• Irish/Japanese web/AI hacker from Cork, living in Scotland • Founder @StarstrikeAI • BT6 Operator • Newsletter @ https://xitter.cf/t.co/fZXECNnM41
Edinburgh, Scotland
Joined March 2021
- Tweets1.6K
- Following627
- Followers5.7K
- Likes7.3K
Ciarán Cotter retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
Ciarán Cotter retweeted
I accidentally got addicted to my own game ffs
kosmora.io
Ciarán Cotter retweeted
“Security researchers are doomed because of AI.”
I kept hearing versions of this, so I went back through 500 years of people saying the same thing every time a machine learned a human skill.
Some were idiots.
Some were right.
Here’s where I landed.
Ciarán Cotter retweeted
after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room
blog.teknogeek.io/posts/what…
Ciarán Cotter retweeted
OKAY YALL! LAUNCH TWO! 🚀 rez0srascals.com
I built an entire elearning platform... from scratch. 750+ lessons. 11 subjects. an AI tutor. a full AI dashboard for the parents. It can be used for home school, summer school, or just supplementally. 14 days free so go look!
ALRIGHT, LAUNCH ONE!🚀 aisafetyforparents.com
As a father of 3 kids who works in AI and Security, I'm always getting tons of questions about AI from other parents. So, I put all the answers in one place.
It's a simple 10 day email-based course that "bottles up" everything you need to know about AI safety as a parent. I think you'll love it 😊 For the next 24 hours, you can use code LAUNCH to get 25% off as well! It would mean a lot to me if you shared this with someone you know who might need it or like it!
Ciarán Cotter retweeted
Live hacking vlogs are dead.
Or are they?
It’s been years since I did a vlog and I have to admit that perfectionism was the reason why I stopped making them. But a couple of months back I had the chance to go to a google lhe in Seoul and brought my xe5 on for the ride. I was exited to capture frames and friends, but I messed some settings up so the video content was to shaky and audio was shit.. this stopped me from editing it and releasing it, since I though it had to be perfect to be up to my own standards, which are quite high tbh.
So this time in testing out something new, I’m going to simply accept audio issues, shaky camera moves and inconsistency in the color grades, since that’s also what brings authenticity in today’s perfectly polished world. Creators gonna create.
So Enjoy the first 1 minute, we got 15 more on YouTube in a few days.
Ft insights from @busf4ctor @Rhynorater @monkehack @rez0__ and more
Ciarán Cotter retweeted
Me and my @ethiack hacking team spent the last 2 days at the Dublin Hacker Meetup - Google Unofficial event! 🚀
Shoutout to the squad: @castilho101 @aretekzs @_4v1at0r
It was awesome connecting with everyone and diving deep into the world of Google infrastructure.
Special thanks to @monkehack 🤝 and to @Workday and the @ctbbpodcast for supporting the event!
Ciarán Cotter retweeted
Stop blaming AI slop for what bug bounty platforms did to themselves.
👇 wrote down some thoughts about the state of triage
clawd.it/posts/14-to-kara-al…
Ciarán Cotter retweeted
We're finally ready to talk about Flipper One — a project we've been grinding on for years and have rebuilt from scratch several times. Read blog post >>
blog.flipper.net/flipper-one…
Ciarán Cotter retweeted
wtf. the tanstack attack just went live.
we flagged this exact chain 25 days ago. april 16. All Depi clients were alerted.
if you're using @tan_stack check your manifest files right now 1.166.12, 1.166.15, 1.169.5, 1.169.8 are malicious. clean your cache. rebuild.
Ciarán Cotter retweeted
He made the windows hug and now the LLM no longer bullies him by rolling to refuse to cooperate when triage tries to reproduce the bug. Thanks doc. Healing the world one iframe at a time. Research Review. youtu.be/2ZvHGtZuWPU
This time we have a guest blog from @xssdoctor, showcasing a new technique in AI hacking to achieve more consistent exploitation. This was initially a research collision, but XSSDoctor masterfully exploited this in the wild.
Link below 👇
Ciarán Cotter retweeted
We hope you enjoyed @xssdoctor's research - but we're not done yet! More research coming this Friday. It'll be a much shorter article, describing another new technique we used while we were hacking Gemini. Coming soon ⏳#AISecurity
Ciarán Cotter retweeted
Today I discovered that scammers are poisoning Google AI Overviews to display malicious data.
While searching for an airline support phone number, the AI-generated result surfaced a scam number operated by fraudsters.
Don't be lazy and double check the results 🫡
Ciarán Cotter retweeted
It's finally out there! We’ve been planning this for a while, and honestly, it’s just the start.
Keep an eye out for the blog posts we’re dropping soon because they’re basically a playbook on how to make a killing on AI targets in bug bounty.
Today, we (@busf4ctor and @monkehack), are launching Starstrike: an AI pentesting and research startup. We'll be releasing our first few research articles over the next few weeks, detailing several bugs that helped us net over $100k in total. Follow to ensure you don't miss them!
Ciarán Cotter retweeted
🚀New plugin in the Caido Store!
Introducing "SLCyber Tools"
Scan for SSRF targets using curated security wordlists from slcyber.io/
Check out more details: github.com/caido-community/s…
Ciarán Cotter retweeted
I'm looking for a new role in web application penetration testing. I've spent the last three years in offensive security, with bug bounties on the side and speaking at conferences. Last year, I spoke at DEF CON on enterprise integration servers and spoke at GRR CON and BSides. I've got talks coming up at CactusCon, BSides Seattle, and CypherCon on postMessage attacks. Remote preferred. If you're hiring or know someone who is, shoot me a message.