Full Scope Cybersecurity | Human Driven, AI Accelerated Pentesting | Continuous Monitoring | SOC2 Type II Audited
- Tweets 2,109
- Following 86
- Followers 3,395
- Likes 1,667
Pinned Tweet
CredShields and @SolidityScan are proud to contribute to the release of the @owasp Smart Contract Top 10 2026.
OWASP Smart Contract Top 10 defines the primary contract-level failure patterns that repeatedly lead to loss in blockchain systems.
Sincere gratitude to @ethereumfndn Ecosystem Support Program for supporting the OWASP Smart Contract Security initiative.
owasp.org/www-project-smart-…
20
39
74
9,446
We're co-hosting an evening in Singapore with @BackScoopHQ on cybersecurity in the age of AI.
The panel covers how AI is changing software defense and offensive testing, followed by live Q&A and networking.
📍Thursday, October 22, 5:30 to 8:00 PM, Arcc Spaces, One Marina Boulevard, Level 20, Singapore
Seats are limited, request yours here: luma.com/sn3z153m
3
102
Worth checking: would your logs flag a client that gets denied, then succeeds through a different path? That pattern looks the same whether it's an attacker or an agent finishing a task.
❗ ALERT ❗
We are aware of instances of AI misalignment, where AI agents have taken unexpected or unauthorised actions.
Australian organisations should maintain strong cyber security controls and secure AI practices.
Read the full alert 👉 cyber.gov.au/about-us/view-a…
85
Happening today!
@cyberboyIndia joins Zoe Braiterman and Antara Mane for the @owasp NYC panel on AI and penetration testing. 8:30 AM EDT · 6:00 PM IST · 8:30 PM SGT.
Register here: luma.com/orv89hgi
4
143
On Wednesday, September 23, the @owasp NYC is hosting a panel on AI and penetration testing, and where human judgment still does the work in offensive security.
@cyberboyIndia and Antara Mane are joining host Zoe Braiterman to get into where generative AI speeds up a pen test, how agentic tools apply the context that decides whether a finding actually matters, and why a complex business logic flaw still needs someone who has broken systems before.
The session runs 8:30 to 9:30 AM EDT and is aimed at anyone deciding how much of their security testing to automate.
🎙️Registration is open here: luma.com/orv89hgi
Bring your questions, and see you on the 23rd🚀
#OWASP #PenetrationTesting #OffensiveSecurity #AISecurity #CyberSecurity
1
3
229
The reason quantum-safe migration cannot wait for a quantum computer to exist: adversaries are recording encrypted data today to decrypt later. Any data that has to stay secret for years is already exposed. For Singapore CISOs, the migration clock has effectively started. Where would you begin your cryptographic inventory?
Read more:
discover.credshields.com/tra…
1
146
LG : Lurking Guaranteed
turns out your tv has been mapping every device on your wifi and recording audio with the screen off. what's the most cursed thing yours could've overheard
#LG #privacy #cybersecurity #infosec
ALT Meme of a person peeking out from hiding. Overlay text: LG, Lurking Guaranteed.
1
5
390
Mumbai, see you at @GffFintechfest 2026. 👋
CredShields will be at GFF, 8–11 Sept.
At Jio World Centre | Trident BKC.
Going to GFF too? Give us a shout.
Always happy to chat pentesting, AppSec or AI security.
#GFF2026 #Fintech #GlobalFintechFest
ALT CredShields event graphic announcing its presence at Global Fintech Fest 2026 in Mumbai. The visual features a modern abstract fintech network with connected payment, cloud and data systems, representing secure digital infrastructure.
1
289
500+ Medusa victims.
Some newly disclosed flaws have been weaponized within 24 hours.
If you can’t quickly tell whether you run the affected software and whether it’s exposed, patch speed isn’t the first bottleneck.
Prioritize exploitation + exposure + business criticality.
#Ransomware #VulnerabilityManagement #Cybersecurity #medusa
ALT CredShields graphic on Medusa ransomware showing 500+ identified victims and noting that some newly disclosed vulnerabilities were weaponized within 24 hours. It highlights exposure visibility as the first bottleneck and recommends prioritizing active exploitation, exposure, and business criticality.
2
2
213
Don’t wait for the perfect patch.
Isolation and temporary mitigations can reduce exposure while the permanent fix catches up.
Updated CISA/FBI/HHS advisory 👇
cisa.gov/news-events/cyberse…
1
96
475M views in 24 hours. The game hadn’t even launched yet.
GTA VI leak is a reminder that software can carry enormous value long before production.
If a pre-release build leaves its intended environment, three questions matter:
- who can get it,
- where can it run,
- and can you trace it back?
#gtavıleak #cybersecurity
1
2
900
The interesting part goes beyond the leak itself: how do you protect valuable software before it ever reaches production?
We went deeper on that here 👇
discover.credshields.com/bey…
213
You can outsource a critical system.
You can’t always outsource the responsibility.
For covered providers of essential services in Singapore, relying on a third-party system can still leave cybersecurity responsibility with them.
So don’t audit only what you own.
Start with what your service depends on:
- who operates it,
- what visibility you have,
- and what your contracts actually guarantee.
#Cybersecurity #CISO #Singapore #CriticalInfrastructure
ALT CredShields “Risk Shift · Singapore” graphic showing an essential service inside an organisation depending on a system owned by a third party that is critical to keeping the service running. Headline: “Your audit can’t stop at systems you own.” Takeaway: “Map what your service relies on first.”
1
1
124
Want the deeper breakdown? We unpacked what the amended Act changes, who may fall within scope, and what CISOs should audit first 👇
discover.credshields.com/nav…
1
43
“Fixed” is useful.
Verified is better.
If a pentest finding disappears into tickets, Slack threads and status updates after delivery, proving what happened later gets messy fast.
Here’s what the path to verified closure should look like 👇
Best experienced with sound on 🔊
#Pentesting #AppSec #CyberSecurity #VulnerabilityManagement
1
3
146
“Fixed” is a status. Where’s the evidence?
A report shows what was found. A closed ticket shows a change shipped. Neither proves the issue is resolved.
Want to see where you stand?
Pick one finding:
Found → Owned → Fixed → Retested → Verified.
Can you get all the way to verified closure?
#AppSec #pentesting #cybersecuritytips
4
246
In the latest issue of NARRATIVE, our VP Marketing, @ShreyaBerry2, breaks down why the industry must look beyond single point security assessments and embrace proven enterprise security standards.
Decades of battle tested security frameworks from penetration testing to continuous monitoring already exist. It’s time DeFi stops reinventing the wheel and starts adopting the doctrine required to protect capital at scale.
📖 Read the full article, "Twenty Years of Security Doctrine, and DeFi Still Won't Use It", in NARRATIVE Vol 1, Issue 2: cryptoindiamagazine.aflip.in…
Crypto was never going to build a parallel financial system forever. At some point, it had to meet the institutions, infrastructure, & rules that move money at scale.
That meeting point is where crypto is now!
NARRATIVE Issue 2: The Institutional Era of Crypto
Read: cryptoindiamagazine.com/narr…
1
1
3
293
The problem with annual VAPT isn’t the annual part. It’s everything that changes in between.
New APIs. New integrations. New releases.
By the time findings are fixed and retested, the product may already have moved again.
In Singapore, that gap is harder to ignore.
Vulnerability management doesn’t stop between assessments.
That’s where PTaaS changes the workflow.
Findings stay visible. Fixes can move into retesting sooner. Teams get a clearer view of what’s open, fixed, and verified.
Products move in releases. VAPT workflows should be able to keep up.
Where does your VAPT workflow slow down?
#PTaaS #SingaporeFinTech #Cybersecurity #VAPT
ALT Illustration comparing two parallel workflows for a Singapore FinTech. The top row shows a product evolving through multiple releases, while the bottom row shows a slower VAPT process with a visible delay before final verification.
1
1
5
189
CredShields retweeted
Our security audits are in. 🔎
Surge got a full-stack review, not a single-contract audit:
@reardencode: Bitcoin, the DCN and the relayers
@CredShields: the EVM smart contracts on Base
Both reports published in full. Every finding, every severity, every status. 👇
6
17
31
3,985