Michael Allen (@_Dark_Knight_) profile picture

Michael Allen

@_Dark_Knight_

Building at the intersection of AI + offensive security::https://teapaw.org/t.co/5DiZGjk6VJ

 Seattle, WA
Joined March 2009
  • Tweets7.7K
  • Following296
  • Followers1.5K
424Media
Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)Photo by Michael Allen (@_Dark_Knight_)
iOS Reversing Lascon Edition | m.youtube.com/watch?v=3ljBmx… #iOS #reversing
13
33
The next partnership for @OpenAI should be with @pwn_ai
2
2
13
1,491
[BLOG ]Sandbox or Judge? Containing Offensive Agents with NVIDIA OpenShell | mykalseceng.github.io/posts/… #AgenticAI #offensivesecurity

Sandbox or Judge? Containing Offensive Agents with NVIDIA OpenShell

How NVIDIA OpenShell confines an agent, traced from one curl’s system calls to the supervisor’s policy check, and what happened when I asked it to keep my pentest agents from dropping a table or...

mykalseceng.github.io
3
6
608
Today @_rybaz and I are publicly releasing all the materials for our Introduction to Harness Engineering for Vulnerability Research training we gave at @unpromptedconf last week. Our goal was to teach the concepts we've been using to do much deeper security research and make both vulnerability analysis and red team engagements far more impactful. The workshop can be found here: grahamhelton.github.io/harne… The slides can be found here: grahamhelton.com/talks/2026-…
Image from Graham Helton (too much for zblock) (@GrahamHelton3)
15
299
2
1,529
62,015
Michael Allen retweeted
Phorion (@PhorionTech) profile picture
Phorion@PhorionTechOct 30
Phorion has discovered a compromise of the official Claude Code for VS Code extension (2.1.313) on Open VSX. Here is a breakdown of how the implant works, a bug in its macOS setup logic, and what to hunt for across your fleet. 🧵
Image from Phorion (@PhorionTech)
7
29
7
65
56,518
Michael Allen retweeted
PWN AI (@pwn_ai) profile picture
PWN AI
@pwn_aiOct 30
pwn.ai/blog/chrome-escape
CVE-2026-106378: Chrome GPU Sandbox Escape to RCE

CVE-2026-106378: Chrome GPU Sandbox Escape to RCE

How an allowed WindowServer connection and inherited macOS event-posting permission let Chrome’s sandboxed GPU process inject keystrokes and launch apps outside the sandbox.

pwn.ai
2
18
104
17,577
Michael Allen retweeted
Paulos Yibelo (@PaulosYibelo) profile picture
Paulos Yibelo
@PaulosYibeloOct 30
Escaping Chrome's GPU sandbox through an undocumented macOS API. Discovered a sandboxed Chrome GPU process could inject keyboard events so sent ⌘+Space, typed "Calculator" & hit Return 😂. CVE-2026-106378 is fixed in Chrome 155. Update chrome dependancies. Happy Octoberfest.
PWN AI (@pwn_ai) profile picturePWN AI
@pwn_aiOct 30
Introducing CVE-2026-106378: Chrome GPU Sandbox Escape to full Remote Command Execution using synthetic keyboard injection By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser 😬
11
44
3
366
24,307
welcome to the "FUDocalypse"
1
56
Michael Allen retweeted
PWN AI (@pwn_ai) profile picture
PWN AI
@pwn_aiOct 15
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
Image from PWN AI (@pwn_ai)
16
221
46
1,279
393,763
What I find absolutely amazing about this vercel sandbox hack is what ONE talented hacker paired with agents -- and remember individuals do not have access to daybreak-red and whatnot -- can do! @PaulosYibelo
1
2
8
862
Pure sorcery | vercel.com/blog/findings-fro… @PaulosYibelo
Findings from the $1M Vercel Sandbox challenge

Findings from the $1M Vercel Sandbox challenge

Vercel’s $1M Sandbox challenge drew 1,285 reports, uncovered a Linux kernel zero day, and resulted in $242,000 in bug bounties payouts.

vercel.com
2
16
84
5,278
this minute you have a perfectly working session with daybreak-blue. literally the next minute, the same exact session breaks with refusals.... @thsottiaux @OpenAI #daybreakblue
1
2
331
tfw folks start claiming they found things (dupe is usually the claim) when they didn't and attributing that to their homegrown model...just vibes
2
171
Michael Allen retweeted
Paulos Yibelo (@PaulosYibelo) profile picture
Paulos Yibelo
@PaulosYibeloOct 9
Image from Paulos Yibelo (@PaulosYibelo)
Paulos Yibelo (@PaulosYibelo) profile picturePaulos Yibelo
@PaulosYibeloOct 3
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
Image from Paulos Yibelo (@PaulosYibelo)
9
19
3
237
15,914
yeah so daybreak blue no longer works for anything cyber related. Though it was working fine yesterday.... @thsottiaux
1
2
189
Michael Allen retweeted
PWN AI (@pwn_ai) profile picture
PWN AI
@pwn_aiOct 3
Vercel is the best security team we have worked with. The entire management chain is hyper paranoid and wonderful to work with! We will release more on these container escapes once the patches land! Stay tuned!
Guillermo Rauch (@rauchg) profile pictureGuillermo Rauch
@rauchgOct 3
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
19
1
216
13,210
Michael Allen retweeted
Guillermo Rauch (@rauchg) profile picture
Guillermo Rauch
@rauchgOct 3
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
Paulos Yibelo (@PaulosYibelo) profile picturePaulos Yibelo
@PaulosYibeloOct 3
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
Image from Paulos Yibelo (@PaulosYibelo)
105
150
46
2,071
257,951
Michael Allen retweeted
Paulos Yibelo (@PaulosYibelo) profile picture
Paulos Yibelo
@PaulosYibeloOct 3
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
Image from Paulos Yibelo (@PaulosYibelo)
136
222
86
2,828
576,296
Load more