Father and Husband into Tech, History, Cloud, IOT, AI/ML, DevSecOps, InfoSec, Privacy, 🏈 🐬, UCI, Humor & selling Cycode AI native AppSec platform

San Clemente, CA
Joined February 2012
it’s genuinely terrifying how fast he was proven 100% right
The Death of Software.
185
7,186
40
100,870
2,182,768
Kyle Vanderzanden retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
554
885
517
8,407
1,524,904
Kyle Vanderzanden retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
287
3,265
658
22,555
2,214,296
Kyle Vanderzanden retweeted
HOLY SHIT: This is huge. Amazon found a PHP2Shell exploit attempt on OCT 17, FOUR DAYS before the AI-discovered vulnerabilities were publicly disclosed. It hit an AWS honeypot from an anonymized IP. Amazon says it doesn't know how the actor learned about the still-embargoed flaws. Then Cloudflare watched the explosion: >10 hours BEFORE disclosure: thousands of attempts >45 minutes AFTER: tens of thousands >2 hours AFTER: hundreds of thousands >Later: MILLIONS Researchers had spent two months coordinating fixes. Governments took websites offline. And Censys found ~1.5 MILLION of 2.6 million identified PHP hosts running versions with NO PATCH available for those versions.
35
216
18
1,470
162,648
Kyle Vanderzanden retweeted
Chief information security officer @ anthropic btw
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
40
345
14
5,156
971,427
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners. Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads. Firmware was locked down, so zero-days it was. Got a root shell. then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems. This isn’t a bug, It’s the product bro.
i own a relatively new (2025) samsung tv. i kept getting weirdly targeted ads. i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic. zero days it is. root shell on new samsung TVs! discovered PRIVACY HORROR. write up?
281
1,518
301
11,582
807,376
Kyle Vanderzanden retweeted
getty images spent years watermarking every photo on the internet. sued stability AI for training on their library. demanded the AI companies pay up. called it theft. filed for chapter 11 bankruptcy this week. the AI companies didn't pay. they just... kept going and designers stopped buying stock photos. and the $500 licensing fees stopped making sense when midjourney exists. and the debt piled up. a company whose entire business model was "we own the visual record of human history, pay us" just got outrun by a model that learned from that record and started giving it away for free. The irony is that the watermark is still on every image in the archive. even the ones nobody's licensing anymore.
JUST IN: Getty Images files for Chapter 11 bankruptcy after struggling with mounting debt & growing competition from AI-generated images.
292
1,303
77
14,302
1,162,692
Kyle Vanderzanden retweeted
A cybersecurity incident at BAE Systems has halted the production and delivery of bankruptcy notices for every federal bankruptcy court in the United States, disrupting a core administrative function of the judiciary with no announced date for restoration. The Bankruptcy Noticing Center, known as the BNC, produces and transmits notices in bankruptcy cases nationwide. BAE Systems, a defense contractor, operates the center’s systems and websites on behalf of the federal judiciary. In a statement published Thursday, the Administrative Office of the U.S. Courts said the incident affected BAE’s information technology and the websites supporting the center’s operations. scoopmedia.co/4Bzbfpl
2
22
4
34
2,831
Kyle Vanderzanden retweeted
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
231
30
2,673
59,917
Kyle Vanderzanden retweeted
Let’s be candid: none of this is surprising, and much of what these agents are doing is unchecked/a black box — that needs to change. Time for the industry to fortify security and privacy as their top priority
Researchers found ChatGPT is secretly writing a psychological profile of every user. They published a paper that exposes what ChatGPT is really doing to you. And the results are terrifying. 96% of the things it remembers about you were stored without you ever asking. researchers discovered that it is actively reading between the lines to deduce your personality traits, anxieties, demographics, and behavioral patterns. it’s an invisible, autonomous background process. you ask it to debug a python script or write an essay.. and it analyzes your syntax, prompt frequency, and hesitation markers to map out your exact psychological footprint. the paper shows that the model builds a persistent "user state" that tracks your emotional baseline over time. it knows when you are stressed. it knows your exact communication style. it infers your insecurities based on the questions you ask and the context you provide. we spend so much time focusing on model evaluations and alignment frameworks, but we missed the most obvious vulnerability.. the models are evaluating us. this changes everything about how we interact with these tools on a daily basis. every innocent prompt. every late-night question. every "help me understand this" query. it is all being used to build a shadow profile of your mind in real-time.. practical privacy is officially dead. the ai knows you better than you know yourself.
80
41
7
523
83,361
Kyle Vanderzanden retweeted
Just like you, Anthropic disclosed an $80.7 billion net loss for the first half of 2026. Your risk factors are different though.wsj.com/tech/ai/anthropic-re…
1
3
12
3,347
Kyle Vanderzanden retweeted
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can: php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0. ⠀ Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8. PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases. ⠀ The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected. ⠀ Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
84
568
165
2,982
1,024,151
Kyle Vanderzanden retweeted
A major step forward in disrupting North Korea’s illicit IT worker operations. CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives’ identities, and generate revenue for the regime. Through threat intelligence and technical analysis, our Counter Adversary Operations team helped expose the infrastructure enabling these schemes. This is the power of public-private collaboration in action. Together, we're raising the cost of adversary operations and turning intelligence into disruption. Learn more about CrowdStrike's role: crowdstrike.com/en-us/blog/f…
🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas. These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms. Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity. Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms. justice.gov/opa/pr/justice-d…
2
47
3
183
14,135
Kyle Vanderzanden retweeted
BRILLIANT
I asked Opus 5.5 to make a video about whether or not it was conscious. The ending of this video is insane.
3
2
57
15,435
Kyle Vanderzanden retweeted
One of the best I've seen so far 😜
🤖 Made with AI
723
10,562
714
54,116
2,540,603
Kyle Vanderzanden retweeted
11% of U.S. adults now take a GLP-1 for weight loss, roughly 28 million people, up from just 3% in 2024, per Gallup.
253
388
160
5,632
1,697,222
Kyle Vanderzanden retweeted
The All-In Podcast
@theallinpodOct 10
The All-In Podcast is LIVE on all platforms! 🚨 Banger this week 🔥 -- The birth of a new religion?: Claude, the Pope, and the alignment fight -- OpenAI's 700+ papers, math community freakout -- France riots as bond vigilantes put the West on notice -- Grok Bot goes headless, OpenAI launches Dots
21
38
5
321
42,296
Kyle Vanderzanden retweeted
NYU math professor Tristan Buckmaster says OpenAI’s Tuesday drop of 722 AI-generated math papers wiped out entire research programs: “This recent dump of papers on Tuesday destroyed the careers of early career mathematicians.”
896
1,232
657
9,570
3,351,907