About Aagam Shah
Cyber Security Technical Lead at ABB · aka (neutrinoguy)
Professional Overview
Aagam Shah (widely recognized in the international vulnerability research community as neutrinoguy) is a Cyber Security Technical Lead at ABB in Bengaluru, Karnataka, India. With an extensive background in industrial automation, critical infrastructure protection, and embedded systems engineering, Aagam spearheads product security architectures, firmware vulnerability assessments, penetration testing (VAPT), and threat modeling for mission-critical industrial deployments.
Beyond industrial control systems, Aagam is dedicated to research in Offensive and Defensive AI Security. His focus spans red-teaming large language model (LLM) agents, investigating adversarial prompt injection attack surfaces, evaluating automated agent tool invocation boundaries, and engineering resilient, deterministic safety guardrails for autonomous workflows in critical sectors.
Industrial Control Systems (ICS/OT)
Specialist in proprietary and open industrial protocol analysis, security fuzzing, and telemetry interception across Modbus, DNP3, PROFINET, OPC UA, and BACnet hardware devices and RTUs.
Offensive & Defensive AI Security
Red-teaming autonomous agentic systems, assessing prompt injection vectors, jailbreak dynamics, multi-turn dialogue poisoning, and implementing verifiable safety filters.
Firmware & Embedded VAPT
Hardware interface probing via UART, JTAG, and SPI; binary disassembly and decompilation with Ghidra and IDA Pro; discovering logic flaws and hardcoded secrets.
Standards & Threat Modeling
Deep compliance expertise leading institutional audits under ISA/IEC 62443 (parts 4-1, 4-2, 3-3) and ISO/IEC 27001:2013/2022; systemic STRIDE/PASTA threat assessments.
Vulnerability Discoveries & Community Impact
- CVE-2022-22987 (Advantech ADAM-3600): Critical vulnerability (CVSS 9.8) involving hardcoded private keys allowing unauthenticated remote takeover of industrial RTUs. Coordinated with CISA (ICSA-22-032-02).
- CVE-2023-24181 & CVE-2023-24182 (OpenWrt LuCI): Reflected and stored cross-site scripting vulnerabilities in core OpenWrt modules.
- MITRE ATT&CK for ICS Contributor: Official contributor documenting Technique T1694/002: Hardcoded Credentials.
- Global Hall of Fame: Formally recognized for responsible disclosure contributions by the United Nations, Sony, Alibaba, Opera, Sophos, Honeywell, Naver, Intel, ForgeRock, Prezi, NCIIPC India, and the Dutch Government (NCSC-NL).