Montessori kid using her chaos monkey energy to manifest security impact
Minneapolis, MN
Joined July 2012
- Tweets8.7K
- Following3.4K
- Followers1.9K
- Likes17.8K
kat traxler retweeted
Cloudflare just released a blog on a cross-tenant data exposure vulnerability I reported to them. The vuln is in Cloudflare Workers AI’s GLM-5.3 provider. This was later also reported upstream to SGLang.
Check out their post here:
blog.cloudflare.com/kv-cache…
kat traxler retweeted
Britain bets big on AI to defend against the threats AI is helping create theregister.com/security/202…
kat traxler retweeted
On October 16, we reported the abuse of a ConnectWise Cloud Backup credential to access Microsoft 365 tenants. Since then, we’ve been asking a new question: who, or what, was doing the typing? 🤖
🔗 Read our blog for our working hypothesis: huntress.com/blog/connectwis…
kat traxler retweeted
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes thehackernews.com/2026/10/tw…
kat traxler retweeted
PHP2Shell: Google and Mandiant Warn That PHP Servers May Remain Vulnerable After Installing Patches cloud.google.com/blog/produc…
kat traxler retweeted
AI Security’s Fight Night LIVE on YouTube from @unpromptedconf ! AI Hacker Jeopardy and debates, Wed October 28, 6:10PM PT!
Hit ‘NOTIFY ME' here: youtube.com/live/7kD--XEKrQ0
Your fight card:
- @EppSecurity, creator of the Zero Day Clock, and @jeremiahg, founder of WhiteHat Security and CEO of @rootevidence
- Tim Brown (CISO-in-Residence, @team8group; former @SolarWinds CISO) and @gadievron (CEO, @knosticai; Chair, [un]prompted)
- @k8em0 (Founder & CEO, @LutaSecurity) vs. @raistolo (Full Professor, @polimi)
Debates shepherded by Stephen Llano, Ph.D. (@StJohnsU).
And - AI HACKER JEOPARDY with @g_mark!
Want to play? email [email protected]:
team name, 3 player names, cell number.
Pls SHARE with your community.
[un]prompted II, the AI Security Practitioner Conference, October 27–29 at the Hibernia in San Francisco or online: unpromptedcon.org
Thank you to our Sponsors: @knosticai, TachTech, @censysio, @Ent_Security, @WorkOS, @DecibelVC, Whiterabbit, @zenitysec, @runsybil, @AISLE_Inc Thank you to our Community Partners: @SANSInstitute, @cloudsa, @OneRSAC, @FIRSTdotOrg.
@jaybeale @jonsakoda @WHITEHACKSEC @robtlee @joesu11ivan
kat traxler retweeted
UK retail giant Tesco appears to have decided to replace VMware with Proxmox in its stores.
More here: theregister.com/virtualizati…
kat traxler retweeted
BREAKING: China's AI stock bubble bursts, wiping out $480 billion in market value as its tech-heavy STAR50 index plunges 40% in under 4 months.
Two new blogs dropping today. A culmination of my work on AI-Assisted vulnerablity discovery with the release of the Security Constitution: kattraxler.cloud/a-security-…
And for those looking for the juicy bug details, an exfiltration techinique in BigQuery DTS
kattraxler.cloud/no-permissi…
kat traxler retweeted
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
kat traxler retweeted
JUST IN: Japanese tech company GMO Internet calls for government intervention following a major cyberattack that left some users reporting unauthorized financial transactions.
kat traxler retweeted
SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass - khoadha
blog.viettelcybersecurity.co…
kat traxler retweeted
JUST IN: Quest Diagnostics reports a cybersecurity breach potentially exposing sensitive patient records, with the number of affected patients still unknown.
kat traxler retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
kat traxler retweeted
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
github.com/assetnote/php2she…
