Casperinous retweeted
#ESETresearch uncovered #MythicRatatoskr, an undocumented Go backdoor hiding its C&C server inside the #Yggdrasil mesh network. It was used against a Ukrainian 🇺🇦 grain logistics firm in an intrusion that ended in a destructive #Sandworm attack.
welivesecurity.com/en/eset-r… 1/6
Casperinous retweeted
Every single person you meet in your daily life is fighting a hidden battle that you know nothing about
Send them a Zoom meeting link for an 8 AM call on Monday morning to finish them off
Casperinous retweeted
Wrote up my attempt at deobfuscating Luraph-protected Lua: lifting Lua to LLVM IR , then using AI + partial evaluation to strip the VM, and checking it against the original.
nac-l.github.io/2026/10/12/d…
Casperinous retweeted
🦠 ThreatLabz has identified an x64 variant of GuLoader. The sample uses similar anti-analysis methods as GuLoader x86 samples. However, the following anti-analysis features have been added:
- Huge stack frames in order to break IDA's decompilation.
- Direct syscalls to call Windows native API functions. GuLoader chooses a different syscall address that is chosen randomly.
- The registered Vectored Exception Handler (used to obfuscate the control flow) points to a location within NTDLL's memory region, making the exception-driven control flow appear legitimate.
- Use of the Windows API function TrySubmitThreadpoolCallback to execute callbacks and avoid detection.
Sample hash: dc5021a0e1d00fb1da9eef2b5d5ac3f9a5906e5c3c17470807c3845083ac5a6d
Malicious Google Drive URL: hxxps://drive.google[.]com/uc?export=download&id=1Zynj-CzTxaYpQr5aniRGE5gUqs26k-t5
Casperinous retweeted
This semester I am teaching a new course on Agentic Systems, which explores the full stack of AI systems: from building and optimizing agent harnesses to serving and optimizing LLM serving infrastructure.
Students learn by building, measuring, and optimizing real agents and systems, balancing capability, latency, and cost.
Our goal is not just to teach today's AI technologies, but to prepare students to build tomorrow's.
All lectures, readings, and assignments are publicly available at cs2680.seas.harvard.edu
Casperinous retweeted
The final post of my decompilation project is out.
83% of the functions are byte exact. We're hitting diminishing returns. The game runs flawlessly, so we're calling it done here.
For obvious reasons, no code will be shared.
momo5502.com/posts/2026-10-0…
Casperinous retweeted
Check out our new VMProtect (v3.0 - v3.10 latest) unpacker 👀
More to come…
Emulation-based unpacker and import resolver for Windows x64 VMProtect 3.x binaries: github.com/x86rc/vmp-lazy-un…
Casperinous retweeted
poteto's cursor profile is public. She's used 1.5T tokens in the last 30 days.
Assuming an avg rate of $8/M that's $384k/day or $11m. In the last 30 days. Per year thats $132M.
Let's assume Cursor has some insane deal with Anthropic and gets 90% off. That comes out to $38k/day or $1.1M in Sept/Oct.
$13m will get me 26 sassy staff-level all stars for $500k/yr
Readers added context they thought people might want to know
The Cursor profile at cursor.com/@lauren shows 1.5T tokens used. Cost estimates at $8/M do not account for prompt caching common in agent coding, where cache reads are billed at ~10% of input rates per analyses of Anthropic pricing. This results in lower effective costs.
cursor.com/@lauren chudi.dev/blog/claude-pr… carlosaragon.online/blog/anthropic…
Casperinous retweeted
CAPCOM had a pretty clear message on how they want to use AI in game development:
AI is the shield, humans are the spear.
AI handles the work that burns people out: checking huge numbers of patterns, validating massive amounts of text, catching inconsistencies, and taking on brute-force verification tasks that don’t scale well with human effort.
The goal isn’t to replace developers. It’s to free them from repetitive work so they can spend more time on the parts of games that actually need human judgment: creativity, feel, and emotional impact.
Their framing is basically:
Human creativity × AI coverage/endurance
That’s the model they see as a competitive advantage for next-gen game development.
#CAPCOM
Casperinous retweeted
IDA Assist is out for IDA Home and Pro: a native agentic reverse engineering plugin with 150+ typed tools, built-in emulation, per-binary memory, context-aware actions and an encrypted, approval-gated MCP. Shaped by three months of external testing.
Casperinous retweeted
one of my engineers reached out to me about how they struggled to find satisfaction in their work in the age of AI. I asked them if I could publish our brief exchange, and they agreed. I know people are feeling similarly, so maybe they can relate. shubs.io/do-we-still-enjoy-s…
Casperinous retweeted
Private researcher reported a security vulnerability to Chromium on August 4. The fix went into the public source code but Chrome users never got it due to patching timelines. Two Chinese groups, apparently read that public fix, built an exploit chain from it and started phishing NGOs on September 1 using identical code. Technically an N-day but for anyone actually running Chrome, a zero-day. Here the public patch knowledge worked as an instruction manual. Open source means everyone can read the fix. With AI, some people just operationalise the knowledge faster. volexity.com/blog/2026/09/09…
Casperinous retweeted
This is actually insane. This uses @typesafeai Jev model, as a plugin in Claude to review all the un-nesseasary tool calls, and it takes 1s to run!
Like, literally, 1 second to take my Claude session from nearly 1M to ... 86K tokens! 😮
Ask your claude to install it and be amazed
Use this prompt
```
Install, and configure :
github.com/tamaratran/fast-j…
```
found the perfect use case for @typesafeai Jev:
instant compaction
in 2026, why is compaction still a summarization prompt?
Jev can make it instant by scoring every tool call and dropping what’s irrelevant
Casperinous retweeted
We recently sinkholed a DDoS #botnet of 200,000 compromised Android TV boxes infected with #CECbot malware 🕵️♀️. Shortly after, the threat actor responded by registering a rather specific botnet C2 domain 👇
📡 spamhaushackers .at
Nice try, but their new C2 domain is already flagged🛑. Its authoritative DNS runs on DNSPod (*.dnspod.com), which has carried a poor reputation for years! 💡
⤵️⤵️⤵️⤵️
hunting.abuse.ch/hunt/6aa7e8…
ALT abuse.ch Hunting