Tanto Security is a leading provider of advanced offensive cyber security services to leading organisations across Australia, New Zealand and North America.
Australia & New Zealand
Joined June 2021
- Tweets215
- Following89
- Followers536
- Likes377
Tanto Security retweeted
Four years running!
@TantoSecurity has sponsored BSides Canberra every year since 2023 and they contribute some pretty amazing talks along the way.
Thanks for continuing to support BSides both on and off the stage! ❤️
tantosec.com/
Tanto Security retweeted
🚨 A public Telerik UI PoC chains a padding oracle into unauthenticated RCE.
TantoSec’s exploit for RadAsyncUpload forges encrypted state and loads a DLL, but only on specific non-default configurations.
Inside the chain → thehackernews.com/2026/09/te…
Tanto Security retweeted
🔥ℝ𝕖𝕒𝕕𝕪 𝕥𝕠 𝕓𝕣𝕖𝕒𝕜 𝕥𝕙𝕖 𝕤𝕥𝕒𝕔𝕜 𝕒𝕟𝕕 𝕡𝕨𝕟 𝕥𝕙𝕖 𝕙𝕖𝕒𝕡?
Corelan Stack (Feb 3-6) + Heap (Feb 9-12) in Melbourne 🇦🇺 — the ultimate exploit dev combo, back to back 💥
Do both = earn your shot at CCED 😈
Seats 👉 bit.ly/corelan-training
💛 Sharing = caring
Tanto Security retweeted
🚨BBOT Security Advisory🚨
4 fresh CVEs (2 CRITICAL RCE) can give a clever defender RCE on your attack box if you’re on BBOT <2.7.0.
Hat tip to @justinsteven of @TantoSecurity for the catch. 🙌
Details 👉BLS Blog blog.blacklanternsecurity.co…
#infosec #CVE
Tanto Security retweeted
Swinging from the treetops with a mighty roar of thanks to our sponsors — @googlecloud, @TantoSecurity, @3xploit5ecurit7, REA Security, @TrenchantARC, Mantel Group, @Division5io, @VolkisAU, asontu & @PentesterLab! You made this wild adventure unforgettable! 🦁🌴🎉
Tanto Security retweeted
“What’s the worst that could happen?”
In 2020, @justinsteven registered a legacy S3 bucket once owned by the Linux Vendor Firmware Service.
He ended up between 100,000 Linux machines and their updates.
Catch the full story at BSidesCbr2025 cfp.bsidescbr.com.au/bsides-…
Tanto Security retweeted
🇦🇺 Corelan hits Melbourne for the FIRST time!
💥 Stack Exploit Dev: Feb 3–6, 2026
🧨 Heap Masterclass: Feb 9–12, 2026
🎯 w/ @TantoSecurity
🧠 Real skills. No fluff.
💣 Come prepared.
🕐 Early bird ends Sept 2025
👉 bit.ly/corelan-training
#Corelan #ExploitDev
Tanto Security retweeted
0xCC 2025 tickets are now available! 🎉✨
We're a free technical training conference by women, for women in or interested in cybersecurity.
Date: 13-14 June
Location: Melbourne
Tickets: events.humanitix.com/0xcc-20…
Need help attending? We have a travel grant program!
Website: 0xcc.sh
Tanto Security retweeted
In our final countdown we wanted to give another shout out to @TantoSecurity, and so we'd like to throw a big thank you for joining us as gold sponsors!
Tanto Security retweeted
🔥 2025, we’re coming in HOT! 🔥 Block out July 18th-20th - it’s going to be an absolute explosion of fun! 🎉🚀
#CTF #DownUnderCTF
ALT DownUnderCTF 2025: coming 18th to 20th July.
Tanto Security retweeted
Great cons happen with great community support! Droppy and the sleuth are pleased to share that @TantoSecurity has joined us as a Gold Sponsor this year. Give a hand to them, we can't make CrikeyCon happen without our sponsors!
Tanto Security retweeted
Marcio Almeida (@marcioalm) from @TantoSecurity to talk at #OBTS about a vulnerability he discovered in Shortcuts - CVE-2024-40834 - that can bypass OSX security controls.
Seems Shortcuts has a massive attack surface - the main defense ‘relies’ on a user to NOT click accept!
Tanto Security retweeted
🧵My latest blog post is live 🔥 Read it to learn what SafeMarshal is and *two* very different ways to escape and get RCE!
nastystereo.com/security/rub…
Tanto Security retweeted
The website hasn't been updated yet but I will be speaking at Ruxmon this Friday on my recent security code review adventures!
A 2-part talk: one on Navidrome and the recent CVE I found and one on reviewing JWT libraries to identify algorithm confusion vulnerabilities.
Tanto Security retweeted
Articles worth reading discovered last week:
🗞 sonarsource.com/blog/why-cod…
🗞 blog.doyensec.com/2024/10/02…
🗞 tantosec.com/blog/grav/
🗞 pathonproject.com/zb/?5dfff3…
#PentesterLabWeekly
Tanto Security retweeted
We just released a post on certifications:
"The Certification Trap"
Make sure you check it out!
pentesterlab.com/blog/the-ce…
Tanto Security retweeted
#BSidesCbr24 Talk Annoucement: 'How I fully compromised the “most advanced code execution system in the world"' by Daniel Cooper cfp.bsidescbr.com.au/bsides-…
Tanto Security retweeted
Continuing the series of research blogposts we have CVE-2024-27292 where Riyush disclosed a series of vulnerabilities that when chained together could result in Unauthenticated RCE in the Docassemble <= 1.4.96 tantosec.com/blog/docassembl…
