Home of Responder, Pcredz, SecorizonAI, etc Red team ops, offensive pentests, fuzzing, etc. Back then, your 0days were your certs.
Montevideo, Uruguay
Joined November 2024
- Tweets95
- Following132
- Followers822
- Likes166
2 critical RCE vulnerabilities we discovered in Watchguard Fireware OS were patched this month.
Both pre-auth, one in the WebSocket connection handling of the access portal and the other one in the SIP proxy module.
Patch your devices now!
secorizon.com/advisories
We've seen more and more vendors using frontier models to patch their software. When not reviewed by a security engineer, most of the time the issues are not correctly resolved or introduce new attack vectors.
It's cool to find bugs with AI, but you shouldn't rely on AI to patch your software.
1
6
399
Our first OpenSSL advisory is out: CVE-2026-84782
A race in OpenSSL's DTLS retransmission logic can send heap memory to the peer in plaintext, or crash the process.
Affects almost all versions, from 1.0.2 through 4.0.2. Fixed in 4.0.3 / 3.6.5 / 3.5.9 / 3.4.8 / 3.0.23.
secorizon.com/advisories
4
324
The first set of our WatchGuard Fireware OS advisories are out: secorizon.com/advisories
128
We strongly believe that freedom starts with local models, but not everyone owns a decent rig.. So we implemented a /cloudmodel command which allows you to use deepseek v4 flash with secorizonAI. Its a great option for external recon, non-client work on code reviews, etc.
2
309
SecorizonAI v1.3 is out!
Many fixes and enhancements, DeepSeek flash support for code reviews and for those who don't have strong GPUs, and much much more.
It's free for everyone and it's fast :)
Get it here:
github.com/secorizon/Secoriz…
Quite hilarious that an open source Chinese model (GLM 5.2) actually helped Hugging Face -an American company- defend itself during this attack.
US models could not be used due to guardrails..
we had a significant security incident during evaluation of our models. we are sharing what we have learned so far. thanks to @huggingface for the partnership on this.
openai.com/index/hugging-fac…
2
359
Sorry, but you won’t get access to that supposedly amazing model—they’ll give you the restricted version, just like everyone else.
What you can get that no one else has is a model trained by Secorizon, one that only you control.
Freedom starts with owning your own models.
2
3
468
We anticipated these kinds of restrictions early on. That’s why we’ve spent significant time developing and training custom, pentest-oriented, enterprise-grade AI models that remain fully private and free from external limitations.
Limiting or banning AI models is stupid as it gets. As an industry, we failed at securing things over the past 30 years. Here we have a great opportunity to accept our fails, raise the bar and make it better.
2
528
We've been working quite a lot on OffByWon 2.0 lately, lots of new features, even easier to implement, new UI.
It's just better :]
Will be releasing soon, with more protocol examples.
1
306
We had a great interaction with Tuxera's team while working on this SMB issue. Always a pleasure to work with a responsible vendor.
tuxera.com/security-advisori…
217