shubs ✓

@infosec_au · halcyon · joined 16 Aug 2013

Co-founder, security researcher. Building an attack surface management platform, @assetnote

59 476Followers

1 971Following

2 234Posts total

244.5KViews on collected posts

Against accounts of the same size

9 posts from the last 90 days, next to the 10K–100K follower range. shown widely, but few of those viewers react.

Median views11 180this account1 540median for 10K–100K

Reach, %18.80%this account4.74%median for 10K–100K

Engagement, %0.58%this account1.87%median for 10K–100K

Metric	This account	Median for 10K–100K	Ratio
Median views per post	11 180	1 540	7.26×
Reach (views ÷ followers)	18.80%	4.74%	3.97×
Engagement rate	0.58%	1.87%	0.31×

Others in this range → Compare with another account → How these benchmarks are built →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

13.9K14 Jul

137K18 Jul

1.3K

2.4K

11.2K

2.1K

11.7K30 Jul

54.4K1 Aug

10.5K24 Aug

Last 9 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

1.09%14 Jul

0.37%18 Jul

0.45%

0.41%

0.58%

0.24%

0.76%30 Jul

1.18%1 Aug

1.86%24 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.87%.

What the audience does

Likes61.9%1 427 in total

Reposts7.9%182 in total

Replies1.6%36 in total

Quotes1.0%22 in total

Bookmarks27.7%640 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Latest posts

I think the most accurate phrase for the time we live in right now in offensive security, bug bounties, and vulnerability research is "the age of collisions" - what an exciting time, well, not really for those who had a monopoly on certain bugs 10.5K views · 186 likes · 3 reposts · 6 replies 24 Aug 2026 Things are getting weird (or interesting?) in the vulnerability research space. I published some of my personal thoughts on what we're seeing and what our broad strategy is here: https://t.co/C229t5ryeK 54.4K views · 528 likes · 102 reposts · 8 replies 01 Aug 2026 v12 has been finding some pretty good bugs. a good product with a team that understands offensive security. i’m sure many more fun disclosures to come. 11.7K views · 88 likes · 1 reposts · 0 replies 30 Jul 2026 @infosec_au Seems that something is out 2.1K views · 5 likes · 0 reposts · 0 replies 18 Jul 2026 We published a technical deep dive on the Wordpress RCE #wp2shell https://t.co/kUSTVbLCxr 11.2K views · 54 likes · 9 reposts · 0 replies 18 Jul 2026 @infosec_au Did you guys try to see if any models can figure out the full exploit? I wonder what the best way is for the future especially for Friday releases to give everyone a better chance to patch. Maybe vendors should patch them in a dirty way but probably not a good solutio 2.4K views · 8 likes · 0 reposts · 2 replies 18 Jul 2026 @infosec_au lmao happens 1.3K views · 5 likes · 0 reposts · 1 replies 18 Jul 2026 Note on WordPress pre-auth RCE (CVE-2026-63030). There are SQLi poc's out there, but RCE PoC has not yet been exploited in the wild. Will only release our technical post if we have proof of exploitation. Our RCE payload does NOT require poorly configured MySQL. 137K views · 427 likes · 45 reposts · 18 replies 18 Jul 2026 Our research team at @SLCyberSec discovered a pre-auth RCE in ServiceNow by bypassing their sandbox. Read @hash_kitten's write up here: https://t.co/DBFsswT2Ei 13.9K views · 126 likes · 22 reposts · 1 replies 14 Jul 2026