Web App Defender | Bug Hunter/Triager | Purple Team | Detection Engineering | Author | Senior Threat Research Manager @Akamai_research | OWASP Project Leader ✝️
- Tweets 7,045
- Following 487
- Followers 5,778
- Likes 8,715
Pinned Tweet
I am still riding the #ProudCyberDad high of my daughter @4ng3lhacker and I getting the opportunity to give the first ever “Multi-Generational” @BlackHatEvents Briefing! 🙏
6
3
88
13,497
Ryan Barnett (B0N3) retweeted
Our call for papers is over, now we start a call for volunteers!
If you want to help with the BSides NOVA conference on Oct 30-31st, read this forms.gle/nZCDR6MPRgs8DQV28, fill out what you'd like to do and submit!
We need volunteers to run the conference, thanks if you can help!
1
2
8
555
Ryan Barnett (B0N3) retweeted
What brings people back to Black Hat year after year?
For father-daughter duo Ryan and Isabella Barnett, it's the community, the research, and the opportunity to learn from the people shaping cybersecurity's future.
Watch the latest Black Hat Stories: piped.video/watch?v=62ljM9dO…
1
1
8
4,897
Ryan Barnett (B0N3) retweeted
When your entire business could be at risk, some things are worth the money to keep it safe. @ryancbarnett and Isabella Barnett share their top 5:
4
2
4
1,366
We saw Alex present it live. Great research
For everyone who asked during #DEFCON regarding the article, you can find the full research for cache key injection below!
1
2
241
Ryan Barnett (B0N3) retweeted
My family is participating in a fund raiser for our church to help feed the hungry here in Northern Virginia and Zambia.
If you would like to donate, here is a link to our team (Joyful Noise) page:
runsignup.com/joyfulnoise/Do…
🙏✝️
1
2
3
745
Ryan Barnett (B0N3) retweeted
Come join @ryancbarnett and I at @BSides_NoVA for some spooky Unicode attacks this Halloween! 👻
@GeorgeMasonNews @Mason_CEC
1
2
5
260
Woohoo! @4ng3lhacker and I will be presenting @BSides_NoVA on Halloween!🔥👻🎃
@GeorgeMasonNews @Mason_CEC
2
11
362
Ryan Barnett (B0N3) retweeted
@ryancbarnett and I were interviewed for Blackhat Stories!
Here is the full video: piped.video/62ljM9dO_ns
3
9
1,520
I agree with @HackingLZ
akamai.com/blog/security/dec…
How will we defend against attackers automating with AI?
Look at the tool list below. The models mostly follow pentesting 101 and arrive at the same common tools attackers have used for years. You can harden against these techniques, and modern EDRs already do a great job of detecting and blocking a lot of this behavior.
LLMs don’t magically make the underlying techniques new.
3
875
Ryan Barnett (B0N3) retweeted
"That's what Black Hat is all about, whether it's researchers showing the problems that are there or how to solve those problems."
Ryan Barnett, Senior Threat Research Manager, and his daughter Isabella Barnett, Software Engineering Intern at Akamai, on presenting together at Black Hat.
piped.video/watch?v=62ljM9dO…
2
1
14
7,332
Ryan Barnett (B0N3) retweeted
We close our call for papers at 11:59 PM today. It's your last chance if you want do a talk or run a workshop on October 30th-31st.
You can submit a paper here: sessionize.com/bsidesnova-20…
You have a whole day to think about what you'd want to run or present, so good luck!
1
2
699
My family is participating in a fund raiser for our church to help feed the hungry here in Northern Virginia and Zambia.
If you would like to donate, here is a link to our team (Joyful Noise) page:
runsignup.com/joyfulnoise/Do…
🙏✝️
1
2
3
745
Ryan Barnett (B0N3) retweeted
Honestly, this version of Vader is pretty based.
214
1,547
12,222
671,742
I will give 👏 to @deadvolvo - dude is an exceptional security researcher. His AI pipeline skills have blown me away and the impacts he is having on @akamai_research are immense.
The bar for WAF bypasses will be raised soon and the half-life of a bypass will shrink too 🔥
Quiet competence is one of the most important traits a top-tier security researcher or hacker can possess. Do exceptional work. Break major systems legally. Protect millions of people. Document it well. Then move on without needing applause from strangers on the internet. 😜
4
1
25
4,387
Ryan Barnett (B0N3) retweeted
Quiet competence is one of the most important traits a top-tier security researcher or hacker can possess. Do exceptional work. Break major systems legally. Protect millions of people. Document it well. Then move on without needing applause from strangers on the internet. 😜
2
41
6,296
Ryan Barnett (B0N3) retweeted
Here are the Shazzer fuzz vectors I used whilst testing this:
shazzer.co.uk/vectors/6a68f8…
shazzer.co.uk/vectors/6a7054…
Interestingly null is converted to the unicode replacement character.
I put a JavaScript URL inside an HTML tag name, and every browser executed it. Apparently, tag names are code now. Link & explanation below 👇
ALT <JAVASCRIPT:ALERT(1) onfocus=location=localName autofocus tabindex=1>
1
19
2,560
Ryan Barnett (B0N3) retweeted
Thanks to everybody who filled out our survey and came to the Happy Hour at Bunnyman Chantilly on Friday. If anybody else would like to let us know what you would want at the BSides NOVA conference, please fill out the following survey: surveymonkey.com/r/PQBRT6R
1
3
436
Ryan Barnett (B0N3) retweeted
Could rogue browser extensions silently hijack your proprietary data?
More than 16% of employees use AI extensions with critical permissions, which risks exposing sensitive data to exfiltration or hijacking.
Learn more in this special report: ow.ly/WqOR50ZAA1z
1
2
1,232