Detectify

@detectify

Scaling real-world hacker research with AI to help AppSec teams find and fix their most exploitable risks before attackers do.

Stockholm and Boston detectify.com Joined November 2011

1K Following 11K Followers 4.9K Posts

Latest posts 5

Detectify @detectify Sep 10

In 2026 the API is the application for most of what you’ll test.

Are your API hacking skills up to date? Check out @hakluke´s latest guide on how to hunt for API vulnerabilities in 2026:

👇 labs.detectify.com/how-to/how-to-…

labs.detectify.com How to hack APIs in 2026 Learn how to hack APIs in 2026. This updated guide covers BOLA/IDOR, GraphQL flaws, OAuth misconfigurations, race conditions, and AI-backed API vulnerabilities.

Detectify @detectify Jul 30

Unauthenticated access in AI agent platforms like Ruflo exposes API keys, logs, & execution tools in one go.

Detectify co-founder Johan Edholm spoke with @DarkReading about the expanding attack surface of AI infrastructure.

🔗 darkreading.com/cyber-risk/pat…

www.darkreading.com Patch-Resistant Ruflo Flaw Can Unleash Malicious AI Agent Swarms The flaw in the AI hosting platform Ruflo allows an unauthenticated attacker to take over and corrupt memory, so bad behavior persists after patching.

Detectify @detectify Jul 22

When adversaries weaponize LLMs, attack economics change overnight.
@DarkReading details how threat actors turned jailbroken AI into a commercial offensive platform.
Our CEO Rickard Carlsson breaks down why lowering the barrier to entry changes defense: darkreading.com/cyber-risk/hac…

www.darkreading.com Hacker Turns AI Jailbreaks Into Offensive Platform A Russian-speaking actor, "Trim," dismantled publicly available frontier models and integrated them with offensive security tools.

Detectify @detectify Jul 7

.@DarkReading reports on "JadePuffer", the first fully agentic, LLM-driven ransomware attack that autonomously executed a network intrusion and extortion. Our co-founder Johan Edholm discusses how traditional incident response can't keep up with AI threats darkreading.com/cyberattacks-d…

www.darkreading.com JadePuffer: The First Successful LLM-Driven Ransomware Attack An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.

Detectify @detectify May 5

We are proud to recognize some of the top ethical hackers from our Crowdsource community. Thanks to their research submissions, our customers can access some of the best hackers in the world:

labs.detectify.com/crowdsource-co…

labs.detectify.com Crowdsource Awards 2025: Celebrating our community of elite ethical hackers The Crowdsource Awards celebrate the elite ethical hackers that serve as the heartbeat of the Detectify mission to make the internet safer