Pinned Tweet
Reality check your defenses! POC collection of the Month-of-Bypasses: github.com/persistent-sec…
0
0
4
959
Markus Vervier retweeted
big news for people who do security by saying “continue”
Some of the biggest openings in security have nothing to do with patching
How breaches began, per a 2026 report:
- 31% exploited a vulnerability
- 35% used phishing, stolen logins or impersonation scams
And nearly half now involve a vendor or partner, up 3x since 2024
Full Ezra and Steph Zhang on six cybersecurity companies worth building: a16z.news/p/defense-in-d…
3
5
41
3,105
If your security audit skills aim to find vulnerabilities only and nothing else, you’re failing at your job.
0
0
2
271
Markus Vervier retweeted
1/ We are doing it totally wrong with vulns.
In my new post I dig into @googlechrome’s vuln data to show that the AI-driven Vulnpocalypse settled a 20-year-old debate: vulnerabilities are dense. Our defenses are still built as if they were sparse.
medium.com/@TalBeerySec/d…
In my new post I dig into @googlechrome’s vuln data to show that the AI-driven Vulnpocalypse settled a 20-year-old debate: vulnerabilities are dense. Our defenses are still built as if they were sparse.
medium.com/@TalBeerySec/d…
13
42
225
60,596
Creating the atomic for SSHHole today was a nice study on the power of having AI integrated into a test environment and interact with it in a defined way. From zero to testable exploit took only a few minutes!
Huge libraries of static atomics are a legacy concept.
Huge libraries of static atomics are a legacy concept.
musl-based containers running #OpenSSH below 10.6p2 may accept logins to locked accounts - no credentials needed.
#Nemesis tests this safely in your environment (on-cloud or on-prem with local AI) and generates SIEM rules specific to your stack.
#BreachAndAttackSimulation
0
0
1
119
Markus Vervier retweeted
musl-based containers running #OpenSSH below 10.6p2 may accept logins to locked accounts - no credentials needed.
#Nemesis tests this safely in your environment (on-cloud or on-prem with local AI) and generates SIEM rules specific to your stack.
#BreachAndAttackSimulation
#Nemesis tests this safely in your environment (on-cloud or on-prem with local AI) and generates SIEM rules specific to your stack.
#BreachAndAttackSimulation
1
1
2
193
Markus Vervier retweeted
While back @goteleport brought us to #NYC to build a setup attendees had to break.
Using #Nemesis we engineered the environment, the clues & the automated backend that kept the CTF running.
Seeing our adversary emulation platform power the chaos was fun.
persistent-security.net/post/teleport-…
Using #Nemesis we engineered the environment, the clues & the automated backend that kept the CTF running.
Seeing our adversary emulation platform power the chaos was fun.
persistent-security.net/post/teleport-…
0
1
1
110
Btw we’re still looking for AI offensive security specialists to become part of our AI research team. If you’re interested in building AI models with specific attack capabilities beyond finding yet another bug in source code, reach out!
22
15
209
9,113
Everyone’s crazy about open weight AI agents performing complex cyber attack chains…are you wondering what that looks like in a real environment? Shameless plug: you can have that today, even fully air gapped. Contact me for more info!
Some environments thrive in the cloud, others demand on-premise control especially in regulated sectors
Nemesis handles both effortlessly by running #localAI model inside your own system.
Get continuous attack validation w/o compromising on where your data lives.
#ThreatToTest
0
0
4
559
Markus Vervier retweeted
Zero-click attack on Telegram offensivecon.jp/speakers/2026/…
4
38
212
20,158
BROTBLEED is coming to leak your memory.
Interesting one: HTTP bots that crawl websites and retrieve OG images (chat/social shared links)
We experimentally demonstrated that a malicious website can exploit a vulnerable bot to disclose its own heap contents through image requests.
No RCE needed.
0
0
1
309
Markus Vervier retweeted
Guess who has two thumbs, hasn't willingly used PHP since 2001 (except to write exploits), and always tells people not use it. Yep.
5
3
26
2,486
Markus Vervier retweeted
My non-hacking buddy asked me how much the person who found the php2shell made. Then he made a good observation:
Hack a small company, make a little. Hack a big company, make a lot. Hack 70% of the world, make nothing.
Hack a small company, make a little. Hack a big company, make a lot. Hack 70% of the world, make nothing.
34
84
2,869
79,443
Nemesis Team on 🔥
Great to see us featured by the @Cyber_Coalition!
Our co-founder Babette De Decker spoke about her path to Nemesis, why cybersecurity needs diverse talent, and how we're making security validation accessible to all.
cybersecuritycoalition.be/interview/babe…
#Nemesis #ThreatToTest #Security
0
0
1
171
Let’s take this flaw as an example of how to defend against 0days:
First of all to set the expectations, nobody in their right mind can claim there is a 100% defense against 0days (vulnerabilities yet unknown except to some who are exploiting them)…BUT you can lower the ow? In this example the attack vector are the file names that can be used to inject malicious payloads. If your application uses Pillow to process images, ask yourself if this requires allowing arbitrary file names? If not then don’t do it, use a uuid as a name => this takes away the attack surface required to exploit the vuln!
Doing this is the best way to reduce your exposure against yet unknown vulnerabilities!
First of all to set the expectations, nobody in their right mind can claim there is a 100% defense against 0days (vulnerabilities yet unknown except to some who are exploiting them)…BUT you can lower the ow? In this example the attack vector are the file names that can be used to inject malicious payloads. If your application uses Pillow to process images, ask yourself if this requires allowing arbitrary file names? If not then don’t do it, use a uuid as a name => this takes away the attack surface required to exploit the vuln!
Doing this is the best way to reduce your exposure against yet unknown vulnerabilities!
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
thehackernews.com/2026/10/critic…
0
0
2
445