Attack and Defense @attackndefense
@[email protected] - Mozilla's Security Internals for Security Engineers, Security Researchers, and Bug Bounty Hunters. blog.mozilla.org/attack-and-def… Joined February 2020-
Tweets157
-
Followers1K
-
Following8
-
Likes25
@parityzero @0xcharlie We talked to various participants . We did not scramble some offsets. We actually found the same bugs they had….
@nullspec7or lots of duplicates.
6 Firefox entries at pwn2own. 5 withdrawals due to our 150.0.3 security release. 1 failed attempt. 0 Exploits. No incidents. Time to party :)
Reminder that our bug bounty program accepts PoCs (e.g. , verifiable in an address sanitizer builds that you can find here firefox-source-docs.mozilla.org/tools/sanitize…). No need to write a full exploit. More here mozilla.org/en-US/security… :)
@pwning_me Sorry to hear it did not work out. Let's meet at the conference, we're happy to accept a non-working exploit in the bug bounty program even if it's just a poc. :)
Sorry this broke your chain @qriousec, @trichimtrich, @lanleft_, and @wiz1340. Would love to compare notes if you still make it to Berlin.
Great bug, thank you for the detailed report. We just released 150.0.3 to fix this. mozilla.org/en-US/security…
I was hoping to compete in Pwn2Own with a Firefox full-chain entry, but unfortunately it was rejected. I’ve reported the vulnerability to the Mozilla team.
@pwning_me This year has been pretty fast moving, even for us. We will have people on site and would be happy to meet you.
@S1r1u5_ We'll be on-site and are happy to take bug reports in person :)
@ggwhyp Should be fixed soon, thank you :)
@qriousec There was a Firefox 150.0.1 update last week and a Firefox 150.0.2 update just today. Make sure that it still works and we're looking forward to meeting you next week :)
When we said that we found and fixed hundreds of bugs in Firefox using AI, people were skeptical and said: Where are the bugs? Well, here they are. We are unhiding 12 security bugs that are representative of the issues we have found. hacks.mozilla.org/2026/05/behind…
@S1r1u5_ @rs_loves_bugs @pwning_me @S1r1u5_ @rs_loves_bugs If you are coming to Berlin in two weeks and found your bugs squashed in a Firefox update, tell us your story. We will bring Firefox swag :)
We just published our recent Firefox Security and Privacy highlights in the Q1 newsletter. Take a look —> attackanddefense.dev/2026/04/14/Fir…
@LiveOverflow The bug info is public, including test case and patches. If you want to follow along, look at bug bugzilla.mozilla.org/show_bug.cgi?i… (Day 1 exploit) and bugzilla.mozilla.org/show_bug.cgi?i… (Day 2)
See @LiveOverflow's documentary on Firefox and pwn2own and learn what it was like to fix not just one but TWO Firefox security bugs at rapid time. youtube.com/watch?v=YQEq5s…
After a long pause, a new video coming today! Part 1 of small documentary about Pwn2Own…
Good news. We just published the Firefox Security Newsletter for 2025 Q4. attackanddefense.dev/2026/01/30/fir…
Gareth Heyes \u2028 @garethheyes
38K Followers 1K Following JavaScript for hackers: Learn to think like a hacker. https://t.co/e0aNEbEDk5
@[email protected]... @SecurityMB
11K Followers 284 Following Improving the world’s security at Google. Opinions are mine.
Brendan Dolan-Gavitt @moyix
33K Followers 6K Following Building offsec agents: https://t.co/G9EtnC2Gl3 PGP https://t.co/3WXr0RfRkv
Md Ismail Šojal �... @0x0SojalSec
44K Followers 5K Following Cyber_Security_Re-searcher || Ai Re-searcher || AI-Sec|| Malware Analysis II iOS || Pwn || 0SINT || Project AI-StrikeSec || 0ldAccounts Suspended @0xSojalSec ||
Rodrigo Branco @bsdaemon
13K Followers 4K Following Chief Architect, Security Research of BigTech Advisor of Grsecurity. BYOS Commitee Member of OffensiveCon, Langsec, DistrictCon, Secdev
chrisrohlf @chrisrohlf
11K Followers 924 Following Waging algorithmic warfare since 2003. Engineer, Researcher. MTS @ Anthropic, Non-Resident Research Fellow @CSETGeorgetown CyberAI
karkar @0x0ed
2 Followers 121 Following
d4rkc0nd0r @d4rkc0nd0r
271 Followers 864 Following
LJP @ljp_tw
63 Followers 180 Following
Grigoris Moulkiotis @gmoulk1
22 Followers 712 Following
TJNhxMZHmqGytuWT @TJNhxMZHmqGytuW
5 Followers 345 Following
Sathiyamoorthi @Sathiya317
75 Followers 1K Following
cespokerQ @cespokerQ
4 Followers 386 Following
kou.izumi @kou_izumi_kun
64 Followers 712 Following
Marwan Gady @GadyMarwan
33 Followers 746 Following Cybersecurity | Ethical Hacking | AI & FinTech Enthusiast Penetration Testing, , Gold Markets
Chirag Rai @crai_in
17 Followers 284 Following Cyber Security and stuff||Pentester by profession||IamNull on Bugcrowd and HackerOne
prabhat @prbhtkumr
4 Followers 115 Following Cybersecurity Enthusiast Red Teamer Wannabe | Open Source Dev Trynabe Full-Time Student | Part-Time Play Pretend CEO @htmx_org
Alexander Kéo @AlexanderKo15
26 Followers 1K Following
Cooper Aussie🐾🧦 @ItsArcoBarko
313 Followers 832 Following 18+ // Heyo! Music, Games, Keyboards and other shenanigans! Always open to DM's and new friendos!// 🐾🧦
glit5chen @glit5chen
10 Followers 142 Following
Xa la @Xalahehe
6 Followers 469 Following
v0ldemort @bkojusner
274 Followers 857 Following Vulnerability Engineer on the FLARE team @Google 👾 CTFd with Kernel Sanders 🚩opinions are my own
vivi_casts_tweet @why_am_i_a_neet
2 Followers 392 Following
Jão @xsslover
190 Followers 1K Following DevBugHunterOffSec Guy / Hacker https://t.co/Cp5e8bkMaB Co-Founder
Neutral Pilk Hotel @SpaghettiSenpai
51 Followers 545 Following Dom, 25, friebdly guyPour the stock into a pan and add the chicken breast, ginger and garlic. Bring to the boil, then reduce the heat, partly cover and simmer f
Joe Mamba @QBohli
5 Followers 384 Following
Austin Drane @AustinDrane
13 Followers 432 Following
Stinky Bo Binky @StinkyBoStinky
0 Followers 81 Following
malformX @malf0rmX
31 Followers 1K Following machines, circuits, codes, riddles, icecreams and Oranges
mpz @tnirmalz
1K Followers 984 Following Wannabe sth.. Never failed to fail. OSCP, CRTP, CRTE, eWPTXv3 Tweets are not mine; they belong to my cat ¯\_(ツ)_/¯
NicoPro99 @NicoPro99
1 Followers 363 Following
Praveen Nair @m4lv0id
1K Followers 2K Following Red Teamer (OSCP, eCPPT, CREST CRT, CRTP, CRTE) | CTF player @hackthebox_eu : https://t.co/BzgLlY16YO Keybase : https://t.co/WH2V5ZNiC3
Mario (マリオ) Rom... @Cyrivs89
324 Followers 2K Following Embedded Device Security Researcher / VR / HW hacking, RE and exploiting / SCA & FI / Cypherpunk and privacy advocate 🥷
Sai Ashwin @hsaias_
60 Followers 3K Following undergrad @iitmadras. tech lead @RaftarIITM. security research @iitmcse. ambition/skill approaching infinity
azar-hackon @azar_hackon
68 Followers 1K Following shell:~$ Ethical Hacker; Pentester; C|EH & C|HFI red teamer
Lisa @Bronlia1
11 Followers 533 Following
Raphaël Lacroix @Chepycou
11 Followers 289 Following 🇫🇷 French ✏️ Penetration tester, CTF Player 🎹 Plays piano, drums and composes
Davide @figio55
21 Followers 135 Following
Đặng Thanh Thiên ... @TADT1909
6 Followers 113 Following
Firefox 🔥 @firefox
2.1M Followers 509 Following The only non-profit-backed, people-first browser. Help: @FirefoxSupport
Tom Ritter @TomRittervg
3K Followers 392 Following Firefox Security. Also: Exploits, Mitigations, Crypto, Privacy, Pseudonymity & Anonymity, Tor https://t.co/77PxWQYyJVYou might like
