php2shell defense tools safechecks, suricata/snort, modsecurity github.com/scadastrangelove/… #php2shell

And now the news. TRON-069 project updates GenieACS, iopsys, FreeACS vulns and sometimes fixes. scadastrangelove.github.io/T… #tron069 #Telecom #vulnerability

TRON-069 · A Global TR-069 Atlas TRON-069 exists to draw attention to the (in)security of the last mile: the familiar little boxes that connect our homes to the Internet. scadastrangelove.github.io/T… github.com/scadastrangelove/…

Agentic vulnerability discovery with proof: hunt 0-days, replay in a fresh container, judge against 1-days, and re-attacked after patching. ZCode (Z.ai/GLM) and Moonshot Kimi Code port of rust-in-peace. PoC or it didn't happen. github.com/scadastrangelove/…

Celebrated SCADAPass 10th anniversary by finally updating it. 🎂 The legendary (yeah) SCADA default/hardcoded password list is back: release 1.3 — 341 entries, 107 vendors, +126 new. ChatGPT and Opus shyly refused to help. Kimi just got it done. 📷github.com/scadastrangelove/…

The first GHSA (github.com/GitoxideLabs/gito…) discovered by rust-in-peace has been published. Hooray! More to come! github.com/scadastrangelove/…

Skepticism about AI-driven vulnerability research is fair — so here are receipts, not a pitch. github.com/scadastrangelove/… has filed 57 vulnerability reports across 20 Rust projects: 20 already fixed upstream: lopdf, x509-parser, quick-xml, ntex, rustls

Agentic security review for Rust. An autonomous recon → find → grade → find→fuzz → report → patch loop for the bugs that actually bite Rust. github.com/scadastrangelove/…

Damn Vulnerable Rust Application github.com/scadastrangelove/…

Idea from ёPRSTCON: living GitHub list for LLM and AI-agent security. 225 tools/93 stars/27 forks Agent/MCP, red teaming, prompt injection, guardrails, AI SAST, pentest agents, model security, SOC/SIEM, RE, fuzzing, phishing, benchmarks, model weights. github.com/scadastrangelove/…

Структурная власть на скорости машин Сильнейшие экономики мира вкладывают в ИИ триллионы не ради ещё одного способа зачитать чужой сетевой флоу. Гонка идёт за право задавать условия, в которых государства и компании видят мир и принимают решения habr.com/ru/articles/1058354…

Does anyone know if Hack In The Box will be in Thailand this year? @l33tdawg / anyone?

Two Claude Desktops on one Mac: a small, practical one Writeup: medium.com/p/defc6989cd33 Code: github.com/scadastrangelove/…

OWASP Agentic SAMM: Securing Development When the Developer Is No Longer Only Human ICS AI Keynote, Beijing 2026. medium.com/hackingodyssey/ag…

An OWASP SAMM Extension proposal for AI-Driven Development This document extends OWASP SAMM to systems where software is no longer the only actor. github.com/scadastrangelove/… v0.3 highlights Five additions that emerged from publication consistency review and real audit feedback.

A curated list of tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more. github.com/scadastrangelove/…

ПРОГРАММА ёPRSTCON СОБРАНА Финал. Сетка готова, опубликована, можно изучать. → yoprstcon.ru/program.html t.me/yoprstcon/32

ёprstcon — community one-day con in Moscow, May 26. Open call for anyone whose talk fits the room. 200 people, infosec + unusually curious crowd from adjacent fields. No sponsors. No VIP. Pallets instead of seats. ёprstcon is about you, your con, man. yoprst.me/

From Artifacts to Risk: Auditing Instruction Surfaces in Agent Systems This paper presents a bottom-up, artifact-centric audit of instruction surfaces in agent systems. zenodo.org/records/20028366