Sign in

Mohamed AbuMuslim (أبومسلِم)

@m19o.bsky.social
208 followers 540 following 348 posts

Security nerd with a mic. Co-Founder @BSides_ABQ. Board @OWASPEgypt. R&D @aivillage_dc. YT @CyberDose_. Doing ai security/safety somewhere.

PostsRepliesMedia
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 15/10/2026
I’ve open-sourced Opposing Counsel, an approach I’ve been experimenting with for adversarial code reviews using different AI models. github.com/m19o/opposin...
github.com
GitHub - m19o/opposing-counsel
Contribute to m19o/opposing-counsel development by creating an account on GitHub.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 09/10/2026
You know what i hate the most about AI? Everyone now is talking about cybersecurity
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 30/09/2026
Alignment may stop the average computer user. It won’t stop a threat actor.
021 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 25/08/2026
Got my OSAI! Apparently, I’m the first Egyptian to get it 🇪🇬 Been working heavily on AI security and agents, so it was fun going through Offsec's take on attacking AI systems.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 22/08/2026
I found a vulnerability in Chainlink and wanted to report it. @hacker0x01.bsky.social needs weeks to complete the verification process, and @immunefi.bsky.social wants my underwear size before I can even submit the report. WTF is this?
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 21/08/2026
Wtf?
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 21/08/2026
Penetration testing as we know is dying
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 13/08/2026
Goodbye to @defcon.bsky.social and the hackers’ paradise until next year.
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 07/08/2026
Being the only Mohamed speaking at @defcon.bsky.social isn’t just a personal milestone. It’s about opening the door for the next Mohamed who comes after me.
121 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 02/07/2026
I got accepted to speak at @redteamvillage.bsky.social. Join me at @defcon.bsky.social, where I will be talking about a project I have been working on for a while to help red team operators make faster decisions around redirectors. And of course, with AI involved. See you there.
052 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 27/06/2026
Hacking is debugging but with a different intent.
000 0
Reposted by Mohamed AbuMuslim (أبومسلِم)
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 13/06/2026
Many have reached out and ask about AI Village CFP, we are live now; submit your coolest AI research! aivillage.org/events/defco...
001 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 13/06/2026
Many have reached out and ask about AI Village CFP, we are live now; submit your coolest AI research! aivillage.org/events/defco...
001 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 06/06/2026
Building your own agents is a great experience. You will learn a lot. But trying to build agents for everything instead of using what is already available online is not a wise way to spend your time. 1/8
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 29/05/2026
Responsible disclosure has been broken for years, and the problems exist on both sides.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 18/05/2026
On behalf of everyone in this industry, we already had enough on our plate before AI entered the chat.
011 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 17/05/2026
If I had a penny for every founder who pitched me a product and couldn't answer "why does this even need an LLM?", I'd be a millionaire.
020 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 08/05/2026
Companies that laid off employees and sold the idea that AI could do their work are now facing the consequences of that decision, and this is not the end of it. They will hire again, but most likely without learning from the same mistakes.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 06/05/2026
Could you please ask the non-technical people to stop shipping code for a while
020 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 28/04/2026
They hacked UDEMY! Oh, how? I don't know, you can check if your data got leaked from here. Very useful, thank you.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 22/04/2026
This is an important edge of the argument. AI enables more people to have the ability to find vulnerabilities. Being an elite researcher is expensive in terms of money, effort, time, and having the opportunity to focus on this specific area of the industry.
200 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 21/04/2026
Two days ago, I was talking about how the industry is going to change, and that it is not necessarily a bad change. We work every day to solve problems, but when a solution starts to appear, people panic. I know it may not be perfect, but it will push organizations beyond mere compliance.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 16/04/2026
For anyone talking about WE SHOULD PATCH QUICKLY. Did you see a backlog before?
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 15/04/2026
Was built on open source, using open source, and now we want to go closed source. Reshaping the world for the worse and dragging us back to the 60s and 70s, when gatekeeping was the norm.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 15/04/2026
Again, If you think cybersecurity is just about raining down vulnerabilities, you do not know anything about cybersecurity.
020 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 14/04/2026
People still do not get it. We are not denying the AI revolution, and we are not denying that LLMs are reshaping the industry. What we are calling out is the nonsense. claims not touching the ground, overhyped marketing, and the constant flexing about how many vulnerabilities LLMs can find.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 13/04/2026
If you think keeping it closed-source will help tackle APTs, you know nothing about APTs.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 12/04/2026
There are a few takes about Mythos that need to be grounded a bit. Mythos is not the first LLM-based project to move in the direction of vulnerability research. Google had already introduced AI-Powered Fuzzing for OSS-Fuzz in 2023, using LLMs to generate fuzz targets.
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 03/04/2026
On my way to resign from a company that doesn’t accept my beard and wants me to shave it. HR literally told me that having a long beard is “bad hygiene”. This kind of mindset still exists in 2026. The irony? Next slide is always about inclusion and diversity.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 03/04/2026
Every now and then, an incident happens that reminds you the sharpest weapon a human has is the mind. Looking at this series of supply chain compromises, whether it is TeamPCP or the North Koreans, you cannot miss the frightening beauty of human intelligence.
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 26/03/2026
Grok dropped the database?
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 26/03/2026
Not the first supply chain attack but another lesson many still didn’t learn. And just to be clear, this is not about LiteLLM. Using a 3rd party doesn’t remove the responsibility from you. You are still accountable for what you build and how you secure it.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 24/03/2026
A backdoor in LiteLLM. futuresearch.ai/blog/litellm...
futuresearch.ai
Supply Chain Attack in litellm 1.82.8 on PyPI
litellm version 1.82.8 on PyPI contains a malicious .pth file that harvests SSH keys, cloud credentials, and secrets on every Python startup, then attempts lateral movement across Kubernetes clusters.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 22/03/2026
General-purpose agents are killing every offensive agents startup.
120 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 08/03/2026
Excited to share my first contribution to @aivillage.bsky.social! While experimenting with @perplexitycomet.bsky.social and pursuing my curiosity in AI browsers, I uncovered some eye-opening findings. But the team didn't quite see it that way... 🤔 Enjoy the read! aivillage.org/generative-r...
aivillage.org
Hacking AI Browsers: How i hacked Perplexity
I Hacked Perplexity and found: template injection, highlight injection, and chat-based data exfiltration. Here’s the story.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 07/03/2026
I know many people will hate this opinion, but everything eventually becomes replaceable with technology. And those decisions are rarely made by technical people, they're made by business people.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 27/02/2026
It's "we over-hired now" now, not because of "intelligence tools"
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 27/02/2026
This isn't just announcing layoffs. It's normalizing layoffs under the banner of AI efficiency. When a profitable company reduces headcount and connects it to intelligence tools and smaller teams, the implication goes beyond cost cutting.
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 25/02/2026
I know it’s already the 7th of Ramadan, but in my opinion it’s never too late to say Ramadan Mubarak. Every year when Ramadan comes, I like to introduce people to what it actually is. Ramadan is the month where Muslims fast from sunrise to sunset.
110 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 25/02/2026
Do we still consider running commercial LLMs on clients’ data a privacy violation, or did people just stop caring?
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 24/02/2026
Another day.. Another AI shenanigans.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 14/02/2026
Anyone who has used AI agents to build a large application or scan a big codebase has probably run into this.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 14/02/2026
This is wild! www.bleepingcomputer.com/news/securit...
bleepingcomputer.com
Claude LLM artifacts abused to push Mac infostealers in ClickFix attack
Threat actors are abusing Claude artifacts and Google Ads in ClickFix campaigns that deliver infostealer malware to macOS users searching for specific queries.
000 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 14/02/2026
I vibe-coded a Discord-like app and will be using it with my friends. Nothing fancy, just something that works and fits how we communicate. I love building things for fun, Might open source it later.
020 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 05/02/2026
I have been reading through the code that led to this finding. This is ART. issues.chromium.org/issues/45309...
issues.chromium.org
Chromium
010 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 03/02/2026
Watch your notepad, it might be watching you too.
272 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 02/02/2026
Did anyone thought of linking Mastadon to bluesky? Since people left twitter, they have been scattered around.
100 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 01/02/2026
Red teaming becoming more difficult is largely the result of its own success. Repeated real-world operations have helped organizations understand attack patterns and improve their defensive capabilities.
120 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 26/01/2026
I’ve been involved in a lot of discussions lately about MCP from a security perspective. This blog shows how data pollution can happen through tool calling: lnkd.in/dKB9psVU This is where the debate about the protocol starts. MCP is not secure by default.
lnkd.in
LinkedIn
This link will take you to a page that’s not on LinkedIn
010 0
Mohamed AbuMuslim (أبومسلِم) @m19o.bsky.social · 26/12/2025
020 0