 A wannabe hacker 👾 Send me malware 🦠
RestSec @restsec_01
0 Followers 37 Following Curating technical cybersecurity writeups—bug bounty, pentest, research & more. All handpicked. New stuff daily #bugbounty
sush shar @sushshar11
1 Followers 271 Following
Phuong Lan Dinh Huynh @HuynhPhuon89764
0 Followers 3 Following
CuteBunny @Cute_Buunny
18 Followers 25 Following
410ys @410ys
0 Followers 263 Following
j3kSec @sec_j3k
0 Followers 68 Following
chasingflares @chasingflares
0 Followers 76 Following
MSA @JeremyS83909856
4 Followers 117 Following
Nayeem Siddiqui @Sidd89366Nayeem
1 Followers 29 Following
Liam.M @Liam_MMusic
19 Followers 72 Following 22 year old producer and music tech graduate https://t.co/C9NNxm2Ct2
Akash Jain @ajunoit
66 Followers 153 Following
Amir Raissi @AmirRaissi36259
0 Followers 100 Following
Franz @franeuz
5 Followers 278 Following Programmer/Automation and Electronics #archlinux #python #pentesting
ilker yılmaz @ylmzilker76
151 Followers 534 Following Cyber Security Consultant @prodaft https://t.co/97dVe06F55
jason @jason201351320
2 Followers 119 Following
Trustcat.eth @TrustCatai
316 Followers 1K Following Father of 4 • 30 yrs work → Addison’s + T1D changed everything. Now building TrustCat (pay-it-forward AI) + TrustCompute. Scars into signal ⚡
cyny666 @cyny666_study
0 Followers 30 Following
Dque @dquefrn
0 Followers 272 Following
Joulingou @jouling25
0 Followers 24 Following
SquareZer0 @__squarezero__
134 Followers 1K Following @protos3c team member | CTF player | Pentester
Pascal Fouquette @cycopas
40 Followers 480 Following
Avish @avish0x01
84 Followers 514 Following
Salman | deathflash �... @deathflash_xyz
48 Followers 578 Following Founder @bsidesvizag | Building @osmsec_xyz & @hacktronix_in Pentester @cobalt_io | Ex-@offsectraining & @thinkstcanary Jack of all trades, master of none.
mightocho @mightocho
3 Followers 162 Following
Falcon @F8i8495312
45 Followers 764 Following
Graham Cheetham @CheethamGraham
65 Followers 468 Following The key fixer person at Old Dogs Creative - We build solutions. Exploring the data analytics world.
Adrienne Hooper @HooperAdri37072
1 Followers 93 Following
Alampdow @alampdow
0 Followers 71 Following
HARSHRAJSINH BARAD @HARSHRAJSI99617
0 Followers 57 Following
Sutol @0x5a6163
104 Followers 432 Following Infosec Researcher. I do pentesting. Follow for CTF propaganda 😎
GH057 @daritdob
1K Followers 1K Following Pain is just a French word for Bread ➰L0NG5TR33T™ [email protected]
hello-testers @HelloTeste16541
1 Followers 222 FollowingTrends for United States
You might like
