Security Researcher @nozominetworks

Earth
Joined May 2010
Just discovered 10 memory corruption vulnerabilities in the popular Mongoose Web Server (11k stars on GitHub) by fuzzing its embedded TLS stack protocol with @aflplusplus. More technical details here: nozominetworks.com/blog/hunt…
44
1
219
12,842
🚀 Introducing DiscoveryRSI: Recursively Learning to Discover Valuable Hypotheses 6.3% of DiscoveryRSI-27B's hypotheses match later published work, vs 2.5% GPT-6 & 2.3% Claude Opus 5. 📄 arxiv.org/abs/2610.23839 💻 github.com/Gen-Verse/Discove… 🔴 foundry-arena.rsi-arena.work…
36
98
8
713
50,294
cdzeno retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source! Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable. 🔗 github.com/deepseek-ai/DeepI… 1/4
1,003
2,715
1,465
23,683
2,165,676
cdzeno retweeted
herdr start to build app btw. I want to show my pluign herdr-web-ui. - GUI chat mode like t3code - Mobile support. Any harness. Anywhere. - All herdr function support. Even more. - PWA and Super lightweight. No any hooks. - Free. MIT. You can still my code. - *Native desktop and mobile apps soon too.*
10
9
2
143
10,792
Earlier this year, we explored agentic vulnerability discovery across a diverse set of targets, such as Windows drivers, XNU, firmware, web apps, etc. We share our experiences here: arxiv.org/pdf/2610.14729 Fun fact: better decompilation can help reduce false positives!
2
17
2
73
5,428
1/ We discovered something totally unexpected about the neural structure of consciousness that overturns decades of thinking on its biological basis and brings us significantly closer to the recipe for generating conscious awareness. New preprint: biorxiv.org/content/10.64898… (led by @HesseJanis, with @FrankLanfranchi, @_conor_mcgrory, @Yuelin_Shi, and @EngelTatiana)
382
1,660
515
11,180
2,112,183
cdzeno retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
725
1,468
1,215
11,547
2,857,417
cdzeno retweeted
agentic reverse engineering benchmark sre-bench.lol/leaderboard
5
6
2
176
18,371
🚀 DeepSeek-V4.1-Flash-1017 is here! Stronger benchmark performance, faster task completion, and shorter outputs than the previous version—a Pareto improvement in performance and cost. Now live on our website, app, and API. 🛠️ Optimized for @DeepSeekHarness, Tencent CodeBuddy, WorkBuddy, and more. Upgrade to DeepSeek Harness v0.2.1-rc.1 or later for the best experience with the new model. 1/4
1,605
4,111
2,805
36,840
7,598,403
My presentation at Hexacon is done ! Time for public disclosure. Pictured below: remote unauthenticated code execution over-the-air (including the shell) on Proximus BBOX 3V+
5
56
2
266
15,251
cdzeno retweeted
New post: how I got into Apple Security Bounty. My path, the articles and talks that helped, a hands-on XNU kernel lab and my setup + tooling. varik.dev/blog/getting-into-…
2
21
102
5,248
cdzeno retweeted
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
16
221
46
1,265
383,118
cdzeno retweeted
New VirLabs research: Tessera, an undocumented backdoor targeting MikroTik RouterOS on TILE-Gx. The samples had 0 detections on VirusTotal. Underneath a small launcher and wrapper sits a fairly sophisticated remote-control implant. virlabs.ai/blog/tessera/
1
11
1
40
3,760
cdzeno retweeted
My dear friends, I’d like to show you my latest toy project Introducing Handwired: turn your regular JavaScript code into a neural net! - no training - exact outputs vs the JS program - fully differentiable All runnable in a browser, without GPU
454
1,006
460
11,259
1,419,203
cdzeno retweeted
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
863
2,600
1,419
19,634
4,349,278
cdzeno retweeted
The AI Scientist v3 is out: The Agentic Scientist. GitHub: github.com/SakanaAI/AI-Scien… Blog: pub.sakana.ai/agentic-scient… arXiv: arxiv.org/abs/2610.18933 The Agentic Scientist is the 3rd iteration of our automated AI Scientist research system, and the shift this time is from “one agent writes a paper” to “a scaffold of parallel agents orchestrates the full research loop.” The system now orchestrates a pool of parallel workers that share memory and distilled conclusions. Crucially, it features Evidence Generation: isolated agents automatically run controlled baselines and ablations to prove why an idea actually works. It works as a co-scientist. We used a development version as a co-scientist to explore biologically plausible learning rules. The agent handled the empirical heavy lifting, proposing mechanisms and running experiments. We stayed in the loop to steer direction, verify results, and moderate claims. That feels like the right division of labor for where the technology actually is. This resulted in a new biologically plausible learning algorithm, and the resulting paper was accepted at ALIFE 2026 as an oral presentation. We are also releasing AutoIllustrate. It generates editable draw.io vector figures instead of uneditable, hallucinated raster images. Real scientists need vectors, not pixels. I am an SVG junkie ;) Incredible work by Robert Lange, Luca Grillotti, Yutaro Yamada, Rujikorn Charakorn, and the team!
The Agentic Scientist: Orchestrating Coding Agents for Automated Scientific (Co-)Discovery Blog: pub.sakana.ai/agentic-scient… GitHub: github.com/SakanaAI/AI-Scien… arXiv: arxiv.org/abs/2610.18933 Since 2024, we’ve used The AI Scientist as a way to test how far AI alone can take scientific research, from v1 to v2 to the paper published in Nature earlier this year. The Agentic Scientist is the next step in that line of work, built for the era of coding agents. Coding agents such as Codex and Claude Code now carry out long software tasks on their own. Handing them a research problem, however, tends to produce a strong hyperparameter optimizer rather than a scientist: scores go up, but ideas stay narrow, and the reasons for the gain are rarely examined. The Agentic Scientist makes the research loop explicit. It wraps off-the-shelf coding agents in a scaffold that controls what they see, what they write, how they are evaluated, and how results are handed to the next stage. Parallel workers test hypotheses against rubrics defined before any experiment runs, share successes and failures through a common memory, and then ablate the winning program to generate evidence. We used an early version of the system to study Error Diffusion, a biologically motivated alternative to backpropagation. Our researchers set the question and the rubric, chose directions at each stage, and verified the results, references, and claims before submission. The resulting paper was accepted as an oral presentation at ALIFE 2026. In autonomous runs, the system also raised Doc-to-LoRA retrieval accuracy from 52% to 98% on multi-needle tasks and designed a learned evolution strategy that improves over its CMA-ES reference on unseen tasks. Alongside it we release AutoIllustrate, a pipeline for scientific figures that keeps an editable draw.io file as the source of truth, so every diagram can be corrected by hand. Humans define the question and the standards of evidence; agents expand the experiments researchers can run. We call this Co-Discovery, and we are releasing both systems as open source for the community to build on.
93
287
19
1,842
83,876
Highlights from my feeds this morning. Good security research is so hot rn - blog.doyensec.com/2026/10/13… - blog.trailofbits.com/2026/10… (GOOD HARNESS!) - daniel.haxx.se/blog/2026/10/… Background on the curl vuln - blog.quarkslab.com/myreport-…
4
33
1
256
12,742
cdzeno retweeted
Here’s the source & tutorial. Play with it yourself! chenglou.me/handwired/ github.com/chenglou/handwire…
20
41
3
780
64,812