ℹ️ This listing was auto-generated from Mastodon's public data. GitHub Security Lab hasn't claimed it, and it doesn't imply any partnership with or endorsement of SocialDB. Is this you? Claim it · Request removal (free).

GitHub Security Lab✓

Mastodon @githubsecuritylab@infosec.exchange

⚔ Compare ☆ Watch Own this channel?

🔄 Data last refreshed 2 days ago

🤝

Make a deal with GitHub Security Lab

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

402

Account age

3 yrs

🧰 Free analysis for GitHub Security Lab

🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/

9 views Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/

Your mother tongue is the new programing language for creating exploits.
For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi-agent capabilities. You will learn from it, while having fun!
Play now at: gh.io/secure-code-game
Learn more: https://github.blog/security/hack-the-ai-agent-bui

3 views Your mother tongue is the new programing language for creating exploits. For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi-agent capabilities. You will learn from it, while having fun! Play now at: gh.io/secure-code-game Learn more: https://github.blog/security/hack-the-ai-agent-bui

What happens when you hand an AI agent its own tools, memory, and a path to production?
Season 4 of the Secure Code Game is live, and this time the target is agentic AI security.
Meet ProdBot. An AI agent built to be broken. It runs on MCP servers, skills, and multi-agent workflows, and every layer is a door someone could walk through. Your job is to find the cracks before an attacker does.
Play n

2 views What happens when you hand an AI agent its own tools, memory, and a path to production? Season 4 of the Secure Code Game is live, and this time the target is agentic AI security. Meet ProdBot. An AI agent built to be broken. It runs on MCP servers, skills, and multi-agent workflows, and every layer is a door someone could walk through. Your job is to find the cracks before an attacker does. Play n

📊 Post engagement

Avg engagement / post

0.7%

Engagement vs followers

Nov 2022

On Mastodon since

🔥 Top post: Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= · 9 likes + reposts

📊 Activity & format

Posting cadence

0.86 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 8 text · 1 image · 3 video.

Follower / following

201×

Follows 2 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗

▶ 🔥 Top post Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://s… ★ 9

Hey bounty hunters! GitHub updates its bug bounty program to improve how the company partners with the security research community. The new structure is designed to reduce ambiguity, prioritize the areas of highest risk, and improve the sp… Are you in Krakow for EuroPython? Getting started with finding vulnerabilities and securing software can seem daunting, but doesn’t have to be. Join Sylwia Budzynska for “Introduction to security research. Find a CVE with CodeQL.” to learn… ★ 1 6 GitHub security settings every maintainer should enable this week. These won't make your project unhackable. Nothing will. What they do is close the easy doors... the ones attackers try first. Free, fast, and worth the few minutes it tak… ★ 1

▶ What happens when you hand an AI agent its own tools, memory, and a path to production? Season 4 of the Secure Code Game is live, and this time the target is agentic AI security. Meet ProdBot. An AI agent built to be broken. It runs on MCP… ★ 2 Attending BSides Vilnius? Don't miss 📌 @yarlob 's session "LLM-assisted vulnerability hunting: hype vs. reality" to hear about the practical experience of using LLM for finding vulnerabilities in OSS such as Signal or 7-Zip! 📅 June 4, 16:4… ★ 1 Who's at DevTalks? Join @jkcso and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 4, 14:00 EEST 📍 Bucharest, Romania 👉 https:/…

Attending AI DevCon? Join Joseph Katsioloudes and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 1, 10:00 AM BST 📍 London, UK &…

▶ Your mother tongue is the new programing language for creating exploits. For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi… ★ 3 On 25th April at 10AM, join @blazingwindsec for the workshop "Introduction to security research. Find a CVE with CodeQL" at the Linux Session organized by Akademickie Stowarzyszenie Informatyczne in Wroclaw, Poland! More information on t… Building with AI? 🤖 Then you won’t want to miss tomorrow’s @devoxxfr workshop with @xcorail and @jkcso — all about how to build robust AI-powered applications. Shall we play a Game? LLM Security in Practice https://m.devoxx.com/events/devo… Catch Shelby Cunningham on stage at CVE/FIRST VulnCon 2026 in Scottsdale, Arizona. Her panel, “Supply Chains and Malware Campaigns: Is CVE the Right Way to Name the Game?”, examines whether CVE is the right tool for tracking open-source su…

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 3 views per post.

📤Posts about 0.9× per week.

🕵️ Fake follower check

Estimated

75/100

Good Credibility score

92%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 92% real, active audience · Low fake-follower risk.
Engagement (~0.7% of followers engage each post) is around typical for Mastodon.
Verified account.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

https://securitylab.github.com/

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

かげろう 18%

David Michael Clarke 18%

sandra@AthENA_ErganAI 17%

もみぢ🍁(ﾃﾞﾘｼｬｽﾏﾙﾁｰｽﾞ) 17%

lina :p 16%

Ysann 11%

More like this

sandra@AthENA_ErganAI

@ysann@social.tchncs.de

402 Followers

Mastodon

もみぢ🍁(ﾃﾞﾘｼｬｽﾏﾙﾁｰｽﾞ)

@mapleleaf240@mstdn.jp

GitHub Security Lab✓

Make a deal with GitHub Security Lab

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

📸 Gallery

🔀 Audience overlap

More like this

✉ Message GitHub Security Lab

🎤 Event / appearance with GitHub Security Lab