another security engineer
Ho Chi Minh City, Vietnam.
Joined May 2022
- Tweets14
- Following420
- Followers105
- Likes55
Khang Vo (doublevkay) retweeted
We are seeking sponsors to support 03 Vietnamese students to join International Cybersecurity Challenge (IC3) held in San Diego, US. Join us in making a meaningful impact. Your generosity is greatly appreciated!❤️ko-fi.com/vnsec/goal?g=18
Khang Vo (doublevkay) retweeted
Today we're proud to announce the release of version 1.0 of SLSA 🎉 Supply-chain Levels for Software Artifacts is an OpenSSF project that provides specifications for software supply chain security, established by community expert consensus. #OSSecurity
Khang Vo (doublevkay) retweeted
Verichains has released a new security advisory VSA-2022-120, exposing a key extraction vulnerability in Multichain's fastMPC. Kudos to @MultichainOrg for the swift response and bug bounty.
Keep an eye out for upcoming advisories on critical attacks targeting popular MPC implementations.
blog.verichains.io/p/vsa-202…
![[VSA-2022-120] Multichain: Key Extraction Vulnerability in fastMPC's Secure Multi-Party Client...](https://pbs.twimg.com/card_img/2115986375074054145/WjxgxnPv?format=jpg&name=800x419)
Khang Vo (doublevkay) retweeted
(CVE-2022-2564): Prototype Pollution in automattic/mongoose.
huntr.dev/bounties/055be524-…
Disclosed by @doublevkay, fixed by @code_barbarian...
#opensource #CVE #bugbounty #security #vulnerability
I have found a high severity vulnerability in @momentjs - one of the most depended-upon packages on @npmjs.
The vulnerability has been found with CodeQL, reported on @huntrdev. It is also my first #CVE, first #bugbounty, and the first GHSA credit.😄
huntr.dev/bounties/f0952b67-…
It is a good experience with @huntr - an awesome platform for contributing security issues to the open-source community. 👍