Pinned Tweet
No one really cares about you, so just focus in yourself, in the end you will be alone anyway.
Fat retweeted
We hacked ChatGPT (using ChatGPT).
We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it.
OpenAI rated it P1 and fixed it Oct 26.
Android SMS of Death smsofdeath.com
Fat retweeted
"It's crazy how there's so many major hacks all of a sudden"
- people who started paying attention to cybersecurity 3 weeks ago.
Fat retweeted
cloudflare2shell
Got it!
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer. cfl.re/4iqHaQ1
Fat retweeted
Finding of the day with bug bounty ballon d'or winner of 2026 @fattselimi straight out of the @intigriti palace
Fat retweeted
Una periodista abre la puerta del auto de la Presidente de Bulgaria🇧🇬 y pasa esto:
Readers added context they thought people might want to know
No es la Presidenta de Bulgaria sino Mihaela Dotsova, presidenta del Parlamento. La periodista Sonya Koltuklieva abrió la puerta del auto y fue empujada por seguridad causándole fractura en el hombro. Condenado por la presidenta Iliana Iotova.
bta.bg/en/news/bulgar… novinite.com/articles/24121… brusselssignal.eu/2026/10/bulgar…
Fat retweeted
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits).
So for example, if you want to build some sample malware to test a detection system, nope.
Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope.
Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope.
You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children.
Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important.
And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
Fat retweeted
While we wait for the #PHP2Shell patches, we pulled some numbers from Profundis.
PHP shows up in 347,425 of 6.08M HTTP(S) records over 24h (5.7%). That isn't a count of vulnerable servers.
CVE-2026-109618 / CVE-2026-109619
Fixes: 14:00 UTC.
🤖 Made with AI
fear not!
this is no cyberpocalypse
this is the internet’s immune system finally waking up to an illness it has always had
a mere fever
the 0days were always there
the only thing that changed is awareness
now we begin the healing process ⚕️






















