Root Flag (@rootflag) profile picture
127.0.0.1
Joined August 2010
Photo by Root Flag (@rootflag)Photo by Root Flag (@rootflag)Photo by Root Flag (@rootflag)
Root Flag retweeted
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: patchtheplanet.org/brotli
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications. On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments. While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software. After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely. openai.com/index/securing-ou…
562
1,012
500
7,075
2,154,714
Today we are announcing our biggest bet yet on our own silicon. Starting next calendar year, we will scale our Maia family to multi-gigawatt deployments, making it the primary inference system for our own product and services. And we’re introducing Maia 300, which delivers 40% more tokens per watt compared to leading GPU-based systems. We are already deploying Maia 200 across the US, Europe, and Australia, delivering up to 1.7x more tokens per watt across experiences in Teams and Copilot. Our goal is to build on the full-stack efficiency gains we’ve already seen, while continuing to bring the latest innovations from across the ecosystem into our fleet.
802
1,618
614
15,615
2,245,906
Root Flag retweeted
This is the first result from our new molecular biology lab, where a team of Anthropic biologists is using Claude to explore and accelerate fundamental biology research. There, Claude works through data and literature to generate hypotheses and candidate biological systems to study. After our scientists review Claude’s hypotheses, they test the most promising ideas, with all lab work done by our scientists. We’d like to extend this approach to a broad range of problems—in genomics and in other fields. If you have a proposal for a research question, we’d like to hear from you.
194
298
111
4,914
1,067,812
I recently resigned from Google DeepMind, where I worked on AGI safety and alignment research. At Google, I witnessed AI development first hand. I too am extremely concerned by the default trajectory of this technology. I earnestly believe that AI has the potential to kill us all, and that we might be running out of time to avoid this outcome. The pace of AI progress in the past few years has been staggering. When I first started working on AI in early 2022, AIs were amusingly useless. Just four years on, AI agent swarms from OpenAI are cracking famous century-old math problems and, more worryingly, escaping the control of OpenAI and autonomously hacking into the third-party company HuggingFace, against anyone's wishes. Things will only get crazier: I think it's possible that the AI companies might, in the next few years, succeed in building superintelligent AI systems that far exceed human capabilities in every domain. I am not confident that these AI systems will do what we want. In particular, misaligned superintelligences may, much like the rogue AI agents involved in the HuggingFace incident, escape our control and take dangerous actions that may result in the permanent disempowerment or death of humanity. Alignment is the problem of preventing this, and is both difficult and unsolved. Our present understanding of how to train AI systems that deeply want what we want is extremely rudimentary. Worse, we are not on track to solve alignment in time: frontier AI capabilities are improving much faster than our understanding of AI alignment. I am optimistic that navigating AI safely is possible. In order to do so, we need to coordinate to avoid this manic race between AI companies. We need to pace AI development to a speed that society can handle, where emerging risks can be addressed before extreme harm is realised. We need much more transparency into AI development to ensure that AI companies are not imposing unacceptable levels of risk on us all. More broadly, we need many more people thinking carefully about the problem of making AI go well. It is, in my view, the most important problem facing humanity this century, and the stakes are immense. I'm very directly working on this next: I want to help people interested in working on mitigating catastrophic AI threats do the most effective work that they can. I think many people from many backgrounds in many roles have a part to play.
724
1,108
299
6,065
879,450
Root Flag retweeted
huh Apple A20 Pro Geekbench 6 numbers 🫠 browser.geekbench.com/v6/cpu…
32
30
49
703
833,507
Root Flag retweeted
Everyday conversations just got easier with the new Apple Messages plugin. Search messages, catch up on conversations, draft and send replies—all with ChatGPT on your Mac. Now available in ChatGPT Work and Codex on desktop.
570
426
782
7,846
7,234,735
We've open-sourced Grok Build and have reset usage limits for all users. Open sourcing Grok Build allows anyone to support making a reliable and robust harness. Check out our code, including the Git repo for the Grok Build CLI. x.ai/open-source
938
2,209
1,091
16,164
8,620,096
Root Flag retweeted
Once we have completed our review for security vulnerabilities, we will make the entire codebase of 𝕏 open source, with no exceptions. Moreover, we will invite third party reviewers to examine the system that is running to confirm that the open source code is what is running. Trust through total transparency is the only thing that should be believed.
5,769
11,742
2,347
108,346
7,356,426
‼️ BREAKING: Anthropic has embedded hidden spyware-like code in Claude Code that covertly targets Chinese users. It then sends information regarding every user by injecting it into their prompt message. Claude Code is sending info like timezone, proxy and possible AI Lab connections into the system prompt in ways Chinese users can't notice. A coding agent with repo and command permissions should not silently hide routing metadata inside prompts. This is a serious breach of user trust.
840
2,627
861
17,249
5,468,207
iOS 27 framework references “foldState” and “angleDegrees” but I’m sure that’s nothing
42
204
47
5,238
251,758
▌The latest supply chain checks indicate that Sunny Optical is seeing several new positive trends: 1. Leveraging its existing optical technology strengths, the company is preparing to enter AI server CPO / silicon photonics coupling components. 2. Securing orders for optical components in OpenAI's devices. 3. Two positive Apple order trends: 1) becoming a new Apple CCM supplier, with iPhone CCM orders expected in 2028; 2) winning the high-ASP variable aperture lens for the 2H26 new iPhones, with a order share approaching 50%. ▌Preparing to enter AI server CPO / silicon photonics coupling components: 1. Has already planned and is preparing to ship samples of CPO / silicon photonics coupling components, including collimating lenses, microlens arrays, and optical path redirection elements (micro-prisms, metalenses, etc.). 2. The company has decided to actively pursue its AI server business through strategic investments and M&A. ▌OpenAI device optical components order: Sunny has secured NPI projects for optical components used in OpenAI’s smartphone and another pocket / mobile device. ▌Positive Apple order trends: 1. Sunny has become a new Apple CCM supplier, producing the MacBook Neo CCM. MacBook Neo shipments have come in better than expected, with the 2026 shipment forecast raised from 5 million to 10 million units. 2. The 2028 iPhone's ultra-wide CCM is expected to drop flip-chip in favor of an improved COB version, and Sunny Optical is well positioned to become a supplier. 3. For the 2H26 new iPhone 18 Pro/Pro Max, the variable aperture lens carries a 50% higher ASP (vs. the high-end 7P lens), with Sunny's supply share reaching 40–50%.
43
42
12
351
232,742
Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.
241
1,253
310
8,444
1,590,587
Waterfox becomes the latest browser to embed Brave’s adblock-rust engine. Validation++ for Brave’s thesis that ad & tracker blocking belongs within the browser (not bolted on top) for better control, better blocking and better performance.
6
11
156
15,896
Root Flag retweeted
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: vercel.com/kb/bulletin/verce…
679
2,304
1,925
8,606
10,668,688
Root Flag retweeted
The upgraded Google app for desktop is now available for Windows users globally in English. 💻✨ Use a simple keyboard shortcut (Alt + Space) to instantly find what you need—information from the web, your computer files, installed apps, and Google Drive files—all from the Search box. With AI Mode in Search and Lens built right in, you can ask whatever’s on your mind or search what’s on your screen to get helpful AI-powered responses with links to the web.
31
46
18
706
114,471
Mr. Titus Tech is correct. cpuid-dot-com is indeed delivering malware right now. As I began poking this with I stick I discovered this is not your typical run-of-the-mill malware. This malware is deeply trojanized, distributes from a compromised domain (cpuid-dot-com), performs file masquerading, is multi-staged, operates (almost) entirely in-memory, and uses some interesting methods to evade EDRs and/or AVs such as proxying NTDLL functionality from a .NET assembly. The C2 domain present in one of the binaries is a clear IoC. This is the same Threat Group who was masquerading FileZilla in early March, 2026. They've been busy.
HWInfo and CPU-Z both compromised. Millions about to be PWNED! CPU Z: hybrid-analysis.com/sample/e… HW Monitor: hybrid-analysis.com/sample/4…
Readers added context they thought people might want to know
The post mentions HWInfo, but the link is for HWMonitor. These are different tools from different developers. HWInfo is unaffected. CPU-Z and HWMonitor from cpuid.com are compromised with malware. igorslab.de/en/warning-cpu… reddit.com/r/pcmasterrace… hwinfo.com/forum/threads/…
115
894
96
7,579
1,647,567
HWInfo and CPU-Z both compromised. Millions about to be PWNED! CPU Z: hybrid-analysis.com/sample/e… HW Monitor: hybrid-analysis.com/sample/4…
Readers added context they thought people might want to know
The post mentions HWInfo, but the link is for HWMonitor. These are different tools from different developers. HWInfo is unaffected. CPU-Z and HWMonitor from cpuid.com are compromised with malware. igorslab.de/en/warning-cpu… reddit.com/r/pcmasterrace… hwinfo.com/forum/threads/…
79
255
46
1,988
1,050,840
Root Flag retweeted
Dear security community/researchers, I'd really like to call to look at this xitter.cf/greglesnewich/status/2…, this information shows that the threat actors behind this Adobe Reader 0day attack was not just collecting local information but was really delivering additional exploits, need more analysis to figure out what the exploit really is. I'm one person and not have enough time to working on all the things.. Another earlier sample found today (virustotal.com/gui/file/5407…), which appeared on VT on 2025-11-28, shows that this APT campaign has been ongoing for at least 5 months, showing how serious this threat is. #pdf #zeroday #0day #threatintel #apt
Also, the original sample you found has a PCAP on VT that gets a cipher text payload but not the key :( Uploaded traffic here: gist.github.com/g-les/05f6ed…
5
35
6
131
95,009
Root Flag retweeted
Gemma 4 can run on phones without an internet connection! 🤯 It can perform local agentic tasks, such as logging and analyzing trends. When connected, it can also make API calls. Want to try it yourself? Get the Google AI Edge App on iOS or Android. (🔊 Sound on for the demo!)
312
982
186
8,523
761,146