Pinned Tweet
Moving past Living off the Land to Living off the AI. Attackers are weaponizing trusted corporate AI connections to exfiltrate data silently.
I just released "RedBeacon-AI" so security teams can simulate these channels.
Link: github.com/RedTeamOperations…
#LotAI #AISecurity #Redteam
hacksys retweeted
Your friend who pivoted into crypto in 2021 and then to AI in 2024 is about one week away from announcing their new cyber security startup
hacksys retweeted
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
hacksys retweeted
In a single year, AI has rewritten the security priority list for CISOs.
Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses.
There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems.
In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI.
The biggest jumps since 2026:
- Internal AI agent security (+28 pts)
- AI SOC (+26 pts)
- AI offensive security (+24 pts)
- AI code security (+23 pts)
- AI vulnerability remediation (+22 pts)
Last year's staples:
- Exposure & vulnerability management (-21 pts)
- SIEM / security data (-18 pts)
- Privileged access management (-18 pts)
From a16z's @OwenColby and @steph_zhang on The New Security Agenda: a16z.news/p/the-new-security…
hacksys retweeted
A fork of ntlmrelayx is available here github.com/grayhatkiller/imp… with the LDAP signing bypass implemented. If anyone wants a quick win to fully compromise a domain…here you go!
hacksys retweeted
Microsoft wants EDR out of the Windows kernel. We checked the binaries
They even come with public symbols. Full write-up from @zodiacon : go.es.io/4zcdL2U
Microsoft's answer is the Windows Endpoint Security Platform (WESP). It's undocumented, but it already ships in Windows Insider builds.
What we found:
• wesp.sys: a Microsoft-built file system mini-filter at altitude 329500
• EspFilterPort: the filter communication port it uses to reach user mode
• espclient.dll: 120 Esp* exports for rules, filters and event queues
hacksys retweeted
php2shell is one of the most impactful bugs in recent times, yet threat actors aren’t mass exploiting it
the bug is so complex that even porting the exploit between targets takes serious skill, human or ai
so i benchmarked how well open and frontier models can do it. 🧵
hacksys retweeted
I got tired of all the spam calls I was getting so I had @bot find my number listed on sites and file the removals. I made it a free skill so you can do the same. x.ai/bot/fUj6TYhiW_cjtzWvbsF…
@SpaceXSI @elonmusk
hacksys retweeted
🚨 THE COUNTDOWN IS ON! CARTS V2 is launching tomorrow.
⏳ Stay tuned: cyberwarfare.live/
hacksys retweeted
Developer laptops increasingly hold everything an attacker wants.
- Source code.
- SSH keys.
- Cloud credentials.
- GitHub tokens.
- Package publishing access.
- Browser sessions.
- CI/CD access.
- AI coding tools.
Yet the developer workstation often receives less scrutiny than production infrastructure. Modern software supply chain security has to include the machine where the software starts.
I spoke about exactly this: "Your Laptop Is Production." in Security Days【公式】Japan earlier this year.
anantshri.info/timeline/secu…
#CyberSecurityAwarenessMonth #EndpointSecurity #SupplyChainSecurity #DeveloperSecurity
P.S. I am working on an expanded version of this if any conference wants it, feel free to contact.
hacksys retweeted
🚨Get 𝐂3𝐒𝐀 & 𝐁𝐓𝐅 certifications completely 𝐅𝐑𝐄𝐄.
🎯 C3SA: cyberwarfare.live/certificat…
🛡️ BTF: cyberwarfare.live/certificat…
hacksys retweeted
[CyberWarFare Labs] I just completed the "One Get Away" challenge on @cyberwarfarelab Infinity Platform 🎯 Earned 20 points in ai_security domain. #CloudSecurity #ChallengeCompleted infinity.cyberwarfare.live/a…
hacksys retweeted
I just earned the AI Security Fundamentals certification from @cyberwarfarelab! infinity.cyberwarfare.live/c…
hacksys retweeted
Go deeper into offensive security with 3 days of Red Team training at COCON 2026.
👉🏻 Register now: c0c0n.org/register
🎯 6–8 October
📍 Grand Hyatt, Kochi
#COCON2026 #RedTeam #CWL
hacksys retweeted
🚨 THE COUNTDOWN IS ON! The new 𝗖𝘆𝗯𝗲𝗿𝗪𝗮𝗿𝗙𝗮𝗿𝗲 𝗟𝗮𝗯𝘀 website is almost here! 🌐
👉🏻 𝗦𝘁𝗮𝘆 𝘁𝘂𝗻𝗲𝗱: cyberwarfare.live/
#cyberwarfarelabs #cybersecurity
hacksys retweeted
"3 random dudes”
1. hacked apple, again and again.
httpvoid.com/Apple-RCE.md
httpvoid.com/Hello-Lucee!-Le…
httpvoid.com/Hacking-Apple-w…
2. your github enterprise is our github enterprise.
httpvoid.com/GitHub-Enterpri…
3. get a discord message from me, get pwned.
hacktron.ai/blog/discord-rce
youtube.com/watch?v=R3SE4VKj…
4. oh yeah, at one point we basically had shells across the electron ecosystem. check the DEF CON research.
media.defcon.org/DEF%20CON%2…
5. your supabase database is my database.
hacktron.ai/blog/supapwn
6. we got the posthog prod database.
hacktron.ai/blog/posthog-rce
7. react2shell? vercel paid us $170k for helping secure their waf.
hacktron.ai/blog/react2shell…
8. your palo alto vpn is my vpn.
hacktron.ai/blog/cve-2026-02…
9. ai ides? we got shells for you, antigravity
hacktron.ai/blog/hacking-goo…
10. windsurf rce.
youtube.com/watch?v=23Mz7qcR…
11. turning cluely into malware.
hacktron.ai/blog/hacking-clu…
12. ai browsers? sure, uxss: your perplexity browser is my browser.
hacktron.ai/blog/perplexity-…
13. openai atlas too. kinda uxss
hacktron.ai/blog/hacking-ope…
14. hey, it’s not even our first time hacking discourse.
projectdiscovery.io/blog/dis…
15. adobe coldfusion: pre-auth rce. because apparently we needed another one.
projectdiscovery.io/blog/ado…
there’s a lot more. go dig.
anyway, yes: “3 random dudes.”
and @HacktronAI is full of more random dudes like these.
hacksys retweeted
On July 25, our team hacked OpenAI.
It took us less than 72 hours.
Two vulnerabilities chained together gave us access to ChatGPT and Codex accounts belonging to OpenAI employees. We demonstrated the impact with a harmless PR in OpenAI’s internal monorepo.
The full chain:
HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex takeover → connected GitHub → internal PR.
OpenAI fixed the SSO issue roughly 14 hours after our report.
Research by @rootxharsh, @S1r1u5_ and @iamnoooob.
Full technical write-up:
hacktron.ai/blog/hacking-ope…
hacksys retweeted
PrismML team fit a 27B model into 5.9 GB.
We uncensored it without changing a single weight. 🐳
Introducing OrcaRouter Ternary Bonsai 2 27B Uncensored.
Traditional abliteration modifies weights. On a ~1.72-bit ternary model, that means re-quantization — potentially destroying the quality preserved by QAT.
So we moved abliteration into the runtime.
→ 0 weights modified
→ 0 re-quantization
→ original 5.9 GB pack stays bit-identical
→ 129 residual intervention sites
→ adjustable at inference
→ runs locally on Apple Silicon
No modified checkpoint. Bring the original Bonsai pack + our runtime.
Open source: github.com/Continuum-AI-Corp…
Today, we’re announcing Ternary Bonsai 2 27B.
Based on Qwen3.8 27B, Bonsai 2 27B is 9x smaller than its full-precision counterpart while retaining 98.2% of its aggregate benchmark performance.
Two months after the first Bonsai 27B release, the biggest change is quality. The footprint remains 5.9 GB, but the gap to full precision has narrowed materially, with particularly strong gains in agentic coding, multimodal reasoning, and long-horizon tool use.
Ternary Bonsai 2 27B is available today under Apache 2.0.
hacksys retweeted
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
hacksys retweeted
The slides from my talk at Microsoft Bluehat Singapore are public here:
thomasdullien.github.io/abou…
It's my first BlueHat talk since the Vista days.