
Security Researcher @nozominetworks
Earth
Joined May 2010
- Tweets1.6K
- Following982
- Followers291
- Likes6.7K
Pinned Tweet
Just discovered 10 memory corruption vulnerabilities in the popular Mongoose Web Server (11k stars on GitHub) by fuzzing its embedded TLS stack protocol with @aflplusplus. More technical details here: nozominetworks.com/blog/hunt…
cdzeno retweeted
🚀 Introducing DiscoveryRSI: Recursively Learning to Discover Valuable Hypotheses
6.3% of DiscoveryRSI-27B's hypotheses match later published work, vs 2.5% GPT-6 & 2.3% Claude Opus 5.
📄 arxiv.org/abs/2610.23839
💻 github.com/Gen-Verse/Discove…
🔴 foundry-arena.rsi-arena.work…
cdzeno retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
herdr start to build app btw.
I want to show my pluign herdr-web-ui.
- GUI chat mode like t3code
- Mobile support. Any harness. Anywhere.
- All herdr function support. Even more.
- PWA and Super lightweight. No any hooks.
- Free. MIT. You can still my code.
- *Native desktop and mobile apps soon too.*
cdzeno retweeted
Earlier this year, we explored agentic vulnerability discovery across a diverse set of targets, such as Windows drivers, XNU, firmware, web apps, etc.
We share our experiences here:
arxiv.org/pdf/2610.14729
Fun fact: better decompilation can help reduce false positives!
cdzeno retweeted
LayerFS被 PI 作者认可,开心
github.com/Ephemeral-AI-Lab/…
cdzeno retweeted
1/ We discovered something totally unexpected about the neural structure of consciousness that overturns decades of thinking on its biological basis and brings us significantly closer to the recipe for generating conscious awareness.
New preprint: biorxiv.org/content/10.64898… (led by @HesseJanis, with @FrankLanfranchi, @_conor_mcgrory, @Yuelin_Shi, and @EngelTatiana)
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
cdzeno retweeted
agentic reverse engineering benchmark
sre-bench.lol/leaderboard
cdzeno retweeted
🚀 DeepSeek-V4.1-Flash-1017 is here!
Stronger benchmark performance, faster task completion, and shorter outputs than the previous version—a Pareto improvement in performance and cost. Now live on our website, app, and API.
🛠️ Optimized for @DeepSeekHarness, Tencent CodeBuddy, WorkBuddy, and more. Upgrade to DeepSeek Harness v0.2.1-rc.1 or later for the best experience with the new model.
1/4
cdzeno retweeted
CLAUDE FOUND THE SEEDS
anthropic.com/research/ecdsa…
cdzeno retweeted
My presentation at Hexacon is done ! Time for public disclosure.
Pictured below: remote unauthenticated code execution over-the-air (including the shell) on Proximus BBOX 3V+
cdzeno retweeted
All the details including the slides are now available at quentinkaiser.be/security/20…
New post: how I got into Apple Security Bounty. My path, the articles and talks that helped, a hands-on XNU kernel lab and my setup + tooling.
varik.dev/blog/getting-into-…
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors.
CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
cdzeno retweeted
New VirLabs research: Tessera, an undocumented backdoor targeting MikroTik RouterOS on TILE-Gx.
The samples had 0 detections on VirusTotal. Underneath a small launcher and wrapper sits a fairly sophisticated remote-control implant.
virlabs.ai/blog/tessera/
cdzeno retweeted
My dear friends, I’d like to show you my latest toy project
Introducing Handwired: turn your regular JavaScript code into a neural net!
- no training
- exact outputs vs the JS program
- fully differentiable
All runnable in a browser, without GPU
cdzeno retweeted
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had
with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works
already-clean.goodfire.com/
The AI Scientist v3 is out: The Agentic Scientist.
GitHub: github.com/SakanaAI/AI-Scien…
Blog: pub.sakana.ai/agentic-scient…
arXiv: arxiv.org/abs/2610.18933
The Agentic Scientist is the 3rd iteration of our automated AI Scientist research system, and the shift this time is from “one agent writes a paper” to “a scaffold of parallel agents orchestrates the full research loop.”
The system now orchestrates a pool of parallel workers that share memory and distilled conclusions. Crucially, it features Evidence Generation: isolated agents automatically run controlled baselines and ablations to prove why an idea actually works.
It works as a co-scientist. We used a development version as a co-scientist to explore biologically plausible learning rules. The agent handled the empirical heavy lifting, proposing mechanisms and running experiments. We stayed in the loop to steer direction, verify results, and moderate claims. That feels like the right division of labor for where the technology actually is.
This resulted in a new biologically plausible learning algorithm, and the resulting paper was accepted at ALIFE 2026 as an oral presentation.
We are also releasing AutoIllustrate. It generates editable draw.io vector figures instead of uneditable, hallucinated raster images. Real scientists need vectors, not pixels. I am an SVG junkie ;)
Incredible work by Robert Lange, Luca Grillotti, Yutaro Yamada, Rujikorn Charakorn, and the team!
The Agentic Scientist: Orchestrating Coding Agents for Automated Scientific (Co-)Discovery
Blog: pub.sakana.ai/agentic-scient…
GitHub: github.com/SakanaAI/AI-Scien…
arXiv: arxiv.org/abs/2610.18933
Since 2024, we’ve used The AI Scientist as a way to test how far AI alone can take scientific research, from v1 to v2 to the paper published in Nature earlier this year. The Agentic Scientist is the next step in that line of work, built for the era of coding agents.
Coding agents such as Codex and Claude Code now carry out long software tasks on their own. Handing them a research problem, however, tends to produce a strong hyperparameter optimizer rather than a scientist: scores go up, but ideas stay narrow, and the reasons for the gain are rarely examined.
The Agentic Scientist makes the research loop explicit. It wraps off-the-shelf coding agents in a scaffold that controls what they see, what they write, how they are evaluated, and how results are handed to the next stage.
Parallel workers test hypotheses against rubrics defined before any experiment runs, share successes and failures through a common memory, and then ablate the winning program to generate evidence.
We used an early version of the system to study Error Diffusion, a biologically motivated alternative to backpropagation. Our researchers set the question and the rubric, chose directions at each stage, and verified the results, references, and claims before submission. The resulting paper was accepted as an oral presentation at ALIFE 2026. In autonomous runs, the system also raised Doc-to-LoRA retrieval accuracy from 52% to 98% on multi-needle tasks and designed a learned evolution strategy that improves over its CMA-ES reference on unseen tasks.
Alongside it we release AutoIllustrate, a pipeline for scientific figures that keeps an editable draw.io file as the source of truth, so every diagram can be corrected by hand.
Humans define the question and the standards of evidence; agents expand the experiments researchers can run. We call this Co-Discovery, and we are releasing both systems as open source for the community to build on.
cdzeno retweeted
Highlights from my feeds this morning. Good security research is so hot rn
- blog.doyensec.com/2026/10/13…
- blog.trailofbits.com/2026/10… (GOOD HARNESS!)
- daniel.haxx.se/blog/2026/10/… Background on the curl vuln
- blog.quarkslab.com/myreport-…
cdzeno retweeted
Here’s the source & tutorial. Play with it yourself!
chenglou.me/handwired/
github.com/chenglou/handwire…























