Security Researcher @Cycoreslabs | ex @Microsoft | Vulnerability Research | ios/mac research 🙂/baseband researcher
somewhere in your network
Joined February 2017
- Tweets23.1K
- Following5.9K
- Followers13.1K
- Likes134K
Ashish Kunwar retweeted
You can run locally Uncensored DeepSeek-V4.1-Flash-1017 on a 12GB GPU on consumer hardware.
- Refusals collapsed from 85% to 0% on JailbreakBench (even during thinking).
- Routed experts stayed byte-identical.
- Reasoning held: GPQA unchanged, AIME slightly up.
- Runs via Strata with 64 GB RAM offload SSD.
- huggingface.co/AtomicChat/De…
Best local DeepSeek-V4.1-Flash-1017 GGUFs are here.
Unsloth Dynamic V3.1 leads almost every benchmark vs other frontier quants: GPQA Diamond, AIME25, LiveCodeBench, MMLU-Pro, Aider and more.
Runs on locally 64GB+ RAM.
- huggingface.co/unsloth/DeepS…
Ashish Kunwar retweeted
Today @_rybaz and I are publicly releasing all the materials for our Introduction to Harness Engineering for Vulnerability Research training we gave at @unpromptedconf last week.
Our goal was to teach the concepts we've been using to do much deeper security research and make both vulnerability analysis and red team engagements far more impactful.
The workshop can be found here: grahamhelton.github.io/harne…
The slides can be found here: grahamhelton.com/talks/2026-…
Ashish Kunwar retweeted
ML4 is now open-weight! Frontier capabilities on code agents & cyber, way more efficient and compact than its Preview version three weeks ago (!) and cherry on the cake: technical report telling its epic backstory. Check it out: huggingface.co/mistralai/Mis…
Ashish Kunwar retweeted
Thank you for sponsoring #POC2026 as a GOLD!
Cycores (@cycoreslabs) is a European security research startup pushing the boundaries of advanced security research across Mobile, Web, Desktop, and Embedded Systems.
As we emerge from stealth, we're bringing together exceptional researchers, deep technical expertise, and a shared ambition to tackle some of the most challenging problems in cybersecurity.
🌐 cycores.io
Ashish Kunwar retweeted
ARTEX was able to, ARTEX did, ARTEX was capable of... ARTEX did no shitt you named no single model! Which models were driving ARTEX in these "next gen military grad" attacks? cloud.google.com/blog/topics…
Ashish Kunwar retweeted
🚨 BREAKING: BINANCE ENGINEER HAD ROMANTIC RELATIONSHIP WITH NORTH KOREAN SPY BEFORE $6.3B HACK
New, unverified allegations claim that a Binance DevOps engineer was romantically involved with a North Korean operative and left their laptop unattended on the day of the attack.
The hack has previously been linked to a compromised engineer's laptop, while North Korean hackers have been implicated in the wider breach.
The romantic relationship and unattended-laptop claims are being attributed to ZachXBT online, but his original statement has not been independently verified.
Readers added context they thought people might want to know
Claims that a Binance DevOps engineer had a romantic relationship with a North Korean spy and left their laptop unattended are unverified false rumors falsely attributed to ZachXBT. No such details appear in his posts or official reports.
cryptotimes.io/2026/11/01/fac…
en.wikipedia.org/wiki/2026_Bina…
x.com/zachxbt/status…
Ashish Kunwar retweeted
GLM 5.5 is well into post training now
They seem to have been training internal 32B / 122B / 256B models to merge into the next gen base model which will be GLM 5.5
It's been a couple months since GLM 5.3 so I hope they release this relatively soon
Ashish Kunwar retweeted
Introducing CVE-2026-106378: Chrome GPU Sandbox Escape to full Remote Command Execution using synthetic keyboard injection
By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser 😬
Ashish Kunwar retweeted
🚨 BREAKING: An Accenture contractor plugged a personal Claude Code agent into a secure Pentagon system, WIRED reports.
It ran on NIPRNet for 2 months and apparently sent logins and a network map to a site NIST flagged as high risk.
Accenture calls the claims "without merit".
Ashish Kunwar retweeted
The danger of HTTP2Shell is very real. The libbrotli 🥦vulnerability affects a wide range of software, patch now (CVE-2026-111497)
We've achieved unauth RCE in Docker's official WordPress image abusing the well known /xmlrpc.php endpoint, we call it the pingback of hell :)
Ashish Kunwar retweeted
The Libbrotli vulnerability allows you to exploit Wordpress through the /xmlrpc.php endpoint.
Patch now!
If you want to verify if you are vulnerable, @_remot3 did an amazing exploit for @XBOW
Ashish Kunwar retweeted
We wrote 150,000 CVE exploits and trained an LLM on them.
Hinoki Offensive One scores 88.4% on CyberGym, 2.8 points above Daybreak, with zero refusals.
Pentesting and exploit development with no limits. Available now.
Ashish Kunwar retweeted
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
The Goat , Lord Orange
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
Ashish Kunwar retweeted
ZeroDay to Zero Dollars: Exploiting the Windows Management Instrumentation Device by @hexnomad
Ashish Kunwar retweeted
You definitely don’t want to miss @calif_io Quang “the prodigy” L’s talk at @offensive_con JP 😎
