InfoSec boutique.
Owning things since 2014.
We love to go for the extra mile, where we usually find the best 🦟🐞🪲🪳🐛🐜🕷 the others miss.shielder.com ItalyJoined July 2014
Well that was a ride! Happy to share that I've been awarded with the OMSE certificate after successfully completing the "Offensive Mobile Security Expert" course and exam by @8kSec .
Thanks to @ShielderSec for this training opportunity and to @8kSec for their top-notch content!
#KubeCon EU starts today and guess what? Our very own @suidpit will be on stage with a panel about the @kubernetesio Security Audit we performed during 2025 with the support of @OSTIFofficial!
🗓️ March 25 - 16:45 CET
📍 Hall 8 | Room F
Attending @1ns0mn1h4ck?
Meet @not4nhacker@Luk3ros and @Sev1rus from our AppSec and Red teams!
They are eager to discuss about breaking complex authentication implementations and relaying all the things to DA!
Love breaking things just to see how they work? 🐛🔨
A @ShielderSec delegation is on the ground at @fosdem, and we're looking for fellow hackers and security researchers.
If you are passionate about securing the Open Source world, we definitely need to talk!
Happy New Year, Hackers! 🎆
We’re looking forward to a 2026 full of crazy exploits, instant patches, and - most importantly - YOU, the amazing human beings behind the screens.
Want to learn more about our approach into auditing complex libraries and writing cool exploits?
Attend @OSTIFofficial's meetup where our very own @Th3Zer0 and @suidpit will talk about the "Security Audit of OpenEXR"
🗓️: Dec 02
🕗: 20:00 CET
RSVP: luma.com/ostif-meetups?…
So, Symantec/Broadcom PAM seems to contain code in PHP, Java, and Perl simultaneously. Guess how many issues are hiding there? @Paupu_95 keeps the tension high, and we still don’t know the answer. This #TheSAS2025 talk is quite thrilling.
Attending #theSAS25? Meet @Paupu_95 for his PAM pwnage talk!
It won't be recorded and it might *wink wink* contain a cool drop you don't want to miss 👀
Attending #TheSAS2025? Don't miss our gangster @Paupu_95 pull off a credential heist, taking down a PAM and going from no info to full infra compromise!
You’ve done everything right: least privilege, PAM solution deployed, users don’t even know passwords. What could go wrong? Paolo Cavaglià (@Paupu_95) from Shielder has the answer in his #TheSAS2025 talk, "Grand Theft Credential: Ransomware Gangs’ Wet Dream"
🏰 His team spent
🚨 New Open Source Audit Alert! 🚨
Shielder, with @OSTIFofficial & @AcademySwf, audited OpenEXR and MaterialX:
🔍 11 issues found (1 critical, 3 still to be published)
✔️ Most fixed, others planned
🗣️ to @ndaprela@smaury92@suidpit @Th3Zer0
Full details in the blog post ⬇️🧵
48K Followers 2K FollowingMusic, cybersecurity, open source and AI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things.
Chief Architect @ 🥷
38K Followers 5K FollowingFounder of Security Affairs, CYBHORUS, and Cybaze. Director of the Cybersecurity Observatory at Unipegaso, Ethical Hacker, Security Evangelist, Security Analyst
7K Followers 3K Followingaka Drego. Head of Cyber Threat Intelligence at @D3LabIT! @PhishingArmy, #meioc is my projects and @backbox_org dev! My passions are #F1 and #Running!