
Security Vulnerability Coach, responsible for @x41sec and @persistent_psi Tweets here are my own.
Right here
Joined January 2009
- Tweets8.3K
- Following609
- Followers3.4K
- Likes8.7K
Markus Vervier retweeted
Loved catching up with old friends and making new ones at @_c0c0n_ 2026!
Getting such a warm welcome from Kerala Police was a highlight, along with @marver's training session.
Big thanks to the organizers, volunteers and speakers for a great event 👋
#c0c0n2026 #cybersecurity
Markus Vervier retweeted
Qwen3-0.6B running happily in a bare metal Go TamaGo microVM and writing a haiku about it.
This is on pure CPU with GOEXPERIMENT=simd on.
Qwen3.8-27B also runs (slower) if you have enough RAM.
I just need a bare metal Go GPU driver now...
Markus Vervier retweeted
🎉
PDF direct link here archives.phrack.org/dl/73/th…
Zip's (team-teso) long lost ssh1-crc32 exploit was found (xt 😘), (PLUS hellkit, 7350statd, 7350qpopper, icmp-tunnel, shellcode, lkm-work, and much more).
🚰 LEAKING phrack 73 article NOW (@phrack ):
github.com/hackerschoice/tea…
🤘🤘🤘
Markus Vervier retweeted
One more Phrack 73 leak for you!
Blueboxing Myths and Feelings: a nostalgic dive into phone phreaking’s golden age.
archives.phrack.org/dl/73/bl…
by @hackerschoice and @GammaTHC
Markus Vervier retweeted
Signal security, theory vs reality:
you've got PQ-e2ee and forward secrecy and post-compromise security and secure contact discovery and key transparency and PIN protection etc. and you use a fully patched burner phone so you feel so secure and confident when you send that message in the wrong convo and only notice it hours later—not even kidding, much greater a risk than post-compromise etc., should have a local classifier that tells you "are you sure?" when a dissonance is found
Markus Vervier retweeted
The TL;DR of what Anthropic just said:
1.) GLM-5.3 is as good as Mythos for exploit development.
2.) Unlike Claude, GLM-5.3 gives you the results you pay for.
3.) Governments should ban AI models which are as good as theirs but are not made by them.
The funniest part is how Anthropic admitted self-reflectively that the lack of guardrails may actually be benefiting the defenders working to secure their systems. 🤪
Something they never wanted to allow, because of possible misuse.
I don't get it, but I feel Anthropic should at least put a note at the very bottom if they are doing paid advertising to promote GLM-5.3. 😜
Source:
anthropic.com/research/glm-5…
Markus Vervier retweeted
Your weekend reading assignment has arrived early.
A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko.
archives.phrack.org/dl/73/th…
Markus Vervier retweeted
🔥THE ENERGY IS STILL HIGH!
@marver took the stage with:“The Singularity Doesn’t Care About Leaking Your Data: From Prompt Injection to Posthuman Recon-A Field Report on Attacking AI in 2026.”🤖A fascinating deep dive into attacking AI & the perfect pairing with beers & red wine!
Markus Vervier retweeted
🧐If you’ve been holding off an AI-driven security testing because of strict compliance, we get it!
🥳Introducing Nemesis’s On-Prem Local AI, you can run continuous attack simulations powered by a custom model hosted entirely on your systems.
#LocalAI #EUSecurity #ThreatToTest
Markus Vervier retweeted
Astra made me a sonar app that emits undetectable audio to scroll up/down on your computer.
It uses the doppler effect to determine where your hand placement is. You can even double tap in the air to change scroll directions!
We want to celebrate with people using GPT-6. We did this for GPT-5.5 and it was really fun.
We’re getting together in SF on September 16 to talk about the model, what we should build next, and mostly just to hang out.
Apply by Sep 10:
gpt6-launch-event.openai.cha…
Markus Vervier retweeted
Markus Vervier retweeted
I'm really close to having a break through on a math problem. I just need the people whose logs I'm stealing to just get a little closer.
Markus Vervier retweeted
The History of Ultima VII, One Of The Greatest RPGs Ever Made kotaku.com/the-history-of-ul… via @Kotaku
Markus Vervier retweeted
Berlin's breach proves defenses need #continuousvalidation. Know controls work before hackers test them!
#Nemesis turns your threat profile into practical on-prem assessments; executing #MITRE ATT&CK techniques to map attack paths & convert missed TTPs to Sigma rules.
#Rhysida
Markus Vervier retweeted
Private Phrack 73 pre-release party in London. En-route and just passing by MI6. WHO DID THIS????
Markus Vervier retweeted
Google researcher @lauriewired warns the shift from C++ to Python in universities is creating programmers who don't understand how computers actually work:
"When I was in college getting my CS degree, my year was one of the last years that was using C++ as the core language for teaching students. Actually they were switching over to Python of all languages."
"One of the biggest issues that I have is that a lot of these higher level languages are really abstracting away what is happening under the hood. If you're not aware of how the computers work in general, then you're gonna have problems when it comes to debugging."
"Starting with a language like C++ gives you the ability to do these really high level abstractions, but it also gives you the ability to customize your memory management and get really close to the underlying machine. Especially if you're trying to work in high performance computing, game development, or high frequency trading."
"At C++ conferences, there's almost this fundamental anger response when it comes to mentioning something like C or C++. People start complaining about the complexity of it."
@Google
Markus Vervier retweeted
We’re hiring an AI Engineer for R&D at Persistent Security! We’ve got a fantastic team here and some really interesting work ahead of us.
Tag someone who should apply, or comment interested to get the conversation started! 📩
#hiring #AIEngineer #AIpentesting #AIsecurity
Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud.
V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything.
Two separate critical bugs: arbitrary read and RCE.
Here's how. 🧵
Markus Vervier retweeted
September is looking exciting!
We’re stepping away from our desks to catch up with the #securitycommunity, talk more about detection engineering & breach simulation, and meet in person.
Heading to any of these events? DM us; always up for a coffee ☕
#infosec #cybersecurity































