Mochammad Nosa Shandy

Healthcare software is critical infrastructure, and the growing capabilities of AI in vulnerability research introduce new security risks. @fariskhi used GPT-5.6-sol to discover more than 40 vulnerabilities in OpenEMR versions prior to 8.5.0, including local file disclosure, SQL injection, access control flaws, patient portal takeover, and an exploit chain enabling administrator API impersonation. OpenEMR is one of the most widely used open source electronic health record and medical practice management systems, reportedly used by over 100,000 medical providers serving more than 100 million patients across countries including the United States, India, and Indonesia. 🏥 🌎 idnsec.com/research/finding-…

Google awarded $113,337 USD for a Linux vulnerability discovered by Indonesian security researcher Muhammad Alifa Ramdhan (@n0psledbyte), who works as a Principal Vulnerability Researcher at @starlabs_sg. 🤯 Ramdhan discovered a Linux Local Privilege Escalation (LPE) vulnerability involving a race condition in AF_ALG, the same subsystem later exploited in the famous Copy Fail vulnerability in 2026. He found the issue in 2025 without AI assistance and it was assigned CVE-2025-39964. His coworker, Bing-Jhong Billy Jheng, was also credited for completing the exploit chain, which enabled both privilege escalation to root and escape from a Docker container. They submitted the exploit to Google kernelCTF and received its highest reward. 💰 Ramdhan is from Tangerang, Indonesia. He graduated from Diponegoro University (@undip) in 2023 and later moved to Singapore to work full time as a vulnerability researcher. 🇮🇩 🇸🇬 idnsec.com/research/linux-lo…