Assetnote @assetnote
Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure. assetnote.io Joined July 2017-
Tweets165
-
Followers10K
-
Following0
-
Likes34
Earlier this year, our Security Research team discovered a high-risk secondary context path traversal issue in Omnissa Workspace One UEM (CVE-2025-25231). We also developed a chain to RCE on instances in the wild. You can read our detailed research here: slcyber.io/assetnote-secu…
The final research blog from @SLCyberSec's Christmas in July concerns three more critical vulnerabilities that our security researchers have uncovered in Adobe Experience Manager Forms: two paths to RCE and a pre-authentication XXE slcyber.io/assetnote-secu…
Our Security Research team at @SLCyberSec found four vulnerabilities in the quality management platform ETQ Reliance, including a critical Remote Command Execution: slcyber.io/assetnote-secu…
Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-secu…
Our Security Research team at @SLCyberSec discovered a pre-authentication RCE vulnerability in Sawtooth Lighthouse Studio (CVE-2025-34300). It affects all versions up to 9.16.14. Read more here: slcyber.io/assetnote-secu…
Continuing @SLcyber’s Christmas in July posts, our Security Research team discovered a pre-authentication NTLM hash disclosure vulnerability in DNN (formerly DotNetNuke), assigned CVE-2025-52488. Read more on our blog here: slcyber.io/assetnote-secu…
For our first Christmas in July research post: How we managed to get persistent XSS on every Adobe Experience Manager Cloud instance three times! slcyber.io/assetnote-secu…
We’re trying to buck the trend of critical vulnerabilities all landing at the end of the year, much to the despair of security professionals! This July, we’ll be publishing a series of vulnerabilities across the month. Stay tuned: slcyber.io/assetnote-secu…
Our team recently used a novel technique to increase the impact of what seemed to be only a blind SSRF. This novel technique involving HTTP redirect loops and incremental status codes led to full HTTP response leakage. Read more on @SLCyberSec blog here: slcyber.io/assetnote-secu…
Our security research team discovered a critical pre-authentication SQL injection vulnerability in Halo ITSM, a popular IT support software, often externally exposed and sensitive: Read more here: slcyber.io/assetnote-secu…
Our security research team recently analyzed the authentication bypass vulnerability in Next.js (CVE-2025-29927). Our blog post details how to detect this vulnerability with more reliability. Read more here: slcyber.io/assetnote-secu…
Our security research team discovered a pre-auth RCE (CVE-2025-27218) in Sitecore XP 10.4. You can read our research here: slcyber.io/blog/sitecore-…
Our security research team discovered an authentication bypass in Palo Alto's PAN-OS management interface. Our discoveries come shortly after exploit chains were released at the end of 2024 after a deeper investigation. You can read our research here: slcyber.io/blog/nginx-apa…
We are thrilled to announce that Assetnote has been acquired by Searchlight Cyber! This is an exciting new chapter for our team as we continue our mission of providing our customers with a market-leading ASM solution. Joining forces with Searchlight Cyber means that we will be…
🛠️ Building attack surface visibility from scratch taught us a crucial lesson: DNS wildcard detection requires more than open-source tools. Dive into our engineering journey: Spotify: buff.ly/3MO7jZu Apple Podcasts: buff.ly/4gTsgzQ YouTube:…
Modern enterprise infrastructure isn't just cloud-centric - it's protected by WAFs and CDNs. This architectural shift creates new challenges for traditional asset discovery approaches. Understanding your entire attack surface requires adapting to these architectural realities.…
🔒 The automation challenge in security: Many orgs struggle to automate vulnerability detection safely. Our solution? Finding the sweet spot: - Automated discovery - Proven exploitability - Zero disruption - Safe execution Learn how we make it work 🎧 Spotify:…
What looks like a niche vulnerability in one attack surface becomes a pattern when you look across thousands. That's the power of automated depth in modern ASM. Listen to our full discussion: Spotify: buff.ly/3YN4H3D Apple Podcasts: buff.ly/3TuyLzg YouTube:…
🔍 The origin story of true ASM: 'We need to capture everything - new ports, changes, technologies - anything that could lead to exploitation.' But monitoring isn't enough. Real ASM combines: - Real-time asset awareness - Scalable coverage - True exploitability assessment Listen…
🛡️ Finding vulnerabilities is just the first step. The untold story: Our teams often spend weeks developing effective mitigations, working to have solutions ready before vendor patches. Because security isn't just about discovery - it's about protection. Learn more 🎧 Spotify:…
Intigriti @intigriti
193K Followers 658 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
Sam Curry @samwcyo
97K Followers 1K Following Hacker, bug bounty hunter. Run a blog to better explain web application security.
JS0N Haddix @Jhaddix
167K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Julien | MrTuxracer �... @MrTuxracer
37K Followers 443 Following Freelancer | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | ❤️ Reversing | Mobile Hacker | https://t.co/pcWduPOt0n
Hussein Daher @HusseiN98D
49K Followers 197 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Luke Stephens (hakluk... @hakluke
95K Followers 2K Following Hacker, marketer. I manage socials and produce amazing technical blogs for cybersecurity orgs. Founder of @hacker_content and @haksecio
STÖK ✌️ @stokfredrik
135K Followers 1K Following Hi.. im that hacker / creative that your friends told you about., 💫🔮
Katie Paxton-Fear @InsiderPhD
93K Followers 2K Following Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her
Harsh Bothra @harshbothra_
43K Followers 741 Following Freelance Pentester & Consultant • Cobalt Core Lead & Pentester • Author • Speaker • Blogger • SecurityExplained • Project Bheem • Learn365 • Views are personal
Bug Bounty Reports Ex... @gregxsunday
52K Followers 616 Following Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.
Md Ismail Šojal �... @0x0SojalSec
31K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
Tuan Anh Nguyen⚡️... @haxor31337
15K Followers 2K Following 29 y/o Bug Bounty Hunter and Red Teamer at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
Justin Gardner @Rhynorater
35K Followers 2K Following Christian | Full-time Bug Bounty Hunter | Host of @ctbbpodcast | Advisor @CaidoIO | 4x LHE MVH | 🗣️ English, 日本語 | ♥️ @mariahchan_ ♥️
Masonhck357 @Masonhck3571
16K Followers 780 Following 🔍 Top 100 Bug Bounty Hunter @ Bugcrowd | 🇩🇴 Dominican | Ethical hacking fanatic | 🎮🎵 Lover | Keeping the digital world safe. opinions are that of my own
Kanhaiya Sharma 🇮�... @krishnsec
18K Followers 560 Following Hacker | Top 25 @Bugcrowd all-time | MVP | Top 15 P1-warrior
ReconOne @ReconOne_bk
20K Followers 53 Following Tweet about Bug Bounty, Recon, Recon Tips and Attack Surface Management.
Alampdow @alampdow
0 Followers 70 Following
HARSHRAJSINH BARAD @HARSHRAJSI99617
0 Followers 57 Following
Sutol @0x5a6163
99 Followers 426 Following Infosec Researcher. I do pentesting. Follow for CTF propaganda 😎
GH057 @daritdob
1K Followers 1K Following Pain is just a French word for Bread ➰L0NG5TR33T™ [email protected]
hello-testers @HelloTeste16541
1 Followers 205 Following
Mike Lowry @jbooogie15
4 Followers 70 Following Ex collegiate hooper turned pen tester | OSEP | OSCP | CRTO | CRTL | Security + | eCPPTv2 | Father | Sole Collector
Kle0z @Kle0z
251 Followers 53 Following Security Researcher | Part-time bug bounty hunter | Building automation tools for Bug Bounty | https://t.co/IzMYJTVaH1
trainee @__trainee
4 Followers 110 Following
blackvenom@~$ @venom5ii
126 Followers 4K Following
aymen zerrouki @aymenazer1
99 Followers 895 Following
Anas Almizani 🇸�... @x6vrn
909 Followers 515 Following simple researcher / CTF player @_pwnsec_ / #CBBH , #eWPTX / age: 16
Dharmik Hacker @dharmikkk_777
2 Followers 336 Following
Wufau @Wufau9415970
47 Followers 2K Following
Dark@Joker:~$ @ExploitNest
88 Followers 2K Following CRTA | CAP | OSCP (Aspirant) - Pentration Tester & Bug Hunter - Red Teamer 🤡
07x_v3177.exe @VedGawde
86 Followers 2K Following Trust in His plan | God's love makes even the hardest journeys worthwhile | His love is the compass guiding your life's purpose |
zhang ning @zhangning731062
1 Followers 115 Following
Md Asif 🍥 @asifmir97
0 Followers 79 Following
Guac @SirGuac
2K Followers 3K Following
Charan Vepada @charan_18223
0 Followers 31 Following Red Teaming & Vulnerability Hunter | Exploring weaknesses to strengthen security | Passionate about cybersecurity and digital defense.
serdar @serdar715631
4 Followers 458 Following
bbq @bbq84654471
16 Followers 443 Following
Leon @Leon0772425
1 Followers 302 Following
امیرحسین @Am1rH03ein873
4 Followers 37 Following
Qanon @qanonfree
1 Followers 4K Following
מור לוי @mwr_lwy
0 Followers 35 Following
Ahmad @ahmad_1657
1 Followers 124 Following A passionate Mobile App Developer and AI Engineer with expertise in Flutter, React Native, Python Machine Learning, and Agentic AI. A part time Bug Hunter 😁
Mostafa @Mostafa51870712
30 Followers 186 Following
Cl0uddStrife 🛰️�... @Cl0uddStrife
761 Followers 1K Following A jack of all trades is a master of none, but oftentimes better than a master of one. ✌🏽🛰️🚀
Syam Tam @SyamTam248342
2 Followers 143 Following
dan1elnj @dan1elnj
1 Followers 162 Following
Ankit Karn @dankit264
24 Followers 332 Following
Akchhat @akchhat12112005
8 Followers 192 Following Cybersecurity Student | Aspiring Red Teamer ⚔️ | Adversary Emulation & Threat Simulation 🎯 | Learning to break, to build stronger | #OffensiveSecurity
dexter @dexter79331247
0 Followers 2K Following
Hope @Hope319396
38 Followers 792 Following
ᴀʙᴅᴇʟʀʜᴍ�... @aufzayed
2K Followers 383 Following Offensive Security Engineer | OSCP+ | eWPTX | eMAPT
P I M P @PIMP149078
34 Followers 1K Following
Trends for United States
You might like
