#Pentesting
LightNews LightNews
momo.thingsabout.xyz
a security engineer insisting on pentesting?!!
October 29, 2026 at 4:53 PM
fireantprincess.bsky.social
pentesting your privacy first cloud service is loser mentality babes
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 3:03 PM
aeon.bsky.social
if they neglect pentesting their infra someone will eventually pentest it for them
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 5:19 PM
craniumsquirrel.fun
Hey Proton friends? Their CEO has gone bonkers. All AI coding, no pentesting because it's "too slow" and "it's secure don't bother"... Secure services about to be a whole lot less.
joemenn.bsky.social Joseph Menn @joemenn.bsky.social · 4d
Useful poster child for how not to adopt AI, especially in any company involved with privacy and security. Yikes.
josephcox.bsky.social Joseph Cox @josephcox.bsky.social · 4d
New: you think you know Proton, but you really don't.

I spoke to 8 current employees, got Slack chats, meeting audio, and an AI manifesto written by its CTO.

“That’s bullshit and loser thinking,” Yen wrote responding to an engineer who wanted to pentest new code

www.404media.co/manifestos-f...
October 29, 2026 at 5:27 PM
sinistermrcream.bsky.social
Is this tool going to be rushed out without pentesting?

Sorry, that must be my loser thinking, right?
October 30, 2026 at 9:02 PM
yogsec.bsky.social
Thousands of pentesting tools, one organized repo. From Nmap to Metasploit, all categorized across 50+ areas.

Star it at github.com/yogsec/Hacki...

#cybersecurity #pentesting #hackingtools #infosec #bugbounty
GitHub - yogsec/Hacking-Tools: A curated list of 900+ penetration testing and ethical hacking tools.
A curated list of 900+ penetration testing and ethical hacking tools. - yogsec/Hacking-Tools
github.com
November 1, 2026 at 5:52 AM
infosec.skyfleet.blue
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed.
cyberscoop.com
October 30, 2026 at 10:08 PM
koreone.bsky.social
I just solved Takeoff on Hack The Box! labs.hackthebox.com/achievement/... #HackTheBox #HTB #CyberSecurity #EthicalHacking #InfoSec #PenTesting
Owned Takeoff from Hack The Box!
I have just owned machine Takeoff from Hack The Box
labs.hackthebox.com
November 1, 2026 at 10:57 AM
yogsec.bsky.social
Your one-stop GitHub list of 900+ ethical hacking tools, organized into 50+ categories from network to malware analysis. Bookmark it.

GitHub Repo: github.com/yogsec/Hacki...

#Cybersecurity #EthicalHacking #PenTesting #InfoSec #RedTeam #BlueTeam #OSINT #SecurityTools
November 2, 2026 at 1:19 AM
sibach.bsky.social
me pentesting an app at work

"did you guys know you can modify the 'react to message' api and put in any unicode char?"

is this a security issue, idk? are there more important things to do, yes
October 31, 2026 at 8:35 PM
chowderman.bsky.social
I am sure that employees are naturally resistant to change that may end their careers, but as presented, the CEO refusing to allow a few days pentesting indicates a confidence in AI that might be reckless.
October 31, 2026 at 10:50 AM
testscope.org
An LLM Ran Post-Exploitation Against Real Victims

#PenTesting #infosec
An LLM Ran Post-Exploitation Against Real Victims
CyberStrikeAI integrates LLMs to automate post-exploitation, accelerating attacks and demanding new detection strategies beyond human-typed command assumptions.
testscope.org
November 2, 2026 at 8:01 PM
investigator515.bsky.social
AI-Assisted Wireless Pentesting Is Arriving. Can It Actually Understand a Radio Capture?
AI-Assisted Wireless Pentesting Is Arriving. Can It Actually Understand a Radio Capture?
On October 20, 2026, SANS presented updates to its IoT and wireless penetration-testing courses that include AI-assisted analysis workflows…
radiohackers.com
October 29, 2026 at 9:45 AM
yogsec.bsky.social
Google Dork to Find Exposed Database Files

Example: site:url ext:db

For more tips join Telegram channel t.me/bugbountyusa

#bugbounty #googledork #recon #infosec #ethicalhacking #pentesting #cybersecurity #bugbountytips #googlehacking #securityresearch
November 1, 2026 at 5:36 AM
pervognsen.mastodon.social.ap.brid.gy
I have a hunch Proton is about to receive a wave of free, unsolicited pentesting of their new security posture.
October 30, 2026 at 3:47 AM
0daybeats.bsky.social
recon at 2am hits different with the right soundtrack. cyberpunk lo-fi for the dark room grind.
https://www.0daybeats.com/blog/music-for-penetration-testing
#cyberpunk #lofi #infosec #pentesting #devlife
October 31, 2026 at 8:00 PM
rejectionking.bsky.social
on today’s reading list:

plaintext.do/en/blog/hack...
Hacking Back AI Pentesting Agents · Plaintext Cybersecurity
Lately I've seen AI agents with an incredible ability to hack. And believe me: for a while I thought all my years of study, my experience and my…
plaintext.do
October 29, 2026 at 5:11 PM
infosec.skyfleet.blue
Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys
Hackers Hijack AI Pentesting Agents to Install Backdoors and Steal API Keys
Hackers hijack exposed Cairn AI agent panels to install RATs, add SSH keys, and steal API credentials from security testing systems.
cybersecuritynews.com
October 27, 2026 at 11:19 AM
neroqc.bsky.social
Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials
gbhackers.com/ai-pentesting...
gbhackers.com
October 27, 2026 at 1:42 PM
grumble.social
Proton's CEO to tell people to ignore pentesting and focus on being fast should have anyone using Proton's services fleeing. Even before the insane AI push.
Manifestos, Fear, and ‘Loser Thinking’: Inside Proton’s AI Reckoning
Proton CEO Andy Yen projects a calm persona and rails against Big Tech and critiques AI. Internally, he is pushing engineers to build Proton with AI, even when they have security concerns.
www.404media.co
October 29, 2026 at 5:33 PM
marypcbuk.bsky.social
alt text snip from the linked article quoting the CEO calling pentesting new code bullshit and loser thinking

if him simping for Trump didn't put you off Proton, maybe insulting his employees will? this isn't the way to do responsible AI coding
doublepulsar.com Kevin Beaumont @doublepulsar.com · 4d
Proton have gone full AI slop from the CEO down.

It's basically a textbook example of CEO thinking: build shit and ship it, 'engineers', so I can buy another yacht.

www.404media.co/manifestos-f...
October 29, 2026 at 4:02 PM
danielmiessler.bsky.social
This is what I've been worried about: the techniques are old, but agents make mass exploitation cheap. 1,500 commands an hour versus 40 changes the math defenders and the whole ecosystem and balance.
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
["CrowdStrike says Vapor Panda, a China state-backed group, is running an active campaign using the ARTEX agentic AI pentesting framework with DeepSeek.","The group targeted more than 200 organizations across at least 14 countries since Oct. 17, and about 70% of targets were…
cyberscoop.com
October 31, 2026 at 12:48 AM
whittyrem.bsky.social
Just putting on my risk hat and quickly skimming and omfg pentesting is bullshit loser thinking??? Hahahahah we’re all so fucked
jasonkoebler.bsky.social Jason Koebler @jasonkoebler.bsky.social · 4d
this story is extremely wild, major investigation from @josephcox.bsky.social:

www.404media.co/manifestos-f...
Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”
October 29, 2026 at 4:51 PM
hasamba72.bsky.social
GTIG and Mandiant observed threat actors using open-source agentic pentesting frameworks (ARTEX, Hexstrike, CAIRN) in live intrusions: automated lateral movement, database exploitation, exfil prep. #ThreatIntel #LLM #ARTEX https://is.gd/iHGE3s
October 31, 2026 at 3:19 AM
thedailytechfeed.com
PentestPad lets pen-test teams run self-hosted AI agents via MCP so client data never leaves their network. #Security #AI #PentestPad #Compliance #Pentesting #Cybersecurity https://thedailytechfeed.com/how-pentest-companies-are-rethinking-ai-with-new-tools-like-pentestpad/
November 2, 2026 at 10:32 AM