Hamza Haroon
Security Researcher
Nua Security
Hamza Haroon is a Senior Security Researcher at Nua Security, where he runs vulnerability research and offensive tooling. He holds 25 coordinated-disclosure CVEs, including two in Microsoft Kiota, and got Special Mention by Microsoft Security Response Center. He competed in the Black Hat MEA CTF World Finals in 2023, 2024 and 2025, placing in the world top 35 each year, and took third place at Positive Hack Camp 2026 in Moscow. He holds OSCP+ and eCPPT, and is completing a Masters at NUST, Pakistan on empirical security measurement of code generators.