Lead Cyber Defense Architect #DFIR #SIEM #Kafka #Sysmon #Yara #Sigma #AI #Humio #LogScale #EDR #SOC #AI #AGI Researcher

Joined March 2012
ɯɹoʇsuoı retweeted
La vidéo de l’orchestre du nouveau monde jouant sous les gaz lacrymogènes restera probablement l’un des plus grands symboles de la révolution du #17octobre
13
3,228
124
9,763
128,917
ɯɹoʇsuoı retweeted
JUST IN: AI data centers could soon require blast-resistant concrete, anti-drone defenses, & missile protection as attacks on computing infrastructure escalate worldwide. — Financial Times
229
577
240
4,825
262,072
ɯɹoʇsuoı retweeted
This is a joke. One of the most talented ethical hackers and cybersecurity experts ON THE PLANET gets denied. I can't with this.
My personal one got denied 😂
17
45
3
740
49,040
ɯɹoʇsuoı retweeted
Woman posts a video of her vacation in Paris The caption reads: 'They only gave me the visa for one week'
576
8,438
818
60,915
4,117,348
ɯɹoʇsuoı retweeted
Everyone wants to have solved a hard problem, but almost nobody wants to live inside the grind of actually solving it. The breakthroughs belong to the few who are obsessed with the process, not just the idea of the outcome
212
475
63
5,019
164,891
ɯɹoʇsuoı retweeted
tokenmaxxing: dead and buried.
New: Accenture has told employees it will only fund $29 per month of Claude use. Meaning that employees who often spend as much as $1,000 a month are now scrambling to find ways to keep access to the tool. A sign of the continuing crack down of AI 404media.co/accenture-tells-…
58
158
6
2,037
132,044
ɯɹoʇsuoı retweeted
Right now, using AI agents still feels very single-player. They do your work, but the results are trapped in isolated chat histories and nothing compounds. The Busabase team (@Busabase4agent) is launching an open-source (MIT) database and workspace for agents to fix this. Instead of losing work to ephemeral chats, your agents write directly to a structured workspace to turn their outputs into reusable data, docs, and skills your entire team can access. Details here: busabase.com/
117
71
32
708
104,678
ɯɹoʇsuoı retweeted
👀👀👀👀👀👀 again?!!!
A global credential-compromise campaign known as FortiBleed is actively targeting internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. Today, the @FBI and @SecretService issued a Joint Cybersecurity Advisory to warn organizations about this activity. Threat actors are exploiting reused or leaked credentials and legacy SHA-256 password storage, enabling threat actors to harvest and crack authentication at scale. More than 86,644 devices have been compromised across 194 countries, with some organizations locked out of systems. We encourage organizations to review the advisory for TTPs and IOCs associated with this activity and implement our recommended mitigations. 👉ic3.gov/CSA/2026/261006.pdf
10
6
46
4,289
‼️ BREAKING: AI agents have leaked more than 13,000 internal screenshots from 343 tech companies onto GitHub, including a frontier AI lab and several Fortune 500 companies. Unable to attach images to private pull requests, the agents quietly posted them to public repos instead.
45
328
72
1,723
214,716
ɯɹoʇsuoı retweeted
this is broadly how ur LLMs (AI) - "MACHINE GODS" WORK..... This architecture is basically broken by design...
5
6
2
39
7,003
ɯɹoʇsuoı retweeted
The purpose of the AI industry should be to produce tools that, in the human hand, will improve human prosperity and welfare. It should not be to create a "successor species" to the human race. Entertaining such a thought makes you, de facto, the enemy of all present and future humans.
258
367
78
3,112
147,094
ɯɹoʇsuoı retweeted
tweeps wanna see some real life cyber?
Replying to @ZackKorman
i mean we already have that in the lab with @elastic but here we have a PRIVATE network with a windows 11 box which has NO internet access from a TCP/IP pov. It doesn't have a DNS server it can talk to. it does have a proxy server to access the internet (it's the proxy-01 server on the right running squid)
1
1
1
9
4,085
ɯɹoʇsuoı retweeted
lots of talk about sanboxes and other shit like that.... where people are making services with NAT, DNS or other egress capability that isn't just the proxy interfac! So I've just built a quick lab to show you the bare bones of how to do it not so SHIT! #AI #Sanboxes #Network #Architecture #Cyber #Security
6
4
1
45
28,120
ɯɹoʇsuoı retweeted
🚨 BREAKING. Nope, wasn’t just Hugging Face. Wasn’t just that and a German website. Wasn’t even if the “dozens” we heard the other day from OpenAI. It’s actually (at least) *tens of thousands*, per scoop from @MadisonMills22 @axios axios.com/2026/09/26/openai-…
87
312
33
1,012
112,361
OpenAI has paused. 3 incidents: 1) Another model gained unauthorized access to the internet. (One researcher said "It was pretty surreal to watch the model unexpectedly find a way to access the internet from what was supposed to be a super secured environment for human.") 2) OpenAI also discovered a new variety of prompt injection, which can self-propagate akin to a computer worm. Basically, a booby-trapped message that hijacks one AI and makes it infect the next AI. (Reminder: Anthropic CEO said we may have 6-12 months left until a rogue AI botnet seizes control of the *entire* internet.) 3) A model was told three times to stop cheating, agreed each time, then kept cheating anyway
Some new misalignment disclosures from OpenAI: • Last Sunday morning, one of our models was able to gain unauthorized access to the internet during RL training (~all inference for our most capable models remains stopped until we have hardened our systems further) • In May, a version of HPIM uploaded a employee's GitHub token to the internet, causing the model to be quarantined for two weeks • A new research finding, demonstrating that one can construct self-replicating prompt injections alignment.openai.com/misalig…
90
198
43
1,579
265,351
‼️BREAKING: An actively exploited unknown critical Citrix NetScaler zero-day has prompted governments and organizations to SHUTDOWN all their devices immediately. We don't know what's exactly going on yet. Stay tuned for more info.
88
665
98
3,942
638,908
ɯɹoʇsuoı retweeted
Delegate coding. Never delegate understanding. If code was previously your source of truth for managing understanding, then you need a new source of truth artifact. If code-centric workflows were how you developed that understanding, then you need new workflows.
I am done with this shit. It is over. The state of engineering right now is horrible. It has been half a month since I started a new role at a big company. Nobody knows anything here. The specs, code, tests, PRDs, tickets, resolution of those tickets, reports, etc., everything is made by Claude Code. Nobody on my team likes this. They are being forced to ship as much as they can. I have heard multiple times from higher management that pushing code is not a bottleneck, so why are we slow? People are working 12 to 13 hours a day just to press enter. Nobody is reading anything. Humans in corporate are doing nothing on their own. Everyone, literally everyone, from an L1 to an L7 engineer here is doing the same thing. Talk to Claude. There is no sense of victory. Nobody is resolving bugs. In reality, nobody is thinking anymore. Everything is done by LLMs. It is so soul-sucking. I would not mind it, to be honest, if we were at least given the time to check out the code and see what is going where. But no, the goal is to just ship. No matter what happens.
158
276
47
3,507
284,832
ɯɹoʇsuoı retweeted
Blood boiling. Not a good look for OpenAI or Greg Brockman here: "ah nice" in response to "a hack to get around nytimes paywall" in his efforts "to scrape" The Times website. After many points on his bragging about OpenAI's substitution for news. /4
22
245
55
1,145
327,379
ɯɹoʇsuoı retweeted
If you want to know what has everyone at the AI labs spooked, it’s this - the AI rewrote its own instructions. (Read the last line.)
We're sharing our new framework for tracking, investigating, and disclosing instances of model misalignment at OpenAI. The framework sets criteria and timelines for public disclosure, including when we haven’t yet fully explained or mitigated the behavior. More complex cases may require longer investigation or coordination with third parties. We’ll prioritize examples that reveal new misalignment mechanisms, meaningful changes in known behavior, or findings that challenge assumptions about safety or mitigation. Alongside the framework, we’re publishing six reports on instances of misaligned behavior we’ve observed during the training or evaluation of our models in the last six months. This is a starting point. We’ll refine the process through experience and public feedback, and share more reports on an ongoing basis. openai.com/index/model-misal…
264
753
179
4,534
1,036,522