Manager I, Security Research @datadoghq | he/him | ex https://teapawt.net/t.co/o1EIMjEmIk, https://teapawt.net/t.co/r3eI34P95R | my website: https://teapawt.net/t.co/Zcg7COPgTk Opinions are mine!
Joined September 2009
- Tweets4.1K
- Following1.2K
- Followers404
- Likes6.8K
securitylabs.datadoghq.com/a…
We are working on more in depth version, stay tuned and meanwhile upgrade any PHP facing instance #php2shell
Read my take about how we should as a manager think about team performance and priorities in the AI era
eslamsalem.substack.com/p/01…
#leadership #security
1
76
Eslam Salem retweeted
So proud of our security team! They caught, contained & publicly disclosed an attack unlike anything we've seen before, and did it at record speed.
Also massively grateful to @Zai_org: they shared GLM5.2 as open weights (for free!) with the world and it became a key part of our defense.
This is day one for cybersecurity in the age of agents & we're all learning that secrecy is not the answer & that all defenders (not just a few selected ones) everywhere need more powerful models without restrictions, especially open ones!
New in Datadog Security Labs 🚨🚨: `@\injectivelabs/sdk-ts` v1.20.21 shipped with a backdoor disguised as "telemetry."
It hooked key derivation and sent raw seed phrases + private keys.
Full breakdown + IOCs: securitylabs.datadoghq.com/a…
The restrictions will probably backfire. Anyone outside US will consider diversity the AI vendors to avoid this kind of behavior and will allow the acceleration of the Chinese AI models more and more.
Breaking: Amazon CEO Andy Jassy was among the tech leaders who raised concerns to senior Trump officials this week re: security risks in Anthropic's newest models.
Those convos set in motion the government's new export controls on foreign national access to Mythos and Fable.
1
106
Amazing product by a really smart and hard working founders @EzV01d and @HsanMostafa. Good luck team 👏
RASPIRE (@raspire_) is building app security at AI speed.
As AI accelerates mobile attacks, their platform protects Android and iOS apps from fraud, reverse engineering, and API abuse with zero code changes. They're already securing apps used by 20M+ people across banking, fintech, and healthcare.
Congrats on the launch, @EzV01d & @hsanmost!
ycombinator.com/launches/QgY…
1
201
Eslam Salem retweeted
RASPIRE (@raspire_) is building app security at AI speed.
As AI accelerates mobile attacks, their platform protects Android and iOS apps from fraud, reverse engineering, and API abuse with zero code changes. They're already securing apps used by 20M+ people across banking, fintech, and healthcare.
Congrats on the launch, @EzV01d & @hsanmost!
ycombinator.com/launches/QgY…
Eslam Salem retweeted
Gaza toddler released from Israeli custody with suspected torture wounds
trib.al/g1SOaOz
Eslam Salem retweeted
How has this became NORMAL?
This is an INSANE HEADLINE!
Gaza toddler released from Israeli custody with suspected torture wounds
trib.al/g1SOaOz
Eslam Salem retweeted
It's been reported that an Israeli court ruled Walid Ahmad, a Palestinian child who died while detained in an Israeli prison, was 'likely starved'. He was held for six months without charge.
Sadly, such ill-treatment is not unusual. It is unconscionable that any child should be treated this way.
❗ Content warning: child sexual violence and abuse
Palestinian children are the only children in the world to experience systematic prosecution in military courts. It’s an abusive, inhumane prosecution system, where children are being physically, emotionally and sexually abused, humiliated and starved in Israeli military detention.
The UK Government should publicly call for the release of all Palestinian children arbitrarily detained and call for an end to Israeli military authorities arresting, detaining and prosecuting children.
Eslam Salem retweeted
SecurityClaw - Open-source SOC investigation tool github.com/SecurityClaw/Secu…
Eslam Salem retweeted
‼️I am preparing a study on genocide and the media.
Submissions including evidence, analyses, testimonies, documented cases are welcome.
Call for submissions below:
🇬🇧ohchr.org/en/calls-for-input…
🇫🇷ohchr.org/fr/calls-for-input…
🇪🇸ohchr.org/es/calls-for-input…
🇵🇸ohchr.org/ar/calls-for-input…
Impressive updates with replit Agent 4. Congrats @amasad
Software isn’t merely technical work anymore. It’s creative.
Introducing Replit Agent 4. The first AI built for creative collaboration between humans and agents.
Design on an infinite canvas, work with your team, run parallel agents, and ship working apps, sites, slides & more.
75
It was an interesting 72 hours tracking down the second wave of Shai Hulud campaign. It's more sophisticated and aggressive than the first one. We published all what we know about it here securitylabs.datadoghq.com/a… #npm #shaihulud #malware
1
223
Our team tracked down a malicious campaign in NPM deploying Vidar stealer. This is the first time we see Vidar stealer distributed via supply chain attack.
securitylabs.datadoghq.com/a…
#npm #malware #supplychainattack
Eslam Salem retweeted
Hackers are becoming builders - by integrating AI enhancements they’re amplifying their unique tradecraft to hack deeper, faster. I'll be sharing my vision of the future of hacking in @Hacker0x01's 'Bionic Hacking' webinar on October 15! Register here: hackerone.com/events/bionic-…