Cyber Security & AI Enthusiast. Ethical Hacker. CPO @ Darktrace. Thoughts are my own. (he / him)

Joined December 2013
Max Heinemeyer retweeted
RE: APEX / ALGS / EAC Remote Code Execution 👋 I wrote undectable cheats for online games for challenge and sport for many, many years. I know enough to know that no one has the answers, but I'd like to call out some things you may have glazed over, and put them in context. 🧵
8
58
5
367
111,383
Lots of LinkedIn poasting about this paper today but the real meat of it is right here xitter.cf/seanhn/status/17580122…
Replying to @emollick @daveaitel
They found one XSS in 50 websites, and by their own reporting it’s not even security relevant.
1
2
4
1,277
Max Heinemeyer retweeted
The famed Stanford Smallville is officially open-source! 25 AI agents inhabit a digital Westworld, unaware that they are living in a simulation. They go to work, gossip, organize socials, make new friends, and even fall in love. Each has unique personality and backstory. Smallville is among the most inspiring AI agent experiments in 2023. We often talk about a single LLM's emergent abilities, but multi-agent emergence could be way more complex and fascinating at scale. A population of AI can play out the evolution of an entire civilization. Endless new possibilities ahead. Gaming will be the first to feel the impact. Github: github.com/joonspk-research/… Paper: arxiv.org/abs/2304.03442 Authors: @joon_s_pk @joseph_c_obrien @carriejcai @merrierm @percyliang @msbernst
270
2,175
514
9,420
4,027,332
Max Heinemeyer retweeted
An interesting discussion in the #AutoGPT Discord on red-teaming the AGI we are playing with. github.com/Torantulino/Auto-…
1
704
Watch out: today we will publish the #VulkanFiles - an international investigation into Russia's cyberwarfare. Stay tuned. @derspiegel @paper_trail_m @ZDFfrontal @derStandardat @tagesanzeiger @SZ @lemondefr @istories_media @DRNyheder @washingtonpost @guardian
12
3
45
16,941
Max Heinemeyer retweeted
Do you often use ChatGPT for cybersecurity? If so, what do you use it for? Be it for writing queries, scripts, etc. I've spent just a couple of minutes so far and couldn't find a use case for myself and probably I'm missing something or just dumb.
15
2
14
5,371
i trained an ai chatbot on my childhood journal entries - so that i could engage in real-time dialogue with my "inner child" some reflections below:
553
6,193
2,441
44,901
This will be a thread discussing a real world breach involving a drone delivered exploit system that occurred this summer Some details I am not able to discuss, however for the blue teams & red teams out there I hope this provides a good measure of capability. 🧵🚁 🎮🖥️🦠
44
742
241
2,073
Max Heinemeyer retweeted
Cyberattacks involving data manipulation could pose an even more severe threat than data theft or ransomware (at least in some cases). But they're not top of mind for most businesses protocol.com/enterprise/data…
6
2
12
Max Heinemeyer retweeted
OpenAI
@OpenAI23 Jun 2022
We trained a neural network to competently play Minecraft by pre-training on a large unlabeled video dataset of human Minecraft play and a small amount of labeled contractor data. openai.com/blog/vpt/
145
1,139
281
5,390
Even assuming this is Chinese state security domestic activity (direct evidence here is weak, but it would make a ton of sense given agency infrastructure access), this should be a reminder CN/RU/etc. APTs know the value of network-layer attacks: securelist.com/windealer-dea… 🔥🔥🔥
2
26
2
77
Max Heinemeyer retweeted
We are excited to announce that Cybersprint is acquired by @Darktrace. Our Attack Surface Management solution will enrich Darktrace's Detect & Respond products. We're looking forward to this fantastic step in Cybersprint's journey! Read the press release. hubs.li/Q014J_Ky0
8
6
2
21
Why you should never ever ever use pixelation as a redaction technique 🙈 github.com/bishopfox/unredac… #infosec #cybersecurity #dataprivacy
9
402
32
1,085
The hits just keep on coming. On Friday, China's cyberspace watchdog (CAC) released draft rules governing "deep synthesis tech" - deepfakes and other machine-generated or -edited text, voice, video, and 3D spaces. Paraphrasing the key points below. 1/18 cac.gov.cn/2022-01/28/c_1644…
6
122
47
308
Das Bundesamt für Verfassungsschutz warnt vor einer #Cyberangriffskampagne gegen deutsche Wirtschaftsunternehmen durch die Gruppierung #APT27. Nähere Informationen und Handlungsempfehlungen finden Sie im aktuellen Cyberbrief: verfassungsschutz.de/SharedD…
17
25
6
45
We thought it was time for a 🧵with a round-up of posts on the #TheAlert hosted by @Offensive_Cyber over the past four months! We've had amazing content from @TheCollierJam, @egflo, @jamessshires, @z_edian, @shelldaemon, @drbvaler, & @LenMaschmeyer! offensivecyber.org/the-alert… 1/8
1
2
2
13
Max Heinemeyer retweeted
vx-underground
@vxunderground24 Jan 2022
Belarusian Railway infrastructure has been hit by ransomware. It's been reported servers, databases, and workstations have been impacted to delay deployment of Russian troops. The individual(s) is demanding the release of 50 political prisoners Intel via @SttyK & @franakviacorka
19
354
82
788
Max Heinemeyer retweeted
🧵In May of 2021, we published our manifesto on a new methodology called Attack Path Management - posts.specterops.io/the-atta…. Enough time has passed now that we are starting to see the outcomes of this methodology, which I'd like to talk to you about:
1
38
2
90
Max Heinemeyer retweeted
wow. using ML to generate images from text... is about to get a whole lot weirder thanks to the latest @openai research 😳 arxiv.org/abs/2112.10741
62
668
203
2,929