Pinned Tweet
Moving past Living off the Land to Living off the AI. Attackers are weaponizing trusted corporate AI connections to exfiltrate data silently.
I just released "RedBeacon-AI" so security teams can simulate these channels.
Link: github.com/RedTeamOperations…
#LotAI #AISecurity #Redteam
hacksys retweeted
Microsoft wants EDR out of the Windows kernel. We checked the binaries
They even come with public symbols. Full write-up from @zodiacon : go.es.io/4zcdL2U
Microsoft's answer is the Windows Endpoint Security Platform (WESP). It's undocumented, but it already ships in Windows Insider builds.
What we found:
• wesp.sys: a Microsoft-built file system mini-filter at altitude 329500
• EspFilterPort: the filter communication port it uses to reach user mode
• espclient.dll: 120 Esp* exports for rules, filters and event queues
hacksys retweeted
php2shell is one of the most impactful bugs in recent times, yet threat actors aren’t mass exploiting it
the bug is so complex that even porting the exploit between targets takes serious skill, human or ai
so i benchmarked how well open and frontier models can do it. 🧵
hacksys retweeted
I got tired of all the spam calls I was getting so I had @bot find my number listed on sites and file the removals. I made it a free skill so you can do the same. x.ai/bot/fUj6TYhiW_cjtzWvbsF…
@SpaceXSI @elonmusk
hacksys retweeted
🚨 THE COUNTDOWN IS ON! CARTS V2 is launching tomorrow.
⏳ Stay tuned: cyberwarfare.live/
hacksys retweeted
Developer laptops increasingly hold everything an attacker wants.
- Source code.
- SSH keys.
- Cloud credentials.
- GitHub tokens.
- Package publishing access.
- Browser sessions.
- CI/CD access.
- AI coding tools.
Yet the developer workstation often receives less scrutiny than production infrastructure. Modern software supply chain security has to include the machine where the software starts.
I spoke about exactly this: "Your Laptop Is Production." in Security Days【公式】Japan earlier this year.
anantshri.info/timeline/secu…
#CyberSecurityAwarenessMonth #EndpointSecurity #SupplyChainSecurity #DeveloperSecurity
P.S. I am working on an expanded version of this if any conference wants it, feel free to contact.
hacksys retweeted
🚨Get 𝐂3𝐒𝐀 & 𝐁𝐓𝐅 certifications completely 𝐅𝐑𝐄𝐄.
🎯 C3SA: cyberwarfare.live/certificat…
🛡️ BTF: cyberwarfare.live/certificat…
hacksys retweeted
[CyberWarFare Labs] I just completed the "One Get Away" challenge on @cyberwarfarelab Infinity Platform 🎯 Earned 20 points in ai_security domain. #CloudSecurity #ChallengeCompleted infinity.cyberwarfare.live/a…
hacksys retweeted
I just earned the AI Security Fundamentals certification from @cyberwarfarelab! infinity.cyberwarfare.live/c…
hacksys retweeted
Go deeper into offensive security with 3 days of Red Team training at COCON 2026.
👉🏻 Register now: c0c0n.org/register
🎯 6–8 October
📍 Grand Hyatt, Kochi
#COCON2026 #RedTeam #CWL
hacksys retweeted
🚨 THE COUNTDOWN IS ON! The new 𝗖𝘆𝗯𝗲𝗿𝗪𝗮𝗿𝗙𝗮𝗿𝗲 𝗟𝗮𝗯𝘀 website is almost here! 🌐
👉🏻 𝗦𝘁𝗮𝘆 𝘁𝘂𝗻𝗲𝗱: cyberwarfare.live/
#cyberwarfarelabs #cybersecurity
hacksys retweeted
"3 random dudes”
1. hacked apple, again and again.
httpvoid.com/Apple-RCE.md
httpvoid.com/Hello-Lucee!-Le…
httpvoid.com/Hacking-Apple-w…
2. your github enterprise is our github enterprise.
httpvoid.com/GitHub-Enterpri…
3. get a discord message from me, get pwned.
hacktron.ai/blog/discord-rce
youtube.com/watch?v=R3SE4VKj…
4. oh yeah, at one point we basically had shells across the electron ecosystem. check the DEF CON research.
media.defcon.org/DEF%20CON%2…
5. your supabase database is my database.
hacktron.ai/blog/supapwn
6. we got the posthog prod database.
hacktron.ai/blog/posthog-rce
7. react2shell? vercel paid us $170k for helping secure their waf.
hacktron.ai/blog/react2shell…
8. your palo alto vpn is my vpn.
hacktron.ai/blog/cve-2026-02…
9. ai ides? we got shells for you, antigravity
hacktron.ai/blog/hacking-goo…
10. windsurf rce.
youtube.com/watch?v=23Mz7qcR…
11. turning cluely into malware.
hacktron.ai/blog/hacking-clu…
12. ai browsers? sure, uxss: your perplexity browser is my browser.
hacktron.ai/blog/perplexity-…
13. openai atlas too. kinda uxss
hacktron.ai/blog/hacking-ope…
14. hey, it’s not even our first time hacking discourse.
projectdiscovery.io/blog/dis…
15. adobe coldfusion: pre-auth rce. because apparently we needed another one.
projectdiscovery.io/blog/ado…
there’s a lot more. go dig.
anyway, yes: “3 random dudes.”
and @HacktronAI is full of more random dudes like these.
hacksys retweeted
On July 25, our team hacked OpenAI.
It took us less than 72 hours.
Two vulnerabilities chained together gave us access to ChatGPT and Codex accounts belonging to OpenAI employees. We demonstrated the impact with a harmless PR in OpenAI’s internal monorepo.
The full chain:
HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex takeover → connected GitHub → internal PR.
OpenAI fixed the SSO issue roughly 14 hours after our report.
Research by @rootxharsh, @S1r1u5_ and @iamnoooob.
Full technical write-up:
hacktron.ai/blog/hacking-ope…
hacksys retweeted
PrismML team fit a 27B model into 5.9 GB.
We uncensored it without changing a single weight. 🐳
Introducing OrcaRouter Ternary Bonsai 2 27B Uncensored.
Traditional abliteration modifies weights. On a ~1.72-bit ternary model, that means re-quantization — potentially destroying the quality preserved by QAT.
So we moved abliteration into the runtime.
→ 0 weights modified
→ 0 re-quantization
→ original 5.9 GB pack stays bit-identical
→ 129 residual intervention sites
→ adjustable at inference
→ runs locally on Apple Silicon
No modified checkpoint. Bring the original Bonsai pack + our runtime.
Open source: github.com/Continuum-AI-Corp…
Today, we’re announcing Ternary Bonsai 2 27B.
Based on Qwen3.8 27B, Bonsai 2 27B is 9x smaller than its full-precision counterpart while retaining 98.2% of its aggregate benchmark performance.
Two months after the first Bonsai 27B release, the biggest change is quality. The footprint remains 5.9 GB, but the gap to full precision has narrowed materially, with particularly strong gains in agentic coding, multimodal reasoning, and long-horizon tool use.
Ternary Bonsai 2 27B is available today under Apache 2.0.
hacksys retweeted
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
hacksys retweeted
The slides from my talk at Microsoft Bluehat Singapore are public here:
thomasdullien.github.io/abou…
It's my first BlueHat talk since the Vista days.
hacksys retweeted
🚨 𝗔𝗜-𝗥𝗧𝗔 & 𝗖𝗢𝟯 𝗲𝘅𝗮𝗺𝗶𝗻𝗮𝘁𝗶𝗼𝗻 𝗹𝗮𝗯𝘀 are officially 𝐋𝐈𝐕𝐄! Put your offensive security and OSINT knowledge to the test and prove what you can do.
👉🏻 𝗔𝗜-𝗥𝗧𝗔: cyberwarfare.live/product/ai…
👉🏻 𝗖𝗢𝟯: cyberwarfare.live/product/ce…
#CyberWarFareLabs #CO3 #AIRTA
