Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Hong Kong
Joined December 2014
- Tweets37.6K
- Following415
- Followers32.1K
- Likes33.8K
Pinned Tweet
In case you missed it:
Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.
Vincent Yiu retweeted
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.
Vincent Yiu retweeted
I thought the first rule of EDR Reversing Club was you don’t talk about EDR Reversing Club.
xitter.cf/OffensiveAIcon/status/…
Your EDR Has Boundary Issues.
@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.
Watch their Offensive AI Con talk below. 👇
youtube.com/watch?v=GNDMDI_p…
#OAIC #OffensiveAI #Cybersecurity #EDR
Vincent Yiu retweeted
Fuzzing became a lot more efficient 😏 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool: github.com/assetnote/h3fuzzR…
Writeup: slcyber.io/research/how-prac…
Now the green goblin is here 😂😂😂
Song Xingyu, a self-taught Gen Z vlogger from Badong in China's Hubei province who posts as Shenqi Ayu, has built a rideable hoverboard inspired by the Green Goblin's glider in Spider-Man and flown it across the Yangtze River. After his first five-turbojet prototype caught fire, he rebuilt it around ten brushless electric units with more than 30 kg of thrust each, and trained on it with an AI posture coach made from two phones.
Vincent Yiu retweeted
Song Xingyu, a self-taught Gen Z vlogger from Badong in China's Hubei province who posts as Shenqi Ayu, has built a rideable hoverboard inspired by the Green Goblin's glider in Spider-Man and flown it across the Yangtze River. After his first five-turbojet prototype caught fire, he rebuilt it around ten brushless electric units with more than 30 kg of thrust each, and trained on it with an AI posture coach made from two phones.
Vincent Yiu retweeted
🕵️♂️ Pivot From Targeted Industries to Actor Infrastructure
Do you know which threat actors are targeting the sector you care about? We can help with that.
On our platform, you can filter the threat actor dataset by sector, open a matching profile, and review the activity tied to that actor.
In this example, we start with Information Technology, narrow the list to actors tied to that sector, and land on WageMole, a North Korean state-sponsored group. From there, we can pivot into its IPs, hosts, SHA256s, and related activity.
See which actors are targeting your sector 👉 hunt.io/get-started
#ThreatHunting #ThreatIntel #CyberSecurity
😂 science at its best. At these prices they still earning big bucks.
deepseek posted way more alpha on their zhihu page, if you only read twitter you are reading the laowai approved stuff
"Based on this framework, we have implemented a high-throughput, low-latency large-scale inference service for DeepSeek V4.1 Flash. Currently, the service throughput of a single cluster is 155 trillion tokens/day, and the overall revenue is $38 per card per hour (based on off-peak prices)."
it costs roughtly $5-10 per gpu hour so depseek is claiming 80% serving margin at THEIR prices lololololol
Time to limit it two 2 per household address first in Hong Kong so we can actually get our hands on it faster.
Delay the orders for households which ordered more than 2, keep the 3rd and above devices to later shipments.
Make sure the devices are used sooner rather than later and more publicity.
Also add a delay activation fee. If the device isn’t activated within 2 weeks of it being sent out then charge 10% per week. 😂
iPhone Duo orders limited to two per customer as Apple tackles scalping 9to5mac.com/2026/10/20/iphon… by @benlovejoy
Wonder if any first line ransomware support response from ransomware gangs negotiations are using agents for automated responses until its near completed the negotiation before handing back to a real person 🤔🤔🤔
Vincent Yiu retweeted
1/ Introducing the Cua Spaces SDK.
Every big lab now ships a bot with its own computer: Grok Bot, Muse, dots. None let you bring your own. With Cua Spaces, now you can.
Put Claude Code, Codex or any agent on compute you choose, and run jobs across all your computers at once.
Vincent Yiu retweeted
Aloha!🌺 Meet Ornith-1.5-122B: No Tradeoff Between Strong and Fast
Stronger. Faster. Leaner. Ornith-1.5-122B delivers frontier-level capabilities with exceptional inference efficiency. With superior instruction following, stronger task decomposition, and deeper understanding of real-world workflows, it achieves state-of-the-art performance among open-source models of comparable size, while running on a single NVIDIA DGX card!!
Open weights under the MIT license.
Coding
✅SWE-bench Verified: 0.845
✅TB2.1: 0.813
✅CyberGym: 0.800
✅NL2Repo: 0.512
Agentic
✅HLE: 0.446
✅BrowseComp: 0.785
✅MCP-Atlas: 0.746
✅Toolathlon: 0.708
🤗Hugging Face: huggingface.co/ornith-ai/Orn…
We can’t wait to see what you build with Ornith-1.5-122B.
Vincent Yiu retweeted
GLM-5.3-Flash from Nvidia (FP4-Local)
🚀 Peak c=1 @ 69 tok/s
📊 Average c=1 @ 42 tok/s
Most important thing quality ‼️
In our visual tests it scored 11.5 out of 12 ‼️
github.com/myllmbox/glm53-fl…
What’s happening in France all of a sudden 😱
J’ai tellement de la peine et de la rage devant ces images terrifiantes du gérant d’un magasin Micromania à Nice complètement désemparé par le pillage de son magasin..🙄
#17Octobre
Vincent Yiu retweeted
BREAKING: Japan declares a "state of emergency in cyberspace" as cyberattacks surge, with more than 20 major companies reporting breaches.
Readers added context they thought people might want to know
Japan did not formally declare a state of emergency in cyberspace. The phrase originated from a ruling party official at an LDP meeting; government agencies issued cybersecurity warnings and basic security advisories to companies amid breaches at 20+ firms.
japancyberwatch.com/articles/japan…
japancyberwatch.com/articles/japan…
cyber.go.jp/pdf/press/taio…
thenextweb.com/news/japan-cyb…
Vincent Yiu retweeted
Introducing QwenGyre, bringing elastic RL to extreme-long-horizon (XLong) agent training. ✨
It launches with two core designs: 🥳
- Elastic Scheduler: reallocates GPUs between rollout & training as demand shifts—live executions never interrupted. Up to 1.85× speedup over Colocate, 1.78× over Async.
- Trajectory Processor: turns branching executions (compaction, sub-agents, retries) into prefix-shared trajectory trees with bounded, deduplicated training samples. Partial progress after timeout still gets scored.
Scaled to Qwen3.8-2.4T-A95B with ~700K tokens per rollout, QwenGyre lifts NL2RepoBench from 52.5% to 58.5% in 48 steps, cutting end-to-end training time by ~44% vs Async.
🔗 Read the paper:
arxiv.org/abs/2609.33848
