We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
Aditra AL retweeted
New in Claude Code: /ultrareview (research preview) runs a fleet of bug-hunting agents in the cloud.
Findings land in the CLI or Desktop automatically. Run it before merging critical changes—auth, data migrations, etc.
Pro and Max users get 3 free reviews through 5/5.
Aditra AL retweeted
Business idea:
1. spam GitHub with terrible insecure code, fake dependencies, fake exploits, ...
2. sell the list of repositories to AI training companies so they can exclude it from the dataset
Aditra AL retweeted
Meet Kimi K2.6: Advancing Open-Source Coding
🔹Open-source SOTA on HLE w/ tools (54.0), SWE-Bench Pro (58.6), SWE-bench Multilingual (76.7), BrowseComp (83.2), Toolathlon (50.0), Charxiv w/ python(86.7), Math Vision w/ python (93.2)
What's new:
🔹Long-horizon coding - 4,000+ tool calls, over 12 hours of continuous execution, with generalization across languages (Rust, Go, Python) and tasks (frontend, devops, perf optimization).
🔹Motion-rich frontend - Videos in hero sections, WebGL shaders, GSAP + Framer Motion, Three.js 3D.
🔹Agent Swarms, elevated - 300 parallel sub-agents × 4,000 steps per run (up from K2.5's 100 / 1,500). One prompt, 100+ files.
🔹Proactive Agents - K2.6 model powers OpenClaw, Hermes Agent, etc for 24/7 autonomous ops.
🔹Claw Groups (research preview) - bring your own agents, command your friends', bots & humans in the loop.
-
K2.6 is now live on kimi.com in chat mode and agent mode.
For production-grade coding, pair K2.6 with Kimi Code: kimi.com/code
-
🔗 API: platform.moonshot.ai
🔗 Tech blog: kimi.com/blog/kimi-k2-6
🔗 Weights & code: huggingface.co/moonshotai/Ki…
Introducing Claude Opus 4.7, our most capable Opus model yet.
It handles long-running tasks with more rigor, follows instructions more precisely, and verifies its own outputs before reporting back.
You can hand off your hardest work with less supervision.
Aditra AL retweeted
Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.
It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
anthropic.com/glasswing
Aditra AL retweeted
‼️ The axios lead maintainer has gone public on how he was socially engineered into installing the malware behind the npm supply chain attack.
We have example images showing exactly how the attack was staged.
How well can Qwen3.5 models debug code?
I built BugFind-15 — 15 buggy snippets across Python, JS, Rust, and Go. Docker sandbox compiles and validates every fix. Two trap scenarios where the code is correct and the model must resist "fixing" it.
Tested every Qwen3.5 size from 0.8B to 397B, plus Jackrong's popular distilled model (V2).
The 0.8B scored 5%. The 2B scored 10%. At 4B, debugging ability jumps to 69%.
The hardest scenario: BF-03, a Rust trap. The code compiles fine — format! borrows, it doesn't move. Not a single model figured this out. From 0.8B to 397B, every one of them "fixed" a bug that doesn't exist.
Category C (subtle bugs — mutable defaults, integer overflow, slice aliasing) was 100% across every model 4B and above.
Category D (red herring resistance) told the real story — can it resist fixing code that isn't broken? No model scored above 90%.
Small models can't debug.
Mid-size models fix obvious bugs but fall for traps.
Large models fix the hard bugs but still invent problems that don't exist.
Aditra AL retweeted
Claude code source code has been leaked via a map file in their npm registry!
Code: pub-aea8527898604c1bbb12468b…
Aditra AL retweeted
RCE in Ghidra: My fav bugs target security tools.
In CVE-2026-4946, you can embed these into your binary, analyst loads binary, Ghidra auto-generates the comments, analyst clicks on it, command executes.
Write-up: takeonme.org/cves/cve-2026-4…
Aditra AL retweeted
34306.lol
support iOS 17.2.1 and lower
Aditra AL retweeted
[BLOG]
This post summarises how to tie Cobalt Strike's UDRL, SleepMask, and BeaconGate together for your syscall and call stack spoofing needs.
rastamouse.me/udrl-sleepmask…
Aditra AL retweeted
Winamp source code released
github.com/WinampDesktop/win…
Aditra AL retweeted
An install method for TrollStore on 17.0 is finally here.
TrollRestore works on iOS/iPadOS 15.0 - 16.7 RC and 17.0. Developed by JJTech and myself. There is no kernel exploit involved so it is 100% reliable.
github.com/JJTech0130/TrollR…
Aditra AL retweeted
THE DEATH OF SLIM SHADY (COUP DE GRÂCE) - out now!! ☠️ eminem.lnk.to/TDOSS #TheDeathOfSlimShady
Aditra AL retweeted
Back with @_ColeBennett_ 4 the #Tobey video 🕷️🐐 @BigSean @_babytron - out now!! No goats were harmed making this video. shop.eminem.com

























