InfoSec boutique. Owning things since 2014. We love to go for the extra mile, where we usually find the best 🦟🐞🪲🪳🐛🐜🕷 the others miss.
Italy
- Tweets 480
- Following 1
- Followers 1,565
- Likes 288
Meet our very own @smaury92 in Bali for #TheSAS2026
P.S. we know he always travels with some swag 👀
2
8
660
With @OSTIFofficial and @sovtechagency we audited @symfony YAML, the library bundled in that PHP framework that all your friends probably run somewhere in their stack. If that's true, please update and read the attached blogpost to find out if you're affected!
Links ⏬
2
4
10
1,047
Blogpost: shielder.com/blog/2026/06/sy…
Report: github.com/ShielderSec/publi…
2
108
Shielder retweeted
Inspektor Gadget has completed its first security audit. Three vulnerabilities fixed, six hardening recommendations addressed — coordinated by @OSTIFofficial and led by @ShielderSec.
> inspektor-gadget.io/blog/202…
3
20
3,733
Shielder retweeted
Well that was a ride! Happy to share that I've been awarded with the OMSE certificate after successfully completing the "Offensive Mobile Security Expert" course and exam by @8kSec .
Thanks to @ShielderSec for this training opportunity and to @8kSec for their top-notch content!
1
2
5
502
Shielder retweeted
The @OSTIFofficial coordinated #InspektorGadget’s first independent security audit, backed by @CloudNativeFdn and performed by @ShielderSec. Nice example of transparent OSS security work.
techcommunity.microsoft.com/…
#Kubernetes #eBPF #OpenSource #Security
2
5
573
Can a hostile container sneak past your eBPF tracing? Sometimes, yes.
With @OSTIFofficial & @CloudNativeFdn we audited Inspektor Gadget - 3 vulns (fixed), 6 hardenings, 6 bypasses (io_uring, openat2, jumbo frames…).
Work by @ndaprela & @suidpit👏
🔗 shielder.com/blog/2026/04/in…
12
22
2,080
#KubeCon EU starts today and guess what? Our very own @suidpit will be on stage with a panel about the @kubernetesio Security Audit we performed during 2025 with the support of @OSTIFofficial!
🗓️ March 25 - 16:45 CET
📍 Hall 8 | Room F
1
2
9
716
Attending @1ns0mn1h4ck?
Meet @not4nhacker @Luk3ros and @Sev1rus from our AppSec and Red teams!
They are eager to discuss about breaking complex authentication implementations and relaying all the things to DA!
5
10
497
Love breaking things just to see how they work? 🐛🔨
A @ShielderSec delegation is on the ground at @fosdem, and we're looking for fellow hackers and security researchers.
If you are passionate about securing the Open Source world, we definitely need to talk!
4
3
610
Happy New Year, Hackers! 🎆
We’re looking forward to a 2026 full of crazy exploits, instant patches, and - most importantly - YOU, the amazing human beings behind the screens.
2
5
407
Bootloaders acting weird? 🐛
If you are at #39c3, catch @ShielderSec's own @Th3Zer0 to geek out over bootloader oddities and low-level vulnerabilities.
1
4
726
Want to learn more about our approach into auditing complex libraries and writing cool exploits?
Attend @OSTIFofficial's meetup where our very own @Th3Zer0 and @suidpit will talk about the "Security Audit of OpenEXR"
🗓️: Dec 02
🕗: 20:00 CET
RSVP: luma.com/ostif-meetups?e=cal…
5
8
764
🔥🔥🔥
So, Symantec/Broadcom PAM seems to contain code in PHP, Java, and Perl simultaneously. Guess how many issues are hiding there? @Paupu_95 keeps the tension high, and we still don’t know the answer. This #TheSAS2025 talk is quite thrilling.
1
1
422
Attending #theSAS25? Meet @Paupu_95 for his PAM pwnage talk!
It won't be recorded and it might *wink wink* contain a cool drop you don't want to miss 👀
3
7
1,639
Attending #TheSAS2025? Don't miss our gangster @Paupu_95 pull off a credential heist, taking down a PAM and going from no info to full infra compromise!
You’ve done everything right: least privilege, PAM solution deployed, users don’t even know passwords. What could go wrong? Paolo Cavaglià (@Paupu_95) from Shielder has the answer in his #TheSAS2025 talk, "Grand Theft Credential: Ransomware Gangs’ Wet Dream"
🏰 His team spent two weeks reverse engineering Broadcom’s CA PAM and found 13 vulnerabilities that lead to complete infrastructure takeover. A malicious actor can decrypt all stored credentials, move laterally to every managed host, and own the company.
More SAS gold (aka agenda): kas.pr/6rx9
1
2
3
805