Yacine, 23, 🇹🇳 | Cybersecurity Engineering Trying to leave the world better than I found it
- Tweets 111
- Following 320
- Followers 47
- Likes 521
Knowledge of the Day: Black Monday (1987)
Tomorrow marks 39 years since the Dow Jones crashed 22.6% in a single day.
Flashbacks of that day:
Stocks were overpriced, interest rates were rising, and automated trading made everything worse. As prices fell, computers triggered more selling, creating a massive chain reaction.
As Jeffrey once said about the financial system: "No one understands it. It's a miracle."
2
75
it’s not just openai. the vulnerability goes much deeper.
check out my co-founder harsh’s thread on how far this goes, including a slack vulnerability that could potentially expose companies’ uploaded attachments, and meta vulnerability that affects their core image parser.
he’s the mastermind behind it and the one who opened pandora’s box
We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more.
It was literally xkcd #234, one obscure image library beneath a huge number of apps. 🧵
28
16
461
51,435
Cronos halted its entire network following an estimated ~$75M exploit of Tectonic, its largest lending protocol.
No validator compromise. No private keys leaked. No consensus exploit.
This looks like a Mango Markets-style oracle manipulation attack.
Let’s take a deep dive and reconstruct what happened.
2
1
3
182
Cronos then moved into containment.
Validators halted the entire chain, preventing the attacker from moving most of the remaining funds.
~$6.29M reportedly escaped to Ethereum and became 2,592 ETH.
~$68.7M remained on Cronos.
Important distinction: those funds were not recovered. They were stranded because block production stopped.
Tectonic TVL also collapsed from roughly ~$121.7M to ~$3M, while separate analysis estimates ~$32.6M in bad debt.
1
1
28
Based on current evidence, this was an application-layer economic exploit, not a Cronos consensus compromise.
But the response now creates a second incident.
Cronos still has to decide how to restart:
→ preserve current state
→ freeze specific assets
→ modify state
→ rollback/recover
Tectonic now has to explain why illiquid TONIC could secure liquid assets without stronger manipulation controls.
Cronos has to explain what a network-wide halt means for finality and recovery.
The exploit exposed Tectonic’s risk model.
The restart will expose Cronos’ incident-response model.
1
25
Get your first month of ChatGPT Plus for $0 (normally $20) New accounts only. 👌
Claim the limited-time offer here: chatgpt.com/?promo_campaign=…
3
3
288
Madara uchiha of the real world
‼️ Microsoft's July patch for the RoguePlanet local privilege escalation Defender flaw (CVE-2026-50656) has been bypassed.
Nightmare Eclipse published exploit code called ShieldBreak on GitHub, hours after August Patch Tuesday. The researcher claims a 100% success rate on fully patched Windows 11 25H2 and Server 2025, where RoguePlanet's race condition was hit-or-miss.
The vulnerability makes it possible for any local user to get SYSTEM. No fix yet.
4
45
Claude artifacts are still fully indexable by search engines
site:claude.ai/public/artifacts/
1
3
206
I really still don't understand why many still prefer Claude instead of Codex. Luna is now free, has no session limits... It keeps getting better!
We’re making better intelligence easier to access in ChatGPT for everyone:
- GPT-5.6 Sol now powers both Instant and deep reasoning for Plus & Pro users, delivering more factual, focused responses.
- Free & Go users get unlimited text chats with GPT-5.6 Luna starting tomorrow.
2
75