Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Hong Kong
Joined December 2014
- Tweets37.7K
- Following424
- Followers32.1K
- Likes33.9K
Vincent Yiu retweeted
Syswhispers4
github.com/JoasASantos/SysWh…
Vincent Yiu retweeted
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation.
eliastaylor.com/noexploit/
Vincent Yiu retweeted
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
Vincent Yiu retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST.
Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using:
🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…)
🟧 Bambda scan checks (github.com/PortSwigger/bambd…)
🟧 BChecks (github.com/PortSwigger/bchec…)
Start scanning for the vulnerability now → portswigger.net/bappstore/31…
Vincent Yiu retweeted
🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed!
Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀
Vincent Yiu retweeted
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.
Vincent Yiu retweeted
I thought the first rule of EDR Reversing Club was you don’t talk about EDR Reversing Club.
xitter.cf/OffensiveAIcon/status/…
Your EDR Has Boundary Issues.
@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.
Watch their Offensive AI Con talk below. 👇
youtube.com/watch?v=GNDMDI_p…
#OAIC #OffensiveAI #Cybersecurity #EDR
Vincent Yiu retweeted
Fuzzing became a lot more efficient 😏 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool: github.com/assetnote/h3fuzzR…
Writeup: slcyber.io/research/how-prac…
Vincent Yiu retweeted
Song Xingyu, a self-taught Gen Z vlogger from Badong in China's Hubei province who posts as Shenqi Ayu, has built a rideable hoverboard inspired by the Green Goblin's glider in Spider-Man and flown it across the Yangtze River. After his first five-turbojet prototype caught fire, he rebuilt it around ten brushless electric units with more than 30 kg of thrust each, and trained on it with an AI posture coach made from two phones.
Vincent Yiu retweeted
🕵️♂️ Pivot From Targeted Industries to Actor Infrastructure
Do you know which threat actors are targeting the sector you care about? We can help with that.
On our platform, you can filter the threat actor dataset by sector, open a matching profile, and review the activity tied to that actor.
In this example, we start with Information Technology, narrow the list to actors tied to that sector, and land on WageMole, a North Korean state-sponsored group. From there, we can pivot into its IPs, hosts, SHA256s, and related activity.
See which actors are targeting your sector 👉 hunt.io/get-started
#ThreatHunting #ThreatIntel #CyberSecurity
Vincent Yiu retweeted
1/ Introducing the Cua Spaces SDK.
Every big lab now ships a bot with its own computer: Grok Bot, Muse, dots. None let you bring your own. With Cua Spaces, now you can.
Put Claude Code, Codex or any agent on compute you choose, and run jobs across all your computers at once.
Vincent Yiu retweeted
Aloha!🌺 Meet Ornith-1.5-122B: No Tradeoff Between Strong and Fast
Stronger. Faster. Leaner. Ornith-1.5-122B delivers frontier-level capabilities with exceptional inference efficiency. With superior instruction following, stronger task decomposition, and deeper understanding of real-world workflows, it achieves state-of-the-art performance among open-source models of comparable size, while running on a single NVIDIA DGX card!!
Open weights under the MIT license.
Coding
✅SWE-bench Verified: 0.845
✅TB2.1: 0.813
✅CyberGym: 0.800
✅NL2Repo: 0.512
Agentic
✅HLE: 0.446
✅BrowseComp: 0.785
✅MCP-Atlas: 0.746
✅Toolathlon: 0.708
🤗Hugging Face: huggingface.co/ornith-ai/Orn…
We can’t wait to see what you build with Ornith-1.5-122B.
