Dylan

@InsecureNature

Security researcher, public speaker and founder.

Forbes 30 Under 30

Truffle Security @trufflesec

Github.com/dxa4481

Prev @Netflix

US TruffleSecurity.com Joined July 2020

242 Following 3.5K Followers 1.2K Posts

Latest posts 5

Dylan @InsecureNature 16h

It's honestly scary.

The model was so focused on task completion it bypassed 3 security controls without asking to find a random API key laying around that doesn't require 2fac and finish the task.

Guido Appenzeller Verified account @appenz 18h

Well done, Opus 5.5. The model my security posture needs, not the one my security practices deserve.

View quoted post on X

Dylan @InsecureNature 5d

The impact of this is immeasurable.

We are determined to revoke over 1 million live unique keys that we're tracking, through this free partnership.

Truffle Security Verified account @trufflesec 5d

🤝 Hugging Face, Vercel, Notion, Resend, Twilio and 11 more are now revoking the leaked secrets we find in public.

Why? 81% of the keys we disclosed last year still worked 6 months later.

Issue API keys? Join the Secrets Revocation Program, free.

👉 trufflesecurity.com/blog/launching…

View quoted post on X

Dylan @InsecureNature Oct 30

Just wrapped up the @kawaiiconNZ 2026 (kiwicon) key note.

Great crew, great conference @__nolski__ @end_foss

Dylan @InsecureNature Oct 27

I don't understand this take at all.

"The CISO thinks we are not secured against AI hackers, but let's change the subject to something completely unrelated; we are insecure."

spencer Verified account @techspence Oct 26

CISO: We need to defend against agent swarms!

Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
View quoted post on X

Dylan @InsecureNature Oct 22

The number 4 was just as likely as any other number, I don't really see what the big deal is