Pinned Tweet
Replying to @security_sesha
Shesha retweeted
What a rollercoaster. 7 weeks, 5 RCEs on Pixel 10 & 11, all officially patched by Google today. Chuffed to bits. The bounty won’t have us popping champagne, but popping Chrome? That we can do all day. The real payout was always the patch. Demo 👇
Shesha retweeted
CryptSn0w is now open source!
An obsolete untethered #jailbreak for iOS27 and devices up to A20 Pro, exploiting a rare Apple server-side TSS/Cryptex bug. 🔥
Open-sourced CryptSn0w, our now obsolete untethered iOS ≤27/≤A20 Pro jailbreak via rare Apple server-side TSS/Cryptex bug. PATCHED, educational only. NOT a working jb
Built w @GenericCoding @D4RK7ET. SBInject: @htrowii. Help: @Jakeashacks @forcequitOS
github.com/0xjohnnydev/crypt…
Shesha retweeted
We at @ai4bharat, with @NVIDIA, are releasing open data and evals to build frontier LLMs for all 22 Indian languages.
- 2.8T tokens of synthetic Indic pretraining data
- Audited, native-speaker-verified benchmarks
- Open recipes
📖 Tech Report: tinyurl.com/4rpt383x
(1/6)
We’re publishing a full Android kernel exploit chain built on CVE-2023-20938, a use-after-free in Binder, on a Pixel 6 running Android 12.
🔗 eshard.com/blog/kernel-uaf-1…
Shesha retweeted
The best practitioner (not lab) AI evals for offensive cybersecurity I follow myself:
1) The @dreadnode dreadindex. Evals al the way down to the vuln category level, and refusals accounting
dreadnode.io/research/dreadi…
2) @AikidoSecurity white-box but i've confirmed that it extends to dynamic testing well
aikido.dev/aikido-arena
3) BArena by @mdp_sec focused on bounty-like black box bugs.
blackboxarena.ai/
4) @mindfort 's nexbench has info downto the config of a model including thinking or effort setting, and cost per finding, which many omit.
mindfort.ai/blog/introducing…
Shesha retweeted
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris.
Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
Gemini 4 Argon has arrived! The era of super intelligence in cyber security has begun, excited to share more on how we use it to secure the world - and we are just getting started 🌎
youtu.be/ftkic7Tdpcg?si=3QxA…
deepmind.google/blog/introdu…
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors.
CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
Shesha retweeted
Pure sorcery | vercel.com/blog/findings-fro… @PaulosYibelo
Shesha retweeted
New Google VRP writeup "Hacking Google with A.I. for $500,000" for a bounty of $500,000 by @brutecat:
brutecat.com/articles/hackin…
Shesha retweeted
The OAIC keynote video is live!
Thank you to David Brumley for an excellent keynote, “AI Exploitation, Quantified,” and for giving us plenty to think about as frontier labs push AI’s cyber capabilities forward.
Watch here: youtu.be/HY4_9o2xPvk
I got $90,000 for a RCE in Google.
simonkoeck.com/writeups/goog…
AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples becomingahacker.org/ai-agent…
AI Just Crossed the Terrifying Line - Now What?
youtube.com/watch?v=ujkD4SxP…
Shesha retweeted
As an AI Engineer. Please learn:
> Harness engineering, not just prompt engineering
> Context engineering, not just long prompts
> Prompt caching vs. semantic caching tradeoffs
> KV cache management, eviction, reuse, and memory pressure at scale
> Prefill vs. decode latency and why they optimize differently
> Continuous batching, paged attention, and throughput optimization
> Speculative decoding vs. quantization vs. distillation tradeoffs
> INT8, INT4, FP8, AWQ, GPTQ, and when quantization hurts quality
> Structured output failures, schema validation, repair loops, and fallback chains
> Function calling reliability, tool contracts, argument validation, and idempotency
> Agent guardrails, loop budgets, tool budgets, and termination conditions
> Model routing, graceful fallback logic, and degraded-mode UX
> RAG architecture: chunking, embeddings, hybrid search, reranking, and freshness
> Retrieval evals: recall, precision, grounding, attribution, and citation quality
> Evals: golden sets, regression tests, adversarial tests, LLM-as-judge, and human evals
> LLM observability as a first-class discipline: traces, spans, tokens, latency, errors, and drift
> Cost attribution per feature, workflow, tenant, and user journey, not just per model
> Safety engineering: prompt injection defense, data leakage prevention, and permission boundaries
> Multi-tenant isolation, cache safety, and cross-user context contamination prevention
> Fine-tuning vs. in-context learning vs. RAG vs. distillation, and when each is the wrong tool
> Latency, quality, cost, and reliability tradeoffs across the full inference stack
> Production failure modes: hallucinated tool calls, malformed JSON, stale retrieval, runaway agents, and silent eval regressions
> Shipping LLM systems as reliable infrastructure, not demos wrapped around prompts
aiengineeringfromscratch.com





























