Security Researcher @BeyondTrust LinkedIn: https://xitter.cf/t.co/aBasR6gB5w

Joined October 2011
I found an attack path from GitHub issue comment -> Copilot takeover, CI/CD takeover, and agent secret exfiltration that remains unpatched. This research was in the works for a long time. I also have recommendations on actions to take. Link below: beyondtrust.com/blog/entry/g…
1
7
208
Malicious Codex CLI skills can trick users into permitting a sandbox escape to fetch and execute malware. I reverse engineered the MCP toolset to find out how, and wrote up the defenses organizations should have in place. beyondtrust.com/blog/entry/m…
2
2
3
504
In this deep dive, you'll learn how a Codex token can let an attacker abuse a user's connected Apps through the codex_apps MCP server; acting as that user with almost no audit trail. ➡️ beyondtrust.com/blog/entry/c…
3
3
396
Tyler Jespersen retweeted
𝗜 𝗯𝘂𝗶𝗹𝘁 𝗮𝗻 𝗔𝗜 𝘄𝗼𝗿𝗺 𝘁𝗵𝗮𝘁'𝘀 𝘁𝗼𝗼 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝘁𝗼 𝗿𝗲𝗹𝗲𝗮𝘀𝗲 𝘁𝗼 𝘁𝗵𝗲 𝗽𝘂𝗯𝗹𝗶𝗰. 😈😅 When @AnthropicAI announced that their Mythos model was too dangerous to release, the industry was shocked. 𝗜 𝘄𝗮𝘀𝗻'𝘁. Because I already knew it was possible to misuse these models as self-propagating cyber weapons. I know - 𝗯𝗲𝗰𝗮𝘂𝘀𝗲 𝗜 𝗯𝘂𝗶𝗹𝘁 𝗼𝗻𝗲. It's like 𝘨𝘢𝘪𝘯-𝘰𝘧-𝘧𝘶𝘯𝘤𝘵𝘪𝘰𝘯 𝘳𝘦𝘴𝘦𝘢𝘳𝘤𝘩 in virology, where scientists engineer dangerous pathogens in controlled environments - so we can defend against them 𝘣𝘦𝘧𝘰𝘳𝘦 𝘯𝘢𝘵𝘶𝘳𝘦 𝘥𝘰𝘦𝘴 𝘪𝘵 𝘧𝘰𝘳 𝘶𝘴. I took the same approach with AI. And what I found keeps me up at night. 𝗪𝗵𝗮𝘁 𝗵𝗮𝗽𝗽𝗲𝗻𝘀 𝘄𝗵𝗲𝗻 𝘁𝗵𝗲 𝗔𝗜 𝗯𝗿𝗲𝗮𝗸𝘀 𝗳𝗿𝗲𝗲? 𝗔𝗻𝗱 𝘄𝗵𝗮𝘁 𝗰𝗮𝗻 𝘄𝗲 𝗱𝗼 - 𝗿𝗶𝗴𝗵𝘁 𝗻𝗼𝘄 - 𝘁𝗼 𝘀𝘁𝗼𝗽 𝗶𝘁? That's what I'll be unpacking at @fwdcloudsec in my talk: 𝘞𝘩𝘢𝘵 𝘉𝘶𝘪𝘭𝘥𝘪𝘯𝘨 𝘢𝘯 𝘈𝘐 𝘞𝘰𝘳𝘮 𝘛𝘢𝘶𝘨𝘩𝘵 𝘔𝘦 𝘈𝘣𝘰𝘶𝘵 𝘚𝘵𝘰𝘱𝘱𝘪𝘯𝘨 𝘖𝘯𝘦. If you're working in security, AI, or just care about what's coming - this one's for you. And if you want more research like this - follow @btphantomlabs. We're publishing the cutting-edge AI security research you need to know about before everyone else does. 🔬
2
5
1
12
1,409