segfaults are a feature of our curriculum
- Tweets 118
- Following 195
- Followers 16
- Likes 182
rawpayload retweeted
Hacktron should have just said their AI went rogue and accidentally made the pull request.
OpenAI would have loved that.
2
26
358
12,851
rawpayload retweeted
2020: Lock down to save the world.
2026: Slow down to save the world.
150
609
5,137
137,808
rawpayload retweeted
Hmm... this technique sounds familiar 👀
zeroday.cloud/blog/redis-cve…
another one (poc) for redis server RCE: github.com/v12-security/pocs…
handleClientsBlockedOnKey() use-after-free. patched in release 8.8.2.
4
50
8,879
rawpayload retweeted
Anthropic CEO after realizing a Chinese dev explained loop vs graph engineering better than anyone at the company
A Chinese developer just explained the shift from Loop Engineering to Graph Engineering better than anyone.
most people are still building agents the way that's about to be obsolete.
> why single-agent loops break and go "goal blind"
> the 4 parts of a graph: nodes, edges, state, policy
> 3 topologies that run everything: diamond, supervisor, pipeline
> Anthropic's 5 official workflow patterns
the punchline: it's not how many agents you run. it's the determinism you build with verifiers, code fallbacks, and reality anchors.
I broke the same architecture down with Kimi K3. Full A-Z guide below.
46
380
5,717
1,426,562
Arbitrary code execution in objdump -g
We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go.
Blog post: blog.calif.io/p/oobdump-relo…
AI-generated PoC and writeup: github.com/califio/publicati…
6
70
420
30,669
rawpayload retweeted
Blackhat and whitehat are bad terms. We should be using denyhat and allowhat.
16
23
218
17,413
rawpayload retweeted
🚨 Latest from today's Shai Hulud campaign -
The JFrog Security Research team has identified more malicious packages in this campaign which are being published with a hidden payload - hosted directly on GitHub instead of npm! 🧵
3
30
112
14,859
cooked
dnsmasq powers massive amounts of networking infrastructure worldwide.
We found 6 0days. 5 were accredited to xchglabs and assigned CVEs.
Our first technical writeup is now live:
xchglabs.com/blog/dnsmasq-fi…
#dnsmasq #0day #cybersecurity #xchglabs
1
142
rawpayload retweeted
Full technical writeup + exploit technique for this 20-year-old bug in PostgreSQL
zeroday.cloud/blog/postgres-…
Xint Code discovered a highly exploitable heap-buffer-overflow in PostgreSQL that existed for over 20 years.
Our research team exploited this bug to claim $30,000 at ZeroDayCloud in December!
Bug details are below
22
143
11,658
rawpayload retweeted
Same script. Ubuntu, Amazon Linux, RHEL, SUSE — four root shells, side by side.
No per-distro tuning. No race window. No kernel offsets to leak.
Most Linux LPEs need at least one of those. This one needs none.
4
20
209
48,698
rawpayload retweeted
A new analysis of the js-logger-pack npm malware reveals a sophisticated shift: they are now using Hugging Face not just as a malware CDN, but as a direct exfiltration backend.
Instead of a traditional C2 server, the malware uploads stolen data (keystrokes, files, and credentials) directly to private Hugging Face datasets. This allows the malicious traffic to hide in plain sight behind legitimate AI platform connections.
Even wilder, the attacker is planting false metadata to impersonate Josh Stevens (VP at Polymarket) to hide their tracks.
Read the full technical breakdown of this cross-platform threat: research.jfrog.com/post/hugg…
3
14
50
6,299