• Offensive security focused on penetration testing, adversary emulation and vulnerability research
• Red Team @ Sophos · Secureworks CTU™ Adversary Group
• Day job covers APT emulation, TLPT (Threat-Led Penetration Testing), and full-scope red team operations
• Vulnerability research spans the Linux kernel, libvirt and virtualization security, Apple platform internals, and the MCP / LLM tooling ecosystem
• Credited with 46 CVEs across major vendors and open-source projects including Red Hat, Apple, Linux kernel, Google, Docker, IBM, GitHub, HashiCorp, Model Context Protocol SDKs, Rapid7, and others
• Recognized by the Microsoft Security Response Center (MSRC) with a 2027 Special Mention, and by Google with Honorable Mentions for security research
• Active in native-code and systems security research, with fixes merged into upstream projects and coordinated disclosures across major vendors and open-source communities
• Security blogger publishing technical write-ups, PoCs, and research notes in English and 日本語
• Interested in web, AD and cloud pentesting, Azure red teaming, adversary emulation, vulnerability research, systems security, and coordinated disclosure

_{For profile display, when multiple public CVSS v3.1 and v4.0 base scores exist for the same CVE, the higher published base score is used. The CVSS version and scoring source are shown explicitly above.
Product-specific downstream distribution scores are not substituted for an upstream project score unless they represent the relevant public CVE assessment.
This table highlights selected public CVEs. The total CVE count includes additional published findings not listed here.}

_{CVE-2026-64339 does not currently have a CVSS base score from the upstream kernel.org CNA or NVD. Downstream Linux distribution scores are therefore not used as the profile score.}

• Google MCP Toolbox · Reported multiple vulnerabilities across Google MCP Toolbox, including CVE-2026-14537, a Critical 9.8 authorization failure, together with CVE-2026-11719, CVE-2026-14538, CVE-2026-14539, CVE-2026-14541, and CVE-2026-16481, covering authentication, authorization, isolation, and trust-boundary failures across MCP execution paths
• Linux kernel · Discovered and reported three kernel vulnerabilities, including CVE-2026-68326, CVE-2026-68402, and CVE-2026-64339, covering wireless and USB attack surfaces with fixes integrated into upstream development
• libvirt / Red Hat · Discovered CVE-2026-63622, a filesystem trust-boundary flaw allowing a compromised swtpm service context to influence host-side ownership changes, and CVE-2026-63623, a storage-volume permission window exposing guest disk contents during clone and convert operations
• Docker MCP Gateway · Reported four vulnerabilities in Docker's MCP Gateway, including CVE-2026-76092, a Critical 9.2 authentication failure exposing proxied MCP tools without authentication, and CVE-2026-76094, a High 7.7 image signature-verification weakness
• Apple platform · Credited by Apple for CVE-2026-43806 in macOS mDNSResponder
• GitHub MCP Server · Reported CVE-2026-48529, an authorization and cross-user client isolation flaw in GitHub's official MCP Server
• MCP ecosystem · Cross-project security research spanning Google, Docker, IBM, HashiCorp, GitHub, Contentful, official Model Context Protocol SDKs, dbt Labs, MISP, and Rapid7, studying authentication, authorization, isolation, SSRF, filesystem, resource-lifecycle, and trust-boundary failures across LLM tooling
• Microsoft Security Response Center · Recognized as HE WEI in the MSRC 2027 Special Mentions
• Google Security · Received Honorable Mentions for vulnerability research and responsible disclosure

🧵 Selected write-ups and PoCs are available on the blog