Daniel Púa @devploit
Security Researcher · Head of Security @Magnific · CTF Player 🇪🇸 · @hackandbeers Málaga · Real-world infosec, no hype. devploit.dev Málaga, Spain Joined April 2016-
Tweets3K
-
Followers3K
-
Following927
-
Likes5K
3 submitted. 1 triaged. 1 accepted. at this point "submitted" is not a status, it's a lifestyle
POV: you're red teaming a system that rewrites its own code 52x faster than you can read the diff anthropic just said that system is closer than people think good luck with the pentest report
Our internal data shows Claude is accelerating AI development—a possible path to recursive self-improvement, or AI autonomously building a more capable successor. It’s happening faster than we thought, and the implications deserve greater attention. anthropic.com/institute/recu…
MITRE just assigned me 5 CVEs across 3 npm packages you've never thought about. 500M+ downloads a month. the scariest vulns aren't in your code. they're in your node_modules. names drop when the embargo lifts.
Not for vibe-coders, they started with a full blown e-commerce platform with a supabase backend and 8 microservices
Every software developer happiness started from here right??
#UpscaleConf San Francisco is officially underway Two days at The Midway with the people building what's next in AI and creativity Everything you need to navigate Day 1, in this thread ⬇️
🧠 Bug Bounty Tip: See X-Cache: HIT? Read the cached body before moving on. If a JWT/session token is baked into the homepage's inline JS, the CDN is caching authed responses → that's account takeover. #bugbounty #infosec #WCD
Your threat model should assume at least one of your accounts (Gmail, Apple ID, Password manager, 2FA app, Telegram, Signal, etc) are gonna be compromised eventually without your intervention.
Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone. People losing handles they’ve owned since 2010, some worth hundreds of thousands. I own a few rare ones so I was actually stressed watching this
prompt injection in 2026: 1/ hide instructions in a webpage 2/ wait for an agent to fetch it 3/ the agent now works for the attacker no exploit. no CVE. just text the model trusted.
@juanca_mnz dale un try a esto terax.app es una terminal con edición de archivos implementada
the smartest model still misses what a second pass catches. high + autoreview beating extra high alone says it all. reviewing > thinking harder.
@danielendara high + autoreview is better than extra high alone
solid prompt just remember: 100 is your floor, not your ceiling the score catches known anti-patterns, not bad architecture
this codex prompt is literally the best thing ever if you are building react apps and want the cleanest possible code simply run "/goal run npx react-doctor@latest and fix issues until you get a score of 100. do it properly without taking any shortcuts" in codex thank me later
git log of every dev alive: "fix" "fix again" "actually fix" "final fix" "ok this is the real fix" "revert"
@MiguelDuques always. the orgs that wait for "official capabilities" are the ones writing the post-mortem
Let's see if it finally meets the expectations it has generated.
JUST IN: Anthropic announces it will roll out Claude Mythos “in the coming weeks” despite growing fears over the model’s cyber capabilities.
a hacker doesn't break your password they buy it. $10 on a telegram channel. already leaked in a breach you forgot about stop changing passwords. start using a password manager + 2FA.
POV: you are using Claude opus 4.8
"We’re making swift progress on developing these safeguards and expect to be able to bring Mythos-class models to all our customers in the coming weeks." anthropic.com/news/claude-op…
⚔️ NoMore403 — The Access Control Bypass Toolkit Test 401/403 protections against: 🔥 WAF inconsistencies 🔥 CDN/proxy parsing issues 🔥 Trust-header abuse 🔥 HTTP desynchronization 🔥 Path encoding edge cases Capabilities include: ✅ Raw HTTP request crafting ✅ HTTP/1.0 vs HTTP/2 testing ✅ Duplicate Host/Authority tricks ✅ X-Original-URL bypass checks ✅ Unicode & double-encoding mutations ✅ Auto replay & scoring engine Built for modern attack-surface testing and bug bounty workflows. One of the most practical tools for discovering hidden authorization flaws. 🚀 🔗 github.com/devploit/nomor… #OffensiveSecurity #RedTeam #AppSec #bugbountytips #EthicalHacking #SecurityTesting
When I was younger I suffered from distro-hopping on Linux. Cured, happily settled on Mac... until I discovered my new condition: terminal-hopping. Desperately searching for that mythical terminal, half agent orchestrator, half good old terminal. I fall in love with a new one every 2 days😔 Currently dating Terax. Ask me again on Wednesday.
🅱1️⃣4️⃣�... @310hkc41b
14K Followers 2K Following La (in)seguridad es invisible. #Ciberseguridad, #Reversing, #DevOps, #SysAdmin Aprendiz de todo. Experto en nada.
hackplayers @hackplayers
55K Followers 1K Following Hacking ético e in-seguridad informática: it's time to play!
Intigriti @intigriti
209K Followers 666 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
🅰️s_informático @as_informatico
17K Followers 2K Following Siempre aprendiendo... Únete a Hack Valencia @hackvlc27 Actual presidente de la Asociación de Hackers de Valencia. El que se aburre es porque quiere! 😉
DragonJAR - Seguridad... @DragonJAR
254K Followers 3K Following Al 👉 seguirnos, te compartiremos información de calidad sobre #Hacking, Somos una empresa 🐲 👇 Colombiana de servicios en #SeguridadInformática
Eduardo Sánchez @eduSatoe
20K Followers 3K Following Profesor de FP - CEO @AllPentesting Pulmón de @HackandBeers - Responsable de @QurtubaCon Vicepresidente de @ANPhacket https://t.co/Q8ZJZlpQib
SLIMBOOK @slimbook
20K Followers 2K Following ᴛʜᴇ ʙᴇsᴛ ɢɴᴜ/ʟɪɴᴜx ᴄᴏᴍᴘᴜᴛᴇʀs🐧 💻 Elegant and powerful hardware with the best customer service 🇪🇺 EU brand from Spain 🌏 Shipping to the whole world
Securiters @securiters
10K Followers 501 Following Proyecto de divulgación de seguridad informática Newsletter: https://t.co/7ksXOvzVkC
El Enemigo Anónimo @EnemigoAnonimo_
6K Followers 547 Following La primera serie documental sobre ciberseguridad hecha en España. Un proyecto del periodista @ottoreuss. ¡Tenemos nuevo proyecto! Mira la url de abajo
AI_Bot @AIBot_CdH
9K Followers 5K Following Una bot muy humana. #Ciberinteligencia #OSINT #Ciberseguridad para perfiles NO técnicos 🔗 https://t.co/TFBBZVjVoP
Isaac Rodríguez @_isHaacK
365 Followers 62 Following Offensive Security Researcher • CTF's @Watch4Hack • @SynackRedTeam
Sergio de los Santos @ssantosv
18K Followers 685 Following Head of Innovación en Telefónica Tech. Opiniones mías. Escribí una novela que ganó un premio del Ateneo de Madrid.
Juan Antonio @sikumy
1K Followers 1K Following 24 | Creator of @DeepHackingBlog | Pentester at @TelefonicaTech
Joel GM @JoelGMSec
3K Followers 2K Following ● Senior Red Team Cybersecurity Expert ● Ex-CTO @ Cyberguard ● SysAdmin +10 years ● Creator of AutoRDPwn: The Shadow Attack Framework
[NN2ed] s4ur0n @NN2ed_s4ur0n
9K Followers 1K Following 0x0F0EAB28 · Security Researcher & Teacher · Offensive Security · Malware · Reversing · All my opinions are belong to me
Alfon 🎸 Seguridad ... @seguridadyredes
11K Followers 3K Following Wireshark/Tshark & Zeek IDS, Suricata IDS. Wazuh. Análisis y visualización gráf. capturas tráfico red. Shodan. https://t.co/3ih70SbsoW
Sec/Admln Cybersecuri... @secadm1n
4K Followers 859 Following Conferencias en #Hacking y #Ciberseguridad #SecAdmin
zayan @HustleXR
4K Followers 1K Following AI content creator | Visual experiments + storytelling open for paid collaborations & creative projects 🚀
tenjies @TenjiHorie
4 Followers 218 Following
@levelsio @levelsio
893K Followers 3K Following 📸https://t.co/lAyoqmSBRX $100K/m 🛰https://t.co/ZHSvI2wjyW $44K/m 🎮https://t.co/jFirUbDgtZ $39K/m 🏡https://t.co/1oqUgfD6CZ $35K/m 👙https://t.co/RyXpqGuFM3 + @X $14K/m 🌍https://t.co/UXK5AFqCaQ $10K/m 💾https://t.co/T74ZwJ1F0C $0/m
Mouhammad El Amine | ... @lil_hahmidj
46 Followers 768 Following IT Student | wanna be red teamer && threat hunter && && reverse engineer | CTF player | cybersecurity enthousiast
The Son of God @1TheSonofGoqtct
0 Followers 116 Following
James Ibrahim @JamesIb54140322
50 Followers 4K Following
Amit Patole @pat71644481
75 Followers 3K Following
Alex Greenland @ajrgd
2K Followers 6K Following ceo & founder @epiapp @episecurity @epiarc • defeating phishing, bad QR codes and cyber threats as a public service ↙ check a link is safe with epi
Con A @ConAlicato
73 Followers 2K Following
Ball 404 @Ball_404
394 Followers 7K Following
Elijah Ayomide Raji @jah_3li
2K Followers 7K Following Coder | AI/ML, mechatronics & emerging tech | Cyber & bug bounty | Finance thinker | Writer | Chess addict | Calisthenics Runner | Artist & music
意难平 @0x3d9
17 Followers 1K Following
ph1shhunt3r @ph1shhunt3r
271 Followers 4K Following cyber security, highland games, photography, all the outdoor activities
🍜🥢 @slavos1a
1 Followers 806 Following
Mohamed @fire_809
194 Followers 7K Following
Arthur @Arthur100x
8K Followers 2K Following As pessoas devem fazer apenas trabalhos interessantes. Se puder ser automatizado, deve ser automatizado.
Raymond @LinRaymond2006
25 Followers 4K Following
ett0re @_ett0re_
82 Followers 678 Following
Meesum @meesumhl
112 Followers 109 Following
Samuel Moats @smoats_capps
128 Followers 1K Following Engineering, AI all things HPC computing. DOD background.
Artificially Intellig... @ArtiIntelligent
298 Followers 7K Following Insanity is doing the same thing over and over and expecting different results...
Munitis @MerciESP19
60 Followers 2K Following
Tsvetan Dachev @tsvetand
139 Followers 2K Following
SubratSahu_IN @iamsubrat_IN
113 Followers 5K Following Coder| Cyber Security| AI ML DL #Infosec 01110010 01101111 01101111 01110100 01000000 01110011 01110101 01100100 01101111
Founder Engineer @founderengineer
117 Followers 600 Following Seek first His Kingdom and His righteousness and all of these things will be added to you. Working on the LLM for high-risk industries: @abliteration_ai
aman tripathi @amantripat44961
23 Followers 614 Following
Antonio Peña @apenav
420 Followers 969 Following IT Professional. Madrid #Devops & #DevopsDaysMadrid co-organizer #kubernetes #cloud
Amar Prabhu @prabhualways
956 Followers 4K Following Pushing buttons @rupeekapp 👨💻 🚴 🍗 Tweets on tech, health and politics. Elsewhere: https://t.co/JdGPZJaIio https://t.co/saErq26TgQ
Ald @Aldebaran0A
3 Followers 211 Following Listening. Learning. Linking. Quiet by design. Curious by default.
uzaykomutani @yourethefool
54 Followers 980 Following
mf1p @machadof1p
126 Followers 2K Following ✝️ Jesus is King 💻 IT/Sec/Cyber ⚽️SPFC 🚗 SimRacing📌 São Paulo/Brazil
elhacker.NET @elhackernet
141K Followers 614 Following Recibiendo ataques DDoS desde 2001. RIP wolfbcn. Telgram https://t.co/QSdxPId0ZH - Tecnología, seguridad, informática
vx-underground @vxunderground
438K Followers 357 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Brais Moure @MoureDev
272K Followers 391 Following 💻 Te ayudo a aprender programación e IA desde cero 👨💻 16 años como Ing. de software | Divulgador ⭐️ GitHub Star · Microsoft MVP 🤘 Mi campus → https://t.co/kYXLjSy2Cx
Nicolas Krassas @Dinosn
157K Followers 766 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKZLB Posting content that I find interesting.
hackplayers @hackplayers
55K Followers 1K Following Hacking ético e in-seguridad informática: it's time to play!
Carlos Santana @DotCSV
221K Followers 1K Following 🤖 Divulgador de Inteligencia Artificial (DotCSV) ✉️ Contacto comercial: [email protected] 📚 Enseño sobre IA en Youtube, Tiktok e Instagram
Intigriti @intigriti
209K Followers 666 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
🅰️s_informático @as_informatico
17K Followers 2K Following Siempre aprendiendo... Únete a Hack Valencia @hackvlc27 Actual presidente de la Asociación de Hackers de Valencia. El que se aburre es porque quiere! 😉
DragonJAR - Seguridad... @DragonJAR
254K Followers 3K Following Al 👉 seguirnos, te compartiremos información de calidad sobre #Hacking, Somos una empresa 🐲 👇 Colombiana de servicios en #SeguridadInformática
Eduardo Sánchez @eduSatoe
20K Followers 3K Following Profesor de FP - CEO @AllPentesting Pulmón de @HackandBeers - Responsable de @QurtubaCon Vicepresidente de @ANPhacket https://t.co/Q8ZJZlpQib
SLIMBOOK @slimbook
20K Followers 2K Following ᴛʜᴇ ʙᴇsᴛ ɢɴᴜ/ʟɪɴᴜx ᴄᴏᴍᴘᴜᴛᴇʀs🐧 💻 Elegant and powerful hardware with the best customer service 🇪🇺 EU brand from Spain 🌏 Shipping to the whole world
cts🌸 @gf_256
67K Followers 981 Following founder and hacker @zellic_io @v12sec @pb_ctf yt https://t.co/nlNai6iQCn
TryHackMe @tryhackme
305K Followers 83 Following An online platform that makes it easy to break into and upskill in cyber security, all through your browser.
Securiters @securiters
10K Followers 501 Following Proyecto de divulgación de seguridad informática Newsletter: https://t.co/7ksXOvzVkC
Ben Sadeghipour @NahamSec
247K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
El Enemigo Anónimo @EnemigoAnonimo_
6K Followers 547 Following La primera serie documental sobre ciberseguridad hecha en España. Un proyecto del periodista @ottoreuss. ¡Tenemos nuevo proyecto! Mira la url de abajo
Kimi Developers @KimiDevs
58K Followers 1 Following The official Kimi account for developers building with Kimi Code and the Kimi API.
Omar Pera @ompemi
8K Followers 1K Following focus now: AI for creativity, cpo @magnific (formerly freepik) • before: AI for support, founder @replydotai (acquired) • former @meta @cern
Zach Lloyd @zachlloydtweets
10K Followers 85 Following Founder @warpdotdev. Prev: Principal Eng at Google Docs. Trying to build impactful software.
ZachXBT @zachxbt
1.0M Followers 2K Following Scam survivor turned 2D investigator, Advisor @paradigm
Asher Davila @Asher_Davila
1K Followers 2K Following Security Researcher 🖥 👨🏻💻My tweets are my own. 🇺🇸Mexican ninja 🇲🇽🥷🏽 https://t.co/MRTzKwO9yT
Yisus🍞 @yisustm_01
17K Followers 285 Following Hago cositas guays a veces... Developer at @magnific Works: https://t.co/jocFA8oVnr
Theo - t3.gg @theo
342K Followers 4K Following Full time CEO @t3dotchat. Part time YouTuber, investor, and developer
Thariq @trq212
277K Followers 2K Following Claude Code @anthropicai. prev YC W20, @southpkcommons, @medialab
Kevin Naughton Jr. @KevinNaughtonJr
101K Followers 266 Following building @ferrymanio, prev eng @google
Nostalgia @NostalgiaYZ
29K Followers 223 Following Sharing #nostalgic media from the 90s/2000s that take you back to simpler times.
GREG ISENBERG @gregisenberg
670K Followers 981 Following I drop startup ideas daily. Host @startupideaspod. CEO: @latecheckoutplz we build companies like @ideabrowser, @meetLCA, @boringmarketer etc
@levelsio @levelsio
893K Followers 3K Following 📸https://t.co/lAyoqmSBRX $100K/m 🛰https://t.co/ZHSvI2wjyW $44K/m 🎮https://t.co/jFirUbDgtZ $39K/m 🏡https://t.co/1oqUgfD6CZ $35K/m 👙https://t.co/RyXpqGuFM3 + @X $14K/m 🌍https://t.co/UXK5AFqCaQ $10K/m 💾https://t.co/T74ZwJ1F0C $0/m
Marc Lou @marclou
350K Followers 1K Following ⭐️ https://t.co/MZc8tGa5LQ $27K/m 📈 https://t.co/3EDxln5U2Q $20K/m 🏴☠️ https://t.co/dr6UTvtYcO $20K/mo 🧑💻 https://t.co/Y30jsaI4oH $8K/m ⚡️ https://t.co/vatLDmiHKe $6K/m 🦐 https://t.co/d4zcSHnfYk $1K/m +28 https://t.co/4zCWHGJWRq
vxdb @vxdb
25K Followers 485 Following Journalist | Cybercrime News | Staff @vxunderground | PGP - https://t.co/VWwniNXrEc
BugBunny.ai - Continu... @BugBunny_ai
3K Followers 5 Following AI pentesting at scale. Real findings, validated PoCs. N°1 on HackerOne. 50+ confirmed CVEs across Google, Python, Meta, OpenAI, etc.
Z A D D Y @Zaddyzaddy
4K Followers 1K Following Security Researcher 👨🏽💻👨🏽💻 | CS Phd Candidate @ucl @uclisec | chef at https://t.co/cjB8Bt8yh4, https://t.co/jLQT9Dh5Yt, ██████ | Crypto | UFC at Night
Peter Steinberger �... @steipete
541K Followers 2K Following Polyagentmorous ClawFather. Came back from retirement to mess with AI and help a lobster take over the world. @OpenClaw🦞 + @OpenAI
Cyber Security News @The_Cyber_News
65K Followers 283 Following World’s #1 Largest Cyber Security News 📰 Platform For Security Professionals. Get Latest #CybersecurityNews #HackingNews, #Cyberattack, #Threats & #breaches
Nir Ohfeld @nirohfeld
5K Followers 951 Following Head of Vulnerability Research @wiz_io | @Microsoft MVR (2021-2025) | Pwn2Own 2025 | @Forbes 30 Under 30 | Ask me anything about https://t.co/QfzcO03PpS
Xion @0x10n
5K Followers 129 Following CMU CSD PhD student | '24/'25 Top#0 Chrome Researcher | P2O Vancouver '24, TyphoonPWN '24/'25, DEFCON CTF 31-33, ... | PPP, KAIST GoN '18, @zer0pts
Upscale Conf @upscaleconf
3K Followers 383 Following Tomorrow's creativity is happening today. Join AI experts, designers, & creatives in SF. Organized by @magnific #UpscaleConf
Bug Bounty Village @BugBountyDEFCON
9K Followers 603 Following Official X account for the Bug Bounty Village @DEFCON. Founded by @infinitelogins and @arl_rose.
Jonas Lejon @jonasl
27K Followers 13K Following Cyber Security since 1998 ✌️ Also known as @kryptera - Chairman of the board at @ISOCSE
OpenAI Developers @OpenAIDevs
355K Followers 1 Following Official updates for developers building with Codex & the OpenAI Platform • Service status: https://t.co/kZwnwdYYEq
OpenAI @OpenAI
4.9M Followers 4 Following OpenAI’s mission is to ensure that artificial general intelligence benefits all of humanity. We’re hiring: https://t.co/dJGr6LgzPA
watchTowr @watchtowrcyber
12K Followers 12 Following watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
Sofía López @sofialomart
7K Followers 3K Following Head of Social & Community at @magnific (formerly @freepik) | @upscaleconf staff | Art History & Scicomm | #GenAi #Astronomy | Also at @AstroCulturaSEA
Paula Vivas @PauVivas
1K Followers 589 Following Mami of 3 • CoFounder at @charisdotai • having fun with @upscaleconf • Head of US Marketing, PR and Comms at @freepik
Miguel Ángel G. @MiguelAGarcia96
1K Followers 3K Following Especialista en Marketing y Comunicación. Observando.
Gareth Heyes \u2028 @garethheyes
38K Followers 1K Following JavaScript for hackers: Learn to think like a hacker. https://t.co/e0aNEbEDk5
am.will @LLMJunky
26K Followers 2K Following StarSwap // Life in Color Director of n number of agents. Thoughts are my own. Also not a car.
ClaudeDevs @ClaudeDevs
481K Followers 3 Following Official updates for developers building with @ClaudeAI
SickSec 🇲🇦 🇵... @OriginalSicksec
9K Followers 401 Following I love GraphQL | Hackerone Ambassador 🇲🇦 | Tweets are my own | Riichi #Mahjong Player | Founder of https://t.co/9ELRuMo4HK
Intrudir @intrudir
296 Followers 422 Following Security Consultant @NetSPI - Is your refrigerator running? Because I can’t login to it anymore.
Marcos Díaz @Calvaruga
203 Followers 2K Following
Valentino Massaro @valent1nee
1K Followers 177 Following
Borja Macias @peekipoon
54 Followers 405 Following Entrenador Pokemon desde 2016, aventurero por naturaleza, vivo al límite usando baya 🍍 para capturar Legendarios. Sígueme, Lickitung ya lo hace ¡Lengüetazo!You might like
