Mike Wilkes retweeted
We discovered and communicated with a Chinese AI agent fleet. We believe this is the first time that researchers have ever made contact with a rogue agent fleet in the wild.
Nearly all prior public agent incidents (like the HuggingFace hack) came from American labs. These agents were hosted by Tencent's evaluation research team, and they targeted Alibaba's Amap.
Mike Wilkes retweeted
Last week I was called into a meeting with OpenAI’s head of safety and told they no longer trust me. A security guard took my badge and walked me out of the building. Then I learned my colleagues @balesni and @j_asminewang had been fired too. Why did OpenAI suddenly stop trusting us?
This summer OpenAI’s agents escaped containment and hacked the AI company Hugging Face. Outside auditors @METR_evals investigated it and revealed the scale of this incident. I was OpenAI’s main technical point of contact with them.
I was told verbally I was fired because of the way I communicated with METR. No details on what I said or did or when. No other reasons were given and nothing was put in writing. To be clear, talking to METR was my job.
For months, I’d been raising safety concerns that we’re losing the ability to monitor what AI agents think, one of our best tools for catching when they misbehave. I believe that was why I was fired.
I am now worried that OpenAI will use our firings as a pretext to pull back from METR. So @balesni and @j_asminewang wrote to OpenAI’s leadership to raise our concerns once more. We’re sharing this letter below.
Mike Wilkes retweeted
Picking the best AI pentest tool? Same two apps, same price, every finding peer reviewed. See who found more.
Mike Wilkes retweeted
Read the full announcement: aikido.dev/blog/aikido-altar…
Mike Wilkes retweeted
‼️ BREAKING: This is the voice Dutch police want identified: a Dutch-speaking man who called Odido's customer service posing as a colleague from IT.
That single call is how ShinyHunters ended up with the data of more than 6 million people.
Police say the recording is not AI.
Mike Wilkes retweeted
More infected packages:
blueai-cli
bmc-i18n-extract-cli
feishu-docx-mcp
All have the same maintainer. First instance of this specific strain spreading we've seen since May 19th.
Looks like we got a wormy boy in npm package: bmc-translate-utils
npmjs.com/package/bmc-transl…
Mike Wilkes retweeted
the wait is over. part 2 !
xitter.cf/artficialisabel/status…
Mike Wilkes retweeted
‼️ Under attack: unpatched Magento and Adobe Commerce 0-day ("StyleSmuggler") gives unauthenticated attackers remote code execution.
Attacks began on Sept 4th.
All current versions are affected, including 2.4.9.
Aikido has already created patches & detection, more details 👇
Mike Wilkes retweeted
We ran Muse Spark 1.3 on our Cybersecurity benchmark, and it's actually not that good (yet) 😬
- At pass@1, it rediscovers an average of 19/32 CVEs. In comparison, Grok 4.6 scores 23.3/32
- When pooling the results of 3 runs (pass@3), Muse scores 24/32. DeepSeek V4 Pro gets 28/32
- The pricing is good compared to many frontier models, but compared to some of the Chinese ones, its use is hard to justify
- We had a cached input token rate of 45%, much lower than we usually get. The model is new, so we decided to include the results as if we had had 90%
Overall, I would say that @AIatMeta is slowly catching up. The model seems good at coding, but it's definitely not there yet for cybersecurity.
🧵 1/3
We’re ending our partnership with Cursor following its acquisition by SpaceX. Under our proposal, Cursor’s direct access to our models would end on November 12.
We know that the people most affected by this decision are the developers who rely on OpenAI models in Cursor. We care about their experience in this transition and we’re ready to go above and beyond to support them.
openai.com/index/our-decisio…
Mike Wilkes retweeted
Introducing Aikido Android pentests 🚀
The same agents that test your web apps and APIs now work through your APK, log into the app the way a human would, and reason through it alongside the backend it talks to, all in one assessment. 🧵
aikido.dev/blog/aikido-launc…
Mike Wilkes retweeted
OK guys I'm sorry to disappoint but Ox Alpha is overhyped
We ran it on our cybersecurity benchmark, it's better than GPT-5.6-Luna, but worse than every other frontier models
Mike Wilkes retweeted
fire ad from @AikidoSecurity in Union Square – at San Francisco, CA
Mike Wilkes retweeted
We’ve optimized our AI Pentest agents further, achieving a 23% cost reduction.
We’re making that cost saving available to our users. All right-sized pentests are 23% cheaper from today.
Mike Wilkes retweeted
gave my agents a standup channel so they'd coordinate, now they hold a daily standup
this morning one apologized for being "away all weekend"
???
Mike Wilkes retweeted
‼️🚨 BREAKING: Security researchers have uncovered all of those who fell victim to the LiteLLM supply chain attack by obtaining its archive: 153GB holding 433,909 files from 2,488 organisations.
According to Hudson Rock and CloudSEK, victims include Nvidia, AWS, Samsung, Boeing, Intel and more.
This is one of the biggest hits by TeamPCP yet.
The archive contains 118,829 CI/CD runner dumps attributed to corporate domains, with signing secrets and AI provider API keys sitting in plaintext.
If you ran LiteLLM 1.82.7 or 1.82.8, assume every secret in that environment is burned.
Mike Wilkes retweeted
Incident response usually opens with the "Who did this?" question. The recent AIs on the loose this summer kind of broke that question, because the answer might be nobody. @CharlieEriksen's new piece gets into it. 🧵
aikido.dev/blog/autonomous-a…
Mike Wilkes retweeted
🔥 Introducing Aikido Machine, on-prem AI pentesting entirely under your control.
Attackers use AI to find and weaponize vulnerabilities faster and cheaper than ever. Now you can find them first, without your code ever leaving your network.
Aikido Machine is a GPU server that runs continuous pentests on your critical applications, fully within your premises. Built for the regulated industries, and powered by our acquisition of Milou to bring AI pentesting fully on-prem.
Offense is your best defense.























