Montessori kid using her chaos monkey energy to manifest security impact
Minneapolis, MN
Joined July 2012
- Tweets8.7K
- Following3.4K
- Followers1.9K
- Likes17.8K
kat traxler retweeted
Wow! Big news today!
Soon Discord messages will be indexable on Google. If you're in a public Discord which is discoverable, and has not changed its privacy settings, any messages posted moving forward can be found from search engines!
Hooray!!!!!1 (I think this is very bad)
kat traxler retweeted
Three hours in, the unprompted CTF is now at 24 kernel 0day submissions. The team is working hard on verification
kat traxler retweeted
Cloudflare just released a blog on a cross-tenant data exposure vulnerability I reported to them. The vuln is in Cloudflare Workers AI’s GLM-5.3 provider. This was later also reported upstream to SGLang.
Check out their post here:
blog.cloudflare.com/kv-cache…
kat traxler retweeted
Britain bets big on AI to defend against the threats AI is helping create theregister.com/security/202…
kat traxler retweeted
On October 16, we reported the abuse of a ConnectWise Cloud Backup credential to access Microsoft 365 tenants. Since then, we’ve been asking a new question: who, or what, was doing the typing? 🤖
🔗 Read our blog for our working hypothesis: huntress.com/blog/connectwis…
kat traxler retweeted
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes thehackernews.com/2026/10/tw…
kat traxler retweeted
PHP2Shell: Google and Mandiant Warn That PHP Servers May Remain Vulnerable After Installing Patches cloud.google.com/blog/produc…
kat traxler retweeted
AI Security’s Fight Night LIVE on YouTube from @unpromptedconf ! AI Hacker Jeopardy and debates, Wed October 28, 6:10PM PT!
Hit ‘NOTIFY ME' here: youtube.com/live/7kD--XEKrQ0
Your fight card:
- @EppSecurity, creator of the Zero Day Clock, and @jeremiahg, founder of WhiteHat Security and CEO of @rootevidence
- Tim Brown (CISO-in-Residence, @team8group; former @SolarWinds CISO) and @gadievron (CEO, @knosticai; Chair, [un]prompted)
- @k8em0 (Founder & CEO, @LutaSecurity) vs. @raistolo (Full Professor, @polimi)
Debates shepherded by Stephen Llano, Ph.D. (@StJohnsU).
And - AI HACKER JEOPARDY with @g_mark!
Want to play? email [email protected]:
team name, 3 player names, cell number.
Pls SHARE with your community.
[un]prompted II, the AI Security Practitioner Conference, October 27–29 at the Hibernia in San Francisco or online: unpromptedcon.org
Thank you to our Sponsors: @knosticai, TachTech, @censysio, @Ent_Security, @WorkOS, @DecibelVC, Whiterabbit, @zenitysec, @runsybil, @AISLE_Inc Thank you to our Community Partners: @SANSInstitute, @cloudsa, @OneRSAC, @FIRSTdotOrg.
@jaybeale @jonsakoda @WHITEHACKSEC @robtlee @joesu11ivan
kat traxler retweeted
UK retail giant Tesco appears to have decided to replace VMware with Proxmox in its stores.
More here: theregister.com/virtualizati…
kat traxler retweeted
BREAKING: China's AI stock bubble bursts, wiping out $480 billion in market value as its tech-heavy STAR50 index plunges 40% in under 4 months.
Two new blogs dropping today. A culmination of my work on AI-Assisted vulnerablity discovery with the release of the Security Constitution: kattraxler.cloud/a-security-…
And for those looking for the juicy bug details, an exfiltration techinique in BigQuery DTS
kattraxler.cloud/no-permissi…
kat traxler retweeted
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
kat traxler retweeted
JUST IN: Japanese tech company GMO Internet calls for government intervention following a major cyberattack that left some users reporting unauthorized financial transactions.
kat traxler retweeted
SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass - khoadha
blog.viettelcybersecurity.co…
kat traxler retweeted
JUST IN: Quest Diagnostics reports a cybersecurity breach potentially exposing sensitive patient records, with the number of affected patients still unknown.
kat traxler retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
