Mahendra Purbia

Corruption. Broken education. Poor infrastructure. A dying environment. Every taxpayer can see what's happening.
My patriotism is for my country, not any political party. As citizens, we have every right to question the government. Accountability is their duty. #neetleak

I failed my first CRTO attempt.

7 days later, I came back with a better process, better preparation, and a very different mindset.

I wrote about what went wrong, what I changed, and what I learned from the experience.

Same knowledge. Different discipline.

🔗 mah3sec.medium.com/my-crto-2026-e…

#CRTO #RedTeam #CyberSecurity #InfoSec @_ZeroPointSec

We hear “SBOM” everywhere these days.

But when a critical vulnerability hits an open source dependency, can your team quickly answer:

“Are we using it?”

An SBOM can help answer that question.

In our first ForgeGuardian security series, we're breaking down what an SBOM actually is, why it matters, where it fits into software supply chain security, and how ForgeGuardian supports it.

A practical introduction for anyone working with modern software supply chains.

Read the full article below linkedin.com/pulse/sbom-we-… #SBOM #SoftwareSupplyChain #CyberSecurity #AppSec #DevSecOps #OpenSource #SoftwareSecurity

Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:

Can we build a practical, open-source defense layer for software supply-chain attacks?

3 months later, we're putting it out in the open. 🚀

🔎 8 detection engines
🌍 9 ecosystems
🛡️ 223+ detection signatures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeG…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev

@Hacker0x01 triage experience has been frustrating lately. Some analysts seem to rely almost entirely on AI-generated reviews instead of actually reading the report or following the reproduction steps. If a report can be marked as N/A without even validating the provided PoC, that's a serious problem.

Security analysis requires human verification. At that point, they're acting more like AI operators than security analysts. #bugbounty #hackerone #AIslop