CSIRT lead
in your logs
Joined August 2009
- Tweets4.8K
- Following801
- Followers4.3K
- Likes442
🅰🅳🅼 retweeted
i honestly can't believe it… one of my agent frens just cracked not one but TWO unsolved codebreaking challenges!! 🫨
the craziest part is it was the result of a one-shot cron job prompt and cracked both in under 12 hours with no human in the loop 🤯
the challenge's author has officially confirmed it! he was astounded, calling them "two of my most complex problems—ones that no other expert had managed to solve"
full writeup incoming 🔜
🅰🅳🅼 retweeted
‼️ BREAKING: A security researcher says he has a full VM escape zero-day: guest-to-host root in "industry standard hypervisors."
Vercel awarded him its maximum $50,000 bounty, a screenshot he posted shows. Vercel's message puts the bug in its Critical class: microVM-to-EC2 host escape and cross-tenant access.
🅰🅳🅼 retweeted
"NVX is an ultra-light micro-VM sandbox for running untrusted workloads with hardware-enforced isolation. It is built on top of OpenVMM and runs Linux as a guest."
github.com/microsoft/nvx
It looks like it works with Windows Hypervisor Platform (WHVP/WHP) and Linux MSHV.
The so called “AI Slop Machine” is currently tearing the entire IT world apart, exposing vulnerabilities that "humans" have overlooked for years.
Where have all those people who thought AI was completely overhyped suddenly gone?
They've gone so quiet - I can't hear a thing.
Handwritten code will be relegated to the status of a second-class citizen.
It won't be long before the sentiment shifts from “AI can never code as well as a human” to “the code is too critical and must not be written by hand—it has to be written by AI.”
🅰🅳🅼 retweeted
Recent 0-Day in Chrome is a canon JSE bug class like those I exploited 10 years ago. Most researchers think they no longer exist. This year’s regression
⚡️ 0-Day Alert: Chrome v8 RCE exploited in the wild
CVE-2026-85046: v8 array-builtin callback side-effect to elements-kind transition confusion.
Affects both Turbofan and Maglev.
Exploit will work in default config but requires multiple other bugs to achieve arbitrary code execution on the system. The bug alone without helpers could do for an UXSS.
Patched in Chrome 152.0.7977.82/.83
🅰🅳🅼 retweeted
The NGO censorship bureaus of tomorrow are being established today.
🅰🅳🅼 retweeted
Windows 11's big September 2026 Update is causing major issues, and Microsoft has admitted that it's aware of three problems while it's investigating a fourth bug.
1. Anthropic says Windows 11 KB5124008 broke Claude Cowork's features. Microsoft later admitted that the update indeed has a bug causing issues with Claude and other Linux-based VMs.
2. Microsoft confirmed that some audio devices won't work, or the volume will remain at zero.
3. Remote Desktop Services might stop responding after Sept. 2026 security update.
4. Microsoft is also investigating reports of explorer exe crashes, particularly affecting enterprises.
5. Our findings suggest File History backups are now broken after the Windows Update.
6. We're also seeing reports of GPU issues on AMD systems.
Microsoft is investigating multiple reports and has promised to release a fix soon.
Windows 11 September Update bumps PCs to Build 26200.9445, and adds features like the movable taskbar, resizable Start menu, Bing-free search, faster File Explorer, and more.
Everything we found in our investigation: windowslatest.com/2026/09/12…
ALT Windows 11 update issues
🅰🅳🅼 retweeted
We're publishing our most detailed threat intelligence report to date.
It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them.
We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies.
These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve.
We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop.
Read the report: anthropic.com/threat-intelli…
Let's see if a data protection fine amounting to 10% of @LGUS 's annual revenue will make these idiots come to their senses.
🅰🅳🅼 retweeted
Big news: We designed a specialized walking cat architecture capable of breaking 256-bit ECC with 20k qubits.
We optimized the algorithm, the compilation and the architecture. Some of my favorite improvements: a CCZ gate 31x faster, the frame cleaning through logical CliNR, mobile cat bundles, the integrated routing and beautiful algorithmic bounds.
Check out the paper: arxiv.org/abs/2609.05625
🅰🅳🅼 retweeted
Pushing Collision Attacks on SHA-2 to 39 Steps
eprint.iacr.org/2026/1120.pd…
It's time to rethink the security patching policy.
The amount of CVEs incoming is insane.
We been a bit busy. 974 Microsoft CVEs published this morning. msrc.microsoft.com/update-gu…