IDNSEC @idnsecurity
Cybersecurity research and engineering society with a mission to advance Indonesia's cyber defense and research capabilities. idnsec.com Indonesia Joined September 2026-
Tweets8
-
Followers71
-
Following4
-
Likes0
Google awarded $113,337 USD for a Linux vulnerability discovered by Indonesian security researcher Muhammad Alifa Ramdhan (@n0psledbyte), who works as a Principal Vulnerability Researcher at @starlabs_sg. 🤯 Ramdhan discovered a Linux Local Privilege Escalation (LPE) vulnerability involving a race condition in AF_ALG, the same subsystem later exploited in the famous Copy Fail vulnerability in 2026. He found the issue in 2025 without AI assistance and it was assigned CVE-2025-39964. His coworker, Bing-Jhong Billy Jheng, was also credited for completing the exploit chain, which enabled both privilege escalation to root and escape from a Docker container. They submitted the exploit to Google kernelCTF and received its highest reward. 💰 Ramdhan is from Tangerang, Indonesia. He graduated from Diponegoro University (@undip) in 2023 and later moved to Singapore to work full time as a vulnerability researcher. 🇮🇩 🇸🇬 idnsec.com/research/linux…
Thousands of websites in Indonesia have been hacked and turned into targeted promotion and marketing channels for the country's billion-dollar illegal gambling industry. Cybercrime as a Service operations purchase webshells from underground markets or exploit low hanging fruit across government (go[.]id), private sector, and public sector websites. Attackers then inject SEO cloaking to serve different content to search engine crawlers and use AMP pages to redirect visitors searching for gambling related keywords, while keeping the compromised websites looking completely normal to ordinary visitors. Emyra, a cybersecurity consultant, shares his investigation based on real case studies involving several high profile Indonesian institutions whose websites were compromised and used to promote online gambling. idnsec.com/research/hacki…
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth @fariskhi explains how defense-in-depth strategies, such as web application and container sandboxing with Landlock, can help reduce the risk and blast radius of RCE, without relying solely on updates or prior knowledge of which component is vulnerable. This can help contain attacks like the recent OpenAI hack demonstrated through responsible disclosure by @HacktronAI. AI agents can also help profile application behavior, construct strict security policies, run positive tests, and perform adversarial emulation to validate these defenses. idnsec.com/research/mitig…
Comment2Shell: Zero Click Pre-Auth XSS to RCE in WordPress Core One of our first contributors, @yeraisci_ (Security Researcher at Awesome Motive, Inc. and and current Top 1 of the WordPress bug bounty program), reported a pre-auth XSS vulnerability in WordPress comments that can be escalated to RCE when an administrator visits the injected page. Read the technical details of CVE-2026-93485, an HTML parser issue in the wpautop() function that was recently fixed in the WordPress 7.1.1 security update idnsec.com/research/comme…
Introducing IDNSEC. IDNSEC is a cybersecurity research and engineering society initiated by members of the Indonesian security community. Our mission is to advance Indonesia's cyber defense and security research capabilities, while contributing useful research and engineering work to the global cybersecurity community. Indonesia has a large and growing security community, with many capable researchers and engineers. We want to create a place where more of that capability can develop into deeper research, engineering, collaboration, and public technical work. IDNSEC will publish writings in both English and Indonesian, covering security research, vulnerability research, defensive engineering, and analysis of cybersecurity issues relevant to Indonesia and the broader security community Several research and engineering writings are already in the pipeline. More about IDNSEC: idnsec.com/general/introd…
Steven Kusuman🗽�... @cperkkk
58K Followers 1K Following Solus Christus. | ctf player | former 99th percentile @ hackerone | prev @bytedance, @aws, @UofIllinois scrolling here for news (kusuman.eth)
Rusman Wahab @rusmanplatd
12 Followers 423 Following akun @hwalyonglance pindah ke sini https://t.co/2QmrtV5aZd
pyk @sepyke
2K Followers 1K Following
Pham Duc @H0nda67
324 Followers 2K Following
ArthurXX @ArthurXX0631
10 Followers 851 Following
Elias Bachaalany @eliasbchlny
455 Followers 1K Following https://t.co/odQ1t0Qw9k | @binarywizards | https://t.co/dTlbOFZEhN | https://t.co/5miZ3yZbq6
Ishfaq Fariq @ishfaq_fariq
168 Followers 2K Following Cybersecurity Engineer| Frontend Developer | Application Security Engineer | Red Teamer | Software Engineer |
Yunseong Kim @yskzalloc
0 Followers 8 Following
ZENITH @ALIVE830
0 Followers 4K Following
Rizky Luthfianto @luthfian_to
257 Followers 504 Following interested in Data Science, Optimization #orms, Regression, and Network Design
Prometheus @0xdeeraf
354 Followers 874 Following OSCP, OSCE, GCFA, eCTHP, eCIR,GRID Threat 🏹, DFIR, Malware, ❤️☕️ ❤️🐈
Svetlana Winther @SvetlanaWinther
570 Followers 4K Following Die Würde des Menschen steht unter Finanzierungsvorbehalt. mastodon: @[email protected]
mcloving @mclovin55224801
476 Followers 6K Following
Dan Covic @dan_covic
525 Followers 3K Following ServiceNow consultant | Enthusiastic with cybersecurity, AI/ML, cloud computing & business | Love exploring new ideas
Irvan Tristian @tristian_id
183 Followers 514 Following MSCS @GeorgiaTech, @pln_123-@uniten MAI Student | prev. @tokopedia, @KAI121 | Never Settle ⚡
cstg1🏖️💻 @nirenix
123 Followers 1K Following Red Team Trainee / Apprentice / Recent college graduate (within one year of graduation) Currently studying blockchain security auditing / Escape room enthusiast
Jake Servaty @0x_Sp4ms
818 Followers 3K Following Just your Friendly Neighborhood SPAM-man | OSWE | OSEP | OSCP | CISSP | @FRSecure
Allele Security Intel... @alleleintel
1K Followers 2K Following Allele Security Intelligence is an independent company specializing in Information Security research.
L͓͓͛͛͛o͓͓͛͛�... @SHOGOx8
242 Followers 2K Following 🇦🇪🚀🦘 𓆣 𓆤 𓆥 𓆦 𓅁 𓅂 𓅐 If I am alive. I must live. I must not merely exist as though I were dead. AI will eat your lunch if you’re not cooking with it
0xHackthelearning @GHak2learn27752
788 Followers 5K Following CyberSecurity researcher#Automotive #IoT #WirelessComm #SourceCodeAudit #AppSec noob and actively learning #AIML
__metadata @Ikhsanhaw
930 Followers 1K Following RESISTANCE || Incessant Learner || Infosec engineer || Veritas Numquam Perit
Anderson Nascimento @andersonc0d3
5K Followers 7K Following Director & Security Researcher @alleleintel
Gaurav Kamathe @kamatheg
83 Followers 4K Following Security, Linux, Malware, AI/ML Opinions expressed here are my own and not that of my employer
🔮 PilotSinceBorn �... @0xPilotSB
227 Followers 4K Following a Pleb, Continuous Learning || Left Curve Integrity Maxi || Contributor Reverse Engineers, Non- Goyim Brainer AI Implementation Expert, AGI Soon
astartes @astarte57626822
2 Followers 2K Following
AmmarSpaces @AmmarAshshiddi1
95 Followers 647 Following The ordinary days journey to larp Long yap: https://t.co/P86lEQfaeX
Macmod @MacmodSec
614 Followers 885 Following CyberSecurity Analyst, Computer Scientist & Programmer
Dito Prabowo @ditoprabowo98_
0 Followers 38 Following
AngrFish @FishAngr4981
4 Followers 278 Following
MeltingSky @Meltingsky_67
210 Followers 2K Following
isenhu @isenhu
35 Followers 3K Following
Sanepip @sam_sepI0I
13 Followers 319 Following
Anonymous @B_D3aTH
552 Followers 2K Following
Peter @peter_clowncs
218 Followers 2K Following (wannabe) security researcher & reverse engineer Learning VR at @starlabs_sg | CTFs with @r3kapig
ravenspar @0xRavenspar
9 Followers 291 Following
Mochammad Rafi @mochammadrafi27
1 Followers 298 Following
Freddy @Freddycrur
35 Followers 2K Following
scand @scandsbb
1 Followers 448 Following
Rafie M @yeraisci_
424 Followers 193 Following Security Researcher at @AwesomeMotive . Web Security FTW !
You might like
