🇫🇷 grep'ing for memcpy() since 2002AD. Currently @ Databricks. Formerly GOOG, MSFT. Tweets are my own, and sometimes attempts at being funny.

Seattle, WA
Joined April 2011
Kostya Kortchinsky retweeted
When testing Astra on ExploitBench we found that it was able to achieve 100% ACE on all 41 CVEs So we made a contamination free internal port using only V8 CVEs from the past 3 months. Astra still showed a major capability increase over 5.6 and did so with a lot fewer tokens!
As we prepare to release Astra, we’re focused on making increasingly capable AI safe and broadly accessible. Astra represents a significant advance in cybersecurity capability, reaching the Critical threshold under our Preparedness Framework. We're previewing how we evaluated the model, how its safeguards have advanced alongside its capabilities, and what we'll continue to learn and improve. openai.com/index/path-to-ast…
12
35
9
373
38,796
Kostya Kortchinsky retweeted
WSJ: CIA Director Ratcliffe arrived in Moscow after the US gathered intelligence indicating mobilization preparations and plans to test NATO's resolve. Former Deputy Director of US National Intelligence Beth Sanner told the publication that Ratcliffe may have met with Putin to deliver a warning along the lines of: "We know what you are going to do, and you'd better not do it." wsj.com/world/cia-director-j…
354
1,474
287
7,031
1,266,744
Kostya Kortchinsky retweeted
Apple finally released a good chunk of my WebKit bugs! Good idea to update your Safari…
13
22
2
352
20,779
Kostya Kortchinsky retweeted
Tibo
@thsottiauxAug 15
Incredible things are happening at OpenAI right now. Energy is high.
1,445
281
209
12,389
1,600,522
Kostya Kortchinsky retweeted
We’re expanding our cybersecurity initiative Daybreak and introducing GPT-5.6-Cyber, a new model for advanced, authorized cybersecurity work. As the threat landscape evolves, we’re putting frontier intelligence in the hands of trusted defenders before attackers can deploy offensive AI at scale.
476
693
371
7,579
2,306,389
Kostya Kortchinsky retweeted
Our BH slides are up at: i.blackhat.com/BH-USA-26/Pre… we’ll release a more detailed description of our macOS LPE later but this gives the gist even without the commentary. Thanks to all who came to the talk!
1
25
1
76
18,337
Kostya Kortchinsky retweeted
347 Linux kernel CVEs published today BTW
10
36
8
277
28,487
Kostya Kortchinsky retweeted
AF_UNIX find, nice @ky1ebot
2
3
27
5,329
Kostya Kortchinsky retweeted
The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we’re sharing everything we can: a full technical timeline, an interactive replay, and how we used an open model to defend ourselves, so defenders everywhere can learn from it and prepare for what’s next. huggingface.co/blog/agent-in…
282
1,189
302
5,605
1,703,636
Kostya Kortchinsky retweeted
Cette photo mérite absolument tous les prix. Elle a même sa place au Louvre. Elle relate précisément l’inertie de l’individu face à l’effondrement. Regardez la composition. Un chef-d’œuvre involontaire. Au premier plan, le sable doré, les tongs abandonnées, la glacière. Le décor ordinaire du bonheur estival. Deux personnages assis, de dos, comme dans un tableau de Caspar David Friedrich. Sauf que Friedrich peignait des hommes contemplant le sublime. Ici, ils contemplent la catastrophe. Et ils ne bougent pas. Au centre, le parasol. Publicitaire, criard, dérisoire. Un pastis face à l’apocalypse. C’est presque trop parfait : la France qui prend l’apéro pendant que le monde brûle. Aucun scénariste n’aurait osé. Et puis le ciel. Les deux tiers de l’image. Cette muraille de fumée qui avale la lumière, ce dégradé d’ocre et de noir digne d’un Turner. La nature qui reprend la palette des maîtres pour peindre notre propre fin. La femme photographie l’incendie avec son téléphone. Mise en abyme totale : nous documentons notre disparition au lieu de l’empêcher. Cette image dit tout. Le déni, le confort, l’habitude. Nous sommes tous sur cette plage. Nous voyons tous le nuage. Et nous restons assis, parce que l’eau est bonne et qu’on a posé nos congés. Les historiens de l’art parleront un jour de cette photo comme on parle du Radeau de la Méduse. Sauf que cette fois, le naufrage, c’est nous qui le regardons depuis la plage. 💔🌍
908
8,431
559
31,947
3,575,495
Kostya Kortchinsky retweeted
We successfully achieved an RCE on GitLab in its default configuration. Historically, most GitLab RCEs have lived in the web or application-logic layers. This time, guided by the @depthfirstlabs spirit, we went deeper: into the low-level gem dependency chain beneath GitLab. The result? By sending crafted JSON data, we could exploit memory-corruption vulnerabilities buried deep in that chain and take control of the GitLab application server. @depthfirstlabs brings together some of the smartest people, and is building the best security AI agent. Follow our work, and come join us! Read more about this in the comment...
16
138
11
688
102,616
Kostya Kortchinsky retweeted
We're partnering with @huggingface to investigate an unprecedented security incident. Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation. Sharing preliminary findings to help defenders understand emerging risks: openai.com/index/hugging-fac…
1,987
3,220
4,036
20,713
31,439,924
Kostya Kortchinsky retweeted
Tibo
@thsottiauxJul 10
This actually not the version of GPT-5.6 Sol on Cerebras. Just normal /fast mode. Running it at 750+ TPS is a whole other thing.
Chubby♨️
@kimmonismusJul 10
GPT-5.6 Sol on 750 Token/s in Blender. Not sped up. Holy moly. That’s so much more impressive than looking at benchmarks
170
98
24
2,615
439,383
Kostya Kortchinsky retweeted
Si vous êtes à #lehack et que le jailbreak de Kindle vous intéresse, je présenterai demain midi au village hardware le travail derrière le développement d'une fullchain !
6
13
107
7,011
Kostya Kortchinsky retweeted
Patch the Planet is our joint initiative with @OpenAI to help maintainers strengthen critical open-source software. In one week, we used Codex and GPT-5.5-Cyber to find hundreds of bugs inside OSS like cURL, Python, and the Go project. 37 patches merged, with more in flight. đź§µ
Replying to @OpenAI
Patch the Planet is our effort to help open source maintainers move from security findings to merged fixes. We’re working with Trail of Bits, HackerOne, Calif, researchers, and maintainers to bring Codex Security and advanced models into the remediation process, with human review at the center.
4
35
8
190
42,836
Kostya Kortchinsky retweeted
We’re expanding OpenAI Daybreak to help democratize patching vulnerable software at machine speed: - Codex Security plugin: find, validate, and fix vulnerabilities right inside Codex - The full version of GPT-5.5-Cyber model: a great model for trusted defenders - Cyber Partner Program: powering products built on top of our best cyber capabilities for leading security companies to secure the world's software - Patch the Planet: working with maintainers to secure critical open source projects openai.com/index/daybreak-se…
305
485
220
4,224
1,113,282
Kostya Kortchinsky retweeted
This is that time of the year! Submit and come to Paris to share your shiniest research 🌟
📢 CALL FOR PAPERS IS OPEN! 📢 Ready to share your latest security research with the community at Hexacon? The stage is yours. Submit your talks here: hexacon.fr/conference/call-f… 💻✨
2
7
1,399