LIVE
⭐8.9M influencer listings 🏢98.7K sponsor listings 🌍121B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋4.1M Bluesky creators 🎙️1.4M podcast creators 🟣1.3M Twitch creators 📈732K Pinterest creators 🥊316.4K Kick creators 267K YouTube creators 𝕏255.8K X creators 🐘249.9K Mastodon creators 🎵138K TikTok creators ✈️108.1K Telegram creators 🎮14K Discord creators 📈11.8K Substack creators 🎬4.6K Rumble creators 🧵3.6K Threads creators ⭐8.9M influencer listings 🏢98.7K sponsor listings 🌍121B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋4.1M Bluesky creators 🎙️1.4M podcast creators 🟣1.3M Twitch creators 📈732K Pinterest creators 🥊316.4K Kick creators 267K YouTube creators 𝕏255.8K X creators 🐘249.9K Mastodon creators 🎵138K TikTok creators ✈️108.1K Telegram creators 🎮14K Discord creators 📈11.8K Substack creators 🎬4.6K Rumble creators 🧵3.6K Threads creators
Jerry Gamblin

Jerry Gamblin✓ Add us as a preferred source on Google

Mastodon @jgamblin@infosec.exchange
⚔ Compare ☆ Follow Own this channel?
🔄 Data last refreshed 14 days ago
Followers
80
Account age
3 yrs
🎁 Free analysisfor Jerry Gamblin
🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

The bugs that get exploited are not the bugs you see most. I mapped every CVE on CISA's Known Exploited Vulnerabilities list back to its weakness class. Two things stood out. First, a data-quality one. The organization that reports a bug fills in the weakness class only about a third of the time. On the exploited list, roughly two-thirds of the CNA-authored records leave the CWE blank, and it only4 views The bugs that get exploited are not the bugs you see most. I mapped every CVE on CISA's Known Exploited Vulnerabilities list back to its weakness class. Two things stood out. First, a data-quality one. The organization that reports a bug fills in the weakness class only about a third of the time. On the exploited list, roughly two-thirds of the CNA-authored records leave the CWE blank, and it only Mid-year CVE check-in: the first half of 2026 produced 35,364 CVEs. More than any full year before 2024, and more than the program's entire first decade (1999-2008) combined. One every 7.4 minutes. The counterweight: only 85 of them (0.24%) are on CISA's KEV list. Volume keeps climbing; confirmed exploitation stays rare. The signal-to-noise problem is the story. Full writeup + reproducible code: h2 views Mid-year CVE check-in: the first half of 2026 produced 35,364 CVEs. More than any full year before 2024, and more than the program's entire first decade (1999-2008) combined. One every 7.4 minutes. The counterweight: only 85 of them (0.24%) are on CISA's KEV list. Volume keeps climbing; confirmed exploitation stays rare. The signal-to-noise problem is the story. Full writeup + reproducible code: h Stop triaging by bug class. Here are the 10 most common weakness types, lined up by the CVSS scores they actually get. The ranking looks sensible: injection and memory corruption up in the 7s and 8s (stack buffer overflow tops out at a median 8.5), the high-volume web classes down in the 5s and 6s. Folk wisdom, confirmed. Then look at the grey band in the middle. Every one of these ten classes, to1 views Stop triaging by bug class. Here are the 10 most common weakness types, lined up by the CVSS scores they actually get. The ranking looks sensible: injection and memory corruption up in the 7s and 8s (stack buffer overflow tops out at a median 8.5), the high-volume web classes down in the 5s and 6s. Folk wisdom, confirmed. Then look at the grey band in the middle. Every one of these ten classes, to

📊 Post engagement

Recent posts · likes + reposts
May 17latest
2
Avg engagement / post
1–2
Typical post (engagement)
2.5%
Engagement vs followers
71/100
Consistent reach
Nov 2022
On Mastodon since
Half of recent posts land between 1 and 2 likes + reposts (median 1) — a dependable floor a sponsored post can count on.

🔥 Top post: The bugs that get exploited are not the bugs you see most. I map · 4 likes + reposts

📊 Activity & format

Posting cadence
1.3 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 2 text · 10 image · 0 video.
Follower / following
8×
Follows 10 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗
🔥 Top post The bugs that get exploited are not the bugs you see most. I mapped every CVE on CISA's Known Exploited Vulnerabilities list back to its weakness class. Two things stood out. First, a data-quality one. The organization that reports a bug fills in the weakness class only about a … ★ 4
A third of 2026 CVEs so far carry a CVSS v4 score, up from under 9% in 2024. Fast climb for a version that only shipped in late 2023. Then you see who did it: VulnCheck, VulDB, and GitHub are 71% of all v4 scores. The other 200+ CNAs went … By July 16, the 2026 CVE count hit 39,952, the entire 2024 total, with the year barely half over. Each year now clears the two-years-earlier total sooner: mid-November in 2020, mid-August in 2025, mid-July in 2026. The earliest in this ser… When Cisco ended the life of Cisco Vulnerability Management (formerly Kenna Security), I knew it marked the end of my time there. So today, I'm thrilled to share that I've joined Empirical Security as Head of Research. Back to the data, ba… ★ 1 CISA added 154 CVEs to its Known Exploited Vulnerabilities list so far in 2026. Over half landed within a month of publication, but a stubborn 16% were more than three years old at listing. I measured the gap from a CVE.org record being pu… PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single thi… Stop triaging by bug class. Here are the 10 most common weakness types, lined up by the CVSS scores they actually get. The ranking looks sensible: injection and memory corruption up in the 7s and 8s (stack buffer overflow tops out at a med… ★ 1 A CVSS score is not a fact about a bug. It is an opinion with a decimal point. Cross-site scripting is the most common bug on the internet. Here it is scored by 13 different organizations: the same weakness averages about a 3.4 at VulDB an… For years, MITRE, the nonprofit that runs the CVE program, was its #1 issuer almost every month. Not anymore. GitHub has been #1 every month of 2026. MITRE has slid to about #7. GitHub Security Advisories are now the #1 CVE issuer (6,801). VulnCheck climbed to #3 (VulDB 🛡sits #2). The people assigning CVEs changed in 2026: platforms, ecosystems, and research CNAs now set the pace. High counts reflect scope, not pa… Mid-year CVE check-in: the first half of 2026 produced 35,364 CVEs. More than any full year before 2024, and more than the program's entire first decade (1999-2008) combined. One every 7.4 minutes. The counterweight: only 85 of them (0.24%… ★ 2 Launching LycosAI today. The wilderness is encroaching. We are holding the line. Deploying autonomous wolf packs at prefecture scale to secure the rural perimeter where legacy systems have failed. lycosai.com ★ 1

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 2 views per post.
📤Posts about 1.3× per week.

🕵️ Fake follower check

Estimated
75/100
Good Credibility score
92%
Real Real audience
Low Fake-follower risk
High Data confidence
  • Est. 92% real, active audience · Low fake-follower risk.
  • Engagement (~2.5% of followers engage each post) is around typical for Mastodon.
  • Verified account.
  • Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Bringing clarity to vulnerability intelligence through open-source tools. Founder of RogoLabs | Creator of http://cve.icu & http://patchthis.app.

📸 Gallery

A third of 2026 CVEs so far carry a CVSS v4 score, up from under 9% in 2024. Fast climb for a version that only shipped in late 2023. Then you see who did it: VulnCheck, VulDB, and GitHub are 71% of all v4 scores. The other 200+ CNAs went from ~4% to ~10%, real growth but nowhere near those three. Most of the rise of v4 is in three organizations. By July 16, the 2026 CVE count hit 39,952, the entire 2024 total, with the year barely half over. Each year now clears the two-years-earlier total sooner: mid-November in 2020, mid-August in 2025, mid-July in 2026. The earliest in this series. The two-years-ago total is now a summer checkpoint, not a year-end line. CISA added 154 CVEs to its Known Exploited Vulnerabilities list so far in 2026. Over half landed within a month of publication, but a stubborn 16% were more than three years old at listing. I measured the gap from a CVE.org record being published to that CVE landing on KEV. Most move fast: about three-quarters are listed within a year of publication. That tracks with how we picture exploitation: a PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single third-party CNA. As CNAs write them, 75% of CVEs carry neither CPE nor PURL. Then NVD and CISA go to work: they backfill CPEs and cut that no-ID pile to 41%. Every The bugs that get exploited are not the bugs you see most. I mapped every CVE on CISA's Known Exploited Vulnerabilities list back to its weakness class. Two things stood out. First, a data-quality one. The organization that reports a bug fills in the weakness class only about a third of the time. On the exploited list, roughly two-thirds of the CNA-authored records leave the CWE blank, and it only Stop triaging by bug class. Here are the 10 most common weakness types, lined up by the CVSS scores they actually get. The ranking looks sensible: injection and memory corruption up in the 7s and 8s (stack buffer overflow tops out at a median 8.5), the high-volume web classes down in the 5s and 6s. Folk wisdom, confirmed. Then look at the grey band in the middle. Every one of these ten classes, to A CVSS score is not a fact about a bug. It is an opinion with a decimal point. Cross-site scripting is the most common bug on the internet. Here it is scored by 13 different organizations: the same weakness averages about a 3.4 at VulDB and about a 6.7 at Microsoft. Same bug class, same scoring system, more than a full severity band apart. Most of that spread is really one organization. VulDB sits For years, MITRE, the nonprofit that runs the CVE program, was its #1 issuer almost every month. Not anymore. GitHub has been #1 every month of 2026. MITRE has slid to about #7.

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Folkboat Henrietta Folkboat Henrietta 18% Zack Stern Zack Stern 17% Knien Knien 16% atro atro 14% Michael Colletti Michael Colletti 14% Ryan Fisher Ryan Fisher 13%

More like this

Find more →
Mastodon ＋
Ryan Fisher
Ryan Fisher
@wryanfisher@infosec.exchange
80 Followers
Mastodon ＋
Knien
Knien
@knien@mastodon.social
80 Followers
Mastodon ＋
Folkboat Henrietta
Folkboat Henrietta
@hennytheboat@mementomori.social
80 Followers
Mastodon ＋
atro
atro
@atro@fosstodon.org
80 Followers
Mastodon ＋
Michael Colletti
Michael Colletti ✓
@legacywhisperer@hachyderm.io
80 Followers
Mastodon ＋
Zack Stern
Zack Stern
@zackstern@hachyderm.io
80 Followers

Frequently asked questions

How much does Jerry Gamblin charge for a sponsorship?
Jerry Gamblin hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Jerry Gamblin for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Jerry Gamblin, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Jerry Gamblin have?
Jerry Gamblin has 80 followers on Mastodon.

✉ Message Jerry Gamblin

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Jerry Gamblin

Booking an event / appearance is a Pro feature. Upgrade to book Jerry Gamblin for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Jerry Gamblin gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

✉️ Contact