CEO & Co-Founder at Knostic, CISO-in-Residence for AI at Cloud Security Alliance. Former Founder @Cymmetria (acquired). Host at Prompt||GTFO. Threat hunter, scifi geek, dance teacher. Opinions my own.
Public Key
npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Profile Code
nprofile1qqstjmk6k7s2t72th5grhx9q06qaatnrkp6thl2mg6kg0grknr344vgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds9xy6p4
Show more details
Published at
2026-10-23T07:09:36Z Event JSON
{
"id": "86a5f0cc66cb25f021ad000d8f41def8614ed41b72d0378360f5c30ae20f5790" ,
"pubkey": "b96edab7a0a5f94bbd103b98a07e81deae63b074bbfd5b46ac87a07698e35ab1" ,
"created_at": 1792739376 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://infosec.exchange/users/gadi",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/gadi",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"Gadi Evron\",\"about\":\"CEO \u0026 Co-Founder at Knostic, CISO-in-Residence for AI at Cloud Security Alliance. Former Founder @Cymmetria (acquired). Host at Prompt||GTFO. Threat hunter, scifi geek, dance teacher. Opinions my own.\\n\\nSecurity: Science fiction\\nGeek: Dancer\\n\",\"website\":\"https://infosec.exchange/@gadi\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/328/664/337/735/998/original/7ad3837cbc0abbe3.jpeg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/328/664/337/735/998/original/ddecf2c335b88298.jpeg\",\"nip05\":\"[email protected] \"}" ,
"sig": "b150f84b111c0ee1974c86ea1a3690b324267f92a86607cabc307bdc6a6941d9fede2aaf6e8d027d23f4c3352d6caf14c5f3e25ac719be5d351b3041fa8b9785"
}
Last Notes npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron Pwn day is a meme gift that keeps on memeing npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron how do? npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron Linus lays down the law, and says it like it is. May as well not use an editor, or a compiler. Why stop at AI? npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron The [un]prompted State of AI Cybersecurity report - an analysis of the 490 talks submitted to the [un]prompted 2026 call for papers. npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron “The AI Reversing Panel: Are we all powerful, or out of a job?” I moderated at @npub1n7s…2c7j is now out on YouTube. npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron You have until the 8th at 23:59 to submit to unprompted! What are you waiting for? npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron We discovered a new active VS Code extensions attack campaign we dub SaassyCode, so far targeting users of Trello and Roblox, with two malicious extensions discovered so far. npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron Due to GitHub breach, we released a feed for malicious VS Code extensions, auto-generated with IoCs out of Agent Mesh. I hope it's useful. If it is, let me know and we'll do this regularly, Can add in skills, MCP servers, etc.: npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron thanks! npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron My life with Claude Code npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron This is the most incredible thing I have heard this year (yet). A guy sequenced his dog's cancer DNA against her DNA, and used ChatGPT and AlphaFold to develop an individualized mRNA vaccine to save her life. The future is here. It took longer to get approval for the treatment than to develop it. npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron We’ve seen lots of great submissions to [un]prompted, the AI security practitioner conference, and it seems like everyone is using AI for log analytics, vibe coding internal tools, and AppSec advisors! npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c Gadi Evron Cursor’s new browser could be compromised via a simple JavaScript injection.
