Security Vulnerability Coach, responsible for @x41sec and @persistent_psi Tweets here are my own.

Right here
Joined January 2009
Loved catching up with old friends and making new ones at @_c0c0n_ 2026! Getting such a warm welcome from Kerala Police was a highlight, along with @marver's training session. Big thanks to the organizers, volunteers and speakers for a great event 👋 #c0c0n2026 #cybersecurity
1
3
130
Markus Vervier retweeted
Qwen3-0.6B running happily in a bare metal Go TamaGo microVM and writing a haiku about it. This is on pure CPU with GOEXPERIMENT=simd on. Qwen3.8-27B also runs (slower) if you have enough RAM. I just need a bare metal Go GPU driver now...
3
6
416
Markus Vervier retweeted
🎉 PDF direct link here archives.phrack.org/dl/73/th…
Zip's (team-teso) long lost ssh1-crc32 exploit was found (xt 😘), (PLUS hellkit, 7350statd, 7350qpopper, icmp-tunnel, shellcode, lkm-work, and much more). 🚰 LEAKING phrack 73 article NOW (@phrack ): github.com/hackerschoice/tea… 🤘🤘🤘
13
1
52
3,671
Markus Vervier retweeted
One more Phrack 73 leak for you! Blueboxing Myths and Feelings: a nostalgic dive into phone phreaking’s golden age. archives.phrack.org/dl/73/bl… by @hackerschoice and @GammaTHC
2
36
1
141
7,122
Markus Vervier retweeted
Signal security, theory vs reality: you've got PQ-e2ee and forward secrecy and post-compromise security and secure contact discovery and key transparency and PIN protection etc. and you use a fully patched burner phone so you feel so secure and confident when you send that message in the wrong convo and only notice it hours later—not even kidding, much greater a risk than post-compromise etc., should have a local classifier that tells you "are you sure?" when a dissonance is found
6
7
41
3,703
Markus Vervier retweeted
The TL;DR of what Anthropic just said: 1.) GLM-5.3 is as good as Mythos for exploit development. 2.) Unlike Claude, GLM-5.3 gives you the results you pay for. 3.) Governments should ban AI models which are as good as theirs but are not made by them. The funniest part is how Anthropic admitted self-reflectively that the lack of guardrails may actually be benefiting the defenders working to secure their systems. 🤪 Something they never wanted to allow, because of possible misuse. I don't get it, but I feel Anthropic should at least put a note at the very bottom if they are doing paid advertising to promote GLM-5.3. 😜 Source: anthropic.com/research/glm-5…
37
172
12
1,397
56,032
Markus Vervier retweeted
Your weekend reading assignment has arrived early. A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko. archives.phrack.org/dl/73/th…
2
56
3
162
31,269
🔥THE ENERGY IS STILL HIGH! @marver took the stage with:“The Singularity Doesn’t Care About Leaking Your Data: From Prompt Injection to Posthuman Recon-A Field Report on Attacking AI in 2026.”🤖A fascinating deep dive into attacking AI & the perfect pairing with beers & red wine!
1
1
4
902
🧐If you’ve been holding off an AI-driven security testing because of strict compliance, we get it! 🥳Introducing Nemesis’s On-Prem Local AI, you can run continuous attack simulations powered by a custom model hosted entirely on your systems. #LocalAI #EUSecurity #ThreatToTest
1
1
1
91
Markus Vervier retweeted
Astra made me a sonar app that emits undetectable audio to scroll up/down on your computer. It uses the doppler effect to determine where your hand placement is. You can even double tap in the air to change scroll directions!
We want to celebrate with people using GPT-6. We did this for GPT-5.5 and it was really fun. We’re getting together in SF on September 16 to talk about the model, what we should build next, and mostly just to hang out. Apply by Sep 10: gpt6-launch-event.openai.cha…
229
548
173
9,115
1,157,755
Markus Vervier retweeted
Wrote a post on fileless ELF execution via O_TMPFILE + execveat(AT_EMPTY_PATH). No memfd_create, no named file, no dentry ever created. Process shows up as /tmp/#220 (deleted) in telemetry. Works since kernel 3.19. matheuzsecurity.github.io/ha… #linux #redteam #edr #fileless #kernel
2
44
1
142
10,066
Markus Vervier retweeted
I'm really close to having a break through on a math problem. I just need the people whose logs I'm stealing to just get a little closer.
6
436
3
9,669
58,447
Berlin's breach proves defenses need #continuousvalidation. Know controls work before hackers test them! #Nemesis turns your threat profile into practical on-prem assessments; executing #MITRE ATT&CK techniques to map attack paths & convert missed TTPs to Sigma rules. #Rhysida
2
2
103
Markus Vervier retweeted
Sneak peek 👀 👀 👀 👀 Coming soon from your friends at Phrack!
4
42
2
213
7,732
Markus Vervier retweeted
Private Phrack 73 pre-release party in London. En-route and just passing by MI6. WHO DID THIS????
1
20
2
132
13,161
Markus Vervier retweeted
MTS
@MTSliveAug 31
Google researcher @lauriewired warns the shift from C++ to Python in universities is creating programmers who don't understand how computers actually work: "When I was in college getting my CS degree, my year was one of the last years that was using C++ as the core language for teaching students. Actually they were switching over to Python of all languages." "One of the biggest issues that I have is that a lot of these higher level languages are really abstracting away what is happening under the hood. If you're not aware of how the computers work in general, then you're gonna have problems when it comes to debugging." "Starting with a language like C++ gives you the ability to do these really high level abstractions, but it also gives you the ability to customize your memory management and get really close to the underlying machine. Especially if you're trying to work in high performance computing, game development, or high frequency trading." "At C++ conferences, there's almost this fundamental anger response when it comes to mentioning something like C or C++. People start complaining about the complexity of it." @Google
288
460
264
5,185
1,890,996
We’re hiring an AI Engineer for R&D at Persistent Security! We’ve got a fantastic team here and some really interesting work ahead of us. Tag someone who should apply, or comment interested to get the conversation started! 📩 #hiring #AIEngineer #AIpentesting #AIsecurity
2
2
5
194
Markus Vervier retweeted
Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵
17
152
41
733
140,164
September is looking exciting! We’re stepping away from our desks to catch up with the #securitycommunity, talk more about detection engineering & breach simulation, and meet in person. Heading to any of these events? DM us; always up for a coffee ☕ #infosec #cybersecurity
1
2
111