Everybody needs to stop using reCaptcha. It's been absurd a long time. Now it's cruel and unusual.
This captcha followed a successful login with high-entropy password and was followed by email OTP. @Spotify you need a security team that engages in less dogma and more security.
Or. Maybe we just continue building on defense in depth together with robust monitoring and don't have to pay for 24/7 agent swarms that have access to every possible repo and infra component?
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
Ah Monday. Back to the clanker factory to provide shareholders value with prompts and tokens! #singularity
php2shell was the vulnerability, the tweets were the real exploits and that’s the honest answer of how many partridges there are in a pear tree. #singularity #superintelligence
LogicalTech retweeted
Today I met somebody who thinks that THE solution to all "AI is expensive" problems is "just run a local model" :-) #random
The OpenAI waahmbulance trying desperately to squeeze PR out of this pretending they’re behind it all. Disgusting really. But also extremely on brand for our modern AI labs
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
If you're looking for the most detailed AND *entertaining* way to read about the php2shell bugs, the Calif post is epic: calif.io/php2shell/
LogicalTech retweeted
I used Opus 5.5 on max and GPT-6 Astra for 5 days straight and I reversed engineered Elastic Security and extracted all the rules. I made them available here:
github.com/elastic/detection…
You’re welcome.
LogicalTech retweeted
Muistuta taas: jos joutuisimme sotaan, olisi Suomen kiireellisin tehtävä tuhota Muurmannin rata, että amerikkalaiset eivät pysty sitä kautta lähettämään apua Venäjälle.
We now know how the seeds of the NIST elliptic curves were generated
words.filippo.io/seeds-solve…
LogicalTech retweeted
Why you should hire Spud for your company:
- extensive knowledge in multiple security fields including SOC/IR, Incident Management, Threat Hunting/Insider Threat, Threat intelligence, engineering and more.
- over 12 years of experience in tech with nearly a decade of that in cyber
- Spare time I’m active in multiple local cybersecurity groups and regularly attend industry conferences even on my own dime.
- tinkers with electronics in my spare time including Embedded systems.
- very friendly and lovable
- long, tan, handsome
- has a cool cat
- loves trains
> gets new job
> loves new job
> 4 months into job
> "Hey Spud I’m giving you a heads up but we’re laying off contractors. You have a few weeks"
So anyway if anyone knows of anyone hiring for Threat Intelligence, Insider Threat, Incident Response/Management or any related engineering roles please let me know.
LogicalTech retweeted
Know what happens to work really well against “breadth-first searches for every possible mistake and misconfiguration” ?
xitter.cf/thegrugq/status/210951…
LogicalTech retweeted
I'm working on a massive video where I'm getting help from a lot of cybersecurity people to explain why doomers are wrong, and why we need to focus on improving security.
This has no basis in reality at all, ffs.
anthropic.com/research/self-…



























