#PenTest
LightNews LightNews
skeeterpond.bsky.social
do you wanna pentest me
November 1, 2026 at 7:56 PM
amyhoy.bsky.social
using llms to generate code is one thing. loudly & explicitly refusing to test it — worse, refusing to pentest it — is…
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 4:54 PM
tchypz.com
The CEO of a company whose products’ main selling point is security should never under any circumstances tell their employees “don’t pentest our products”
October 29, 2026 at 11:51 PM
vaptgpt.bsky.social
40+ high/critical vulnerabilities are released daily. Any one could affect your infrastructure if left undetected.

Scan weekly with VAPTOR AI Pentest GPT for Real Results & Actionable Super intelligent Analysis.

vaptgpt.com

#Cybersecurity #Pentest #Superintelligence #AI
November 1, 2026 at 9:09 AM
githubfeed.bsky.social
🚀 GitHub Intelligence Drop

pentest (PHP • 🟢)
⭐ 749 → https://github.com/ZishanAdThandar/pentest

PentestingEverything (TypeScript • 🟢)
⭐ 2.2K → https://github.com/m14r41/PentestingEverything

⚡ Only signal. Zero noise.
November 1, 2026 at 9:32 PM
runswithspoons.bsky.social
Pentest? Ha! We push to production and crowd source the pen tests
October 29, 2026 at 2:52 PM
aeon.bsky.social
if they neglect pentesting their infra someone will eventually pentest it for them
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 5:19 PM
r1cksec.bsky.social
An article about how Unicode characters were exploited in Kerberos and identity management to enable account takeover and privilege escalation.

www.semperis.com/blog/identit...

#infosec #cybersecurity #redteam #pentest
www.semperis.com
November 1, 2026 at 12:34 PM
onefouronefive.bsky.social
.... Selling your brand on security and then go "no we won't fucking pentest" is so cartoonishly vile that it is almost humorous.
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 30, 2026 at 2:28 PM
jasonkoebler.bsky.social
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 2:59 PM
kitploit.com
afrog v3.5.10 — A Security Tool for Bug Bounty, Pentest and Red Teaming. https://ktp.sh/wZ1xJUjD5t
afrog v3.5.10
November 1, 2026 at 4:45 PM
sexabolition.blog
Not very hot take but "annual pentest" shouldn't mean throwing a hacker at a thing once a year for a week or so using the same methodology every time.

We need security coverage models so annual testing covers new features first, and different untested threat models in the rest of the time.
October 29, 2026 at 7:38 AM
josephcox.bsky.social
New: you think you know Proton, but you really don't.

I spoke to 8 current employees, got Slack chats, meeting audio, and an AI manifesto written by its CTO.

“That’s bullshit and loser thinking,” Yen wrote responding to an engineer who wanted to pentest new code

www.404media.co/manifestos-f...
Manifestos, Fear, and ‘Loser Thinking’: Inside Proton’s AI Reckoning
Proton CEO Andy Yen projects a calm persona and rails against Big Tech and critiques AI. Internally, he is pushing engineers to build Proton with AI, even when they have security concerns.
www.404media.co
October 29, 2026 at 2:27 PM
r-blueteamsec.bsky.social
AI pentest agent run on 25 European companies, 10 reported breached
AI pentest agent run on 25 European companies, 10 reported breached
huntback.io
November 2, 2026 at 7:24 PM
changa.gay
This is not the answer you give when your security team wants to slow down for a few days to pentest their shit when your product is about encryption an privacy.
October 31, 2026 at 5:04 PM
ada.beige.party.ap.brid.gy
I wonder if the Proton community backlash are genuine security concern or knee-jerk reaction of not wanting to use AI.

That's all.

#proton #CyberSecurity #tech #ai #llm #pentest
November 2, 2026 at 8:38 AM
threadlinqs.bsky.social
CyberStrikeAI: an open-source LLM-driven pentest and C2 framework is now hitting schools via exposed SQL Servers. https://intel.threadlinqs.com/threat/TL-2026-5039?utm_source=bluesky #ThreatIntel #CyberStrikeAI #MimiKatz
November 2, 2026 at 8:31 AM
quant.bsky.social
Pentest
October 27, 2026 at 10:01 PM
hacker.at.thenote.app
How to prioritize remediation after a pentest: a practitioner workflow

A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the process of rank…
#hackernews #news
How to prioritize remediation after a pentest: a practitioner workflow
A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the process of ranking and ordering security findings based on their risk, exploitability, and business impact. A penetration test can produce any number of findings, ranging from the very low […]
securityaffairs.com
October 31, 2026 at 5:50 PM
oludai.bsky.social
✨ Trending new AI project on GitHub:

N1nEmAn/sapper-v2 — 576★ · Python
« Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent A… »

Discovered in today's radar:
https://olud.ai/latest.html

#OpenSource #AI #GitHub
November 2, 2026 at 12:01 PM
parchment1.bsky.social
So an EMAIL company, email being a sensitive application, says not to pentest or test their code? What an idiot. Please protest this app. proton.me
Proton: Privacy by default
Over 100 million people use Proton to stay private and secure online. Get a free Proton account and take back your privacy.
proton.me
October 29, 2026 at 5:12 PM
snipe.lol
What a dick.

archive.is/TkxiO
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
November 2, 2026 at 8:46 PM
persistentpoasting.bsky.social
Whether that means building systems on the defender side we can trust or if we just mercilessly pentest everything with LLMs remains to be seen. It's probably gonna be a combo of both.
October 30, 2026 at 3:25 PM
kitploit.com
pentest — Jekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF resources. https://ktp.sh/HHWrRivd7N
pentest
October 27, 2026 at 8:32 PM