in an age of meatproxies, seeing this mini documentary about the demoscene is needed
youtu.be/PeZNLvD4mds?is…
"If programming and typing is your problem, maybe you shouldn't be programming"
Chaos from Farbrausch
youtu.be/PeZNLvD4mds?is…
"If programming and typing is your problem, maybe you shouldn't be programming"
Chaos from Farbrausch
0
1
2
514
Daniel Cuthbert retweeted
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smas…
Phrack 73 is coming soon!
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smas…
Phrack 73 is coming soon!
12
202
730
19,401
...I’m writing to inform you that your personal information was accessed without authorisation in a security incident at one of our marketing software providers.
The web is a mess. A shit show of poorly secured apps and services run by people who truly DNGAF about security
The web is a mess. A shit show of poorly secured apps and services run by people who truly DNGAF about security
5
1
30
2,415
MS Paint? no, you utterly heartless bastards. This vulnpocalypse needs to stop now. Think of the kids man
2
2
15
1,178
Daniel Cuthbert retweeted
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.
In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
679
1,338
12,814
2,287,826
Taken me the whole day but yeah our new /diagram func in RAPTOR is close to making understand the source, sink and dataflows more visual, alongside creating a mermaid diagram showing the areas you should focus your bughunting next
0
1
8
1,001
Daniel Cuthbert retweeted
🎙️ Black Hat Podcast RE:BRIEF, Episode 1 is now live.
Join Daniel Cuthbert, @dcuthbert, and Security Researcher Thaddeus Grugq, @thegrugq, for a candid conversation on agentic hacking, ransomware's impact on security, supply chain compromises, the future of cybersecurity research, and why fundamentals still matter.
From French supermarket fromage-gate, cheese hacks, to the coming "vuln-pocalypse," this inaugural episode explores what's shaping cyber today and what's next.
▶️ Watch now on YouTube: bit.ly/4zs9Z5N
🎧 Listen on your favorite podcast platform:
Spotify: bit.ly/4Aa4k42
Apple Podcasts: apple.co/4AcKpS3
#BlackHatPodcasts
Join Daniel Cuthbert, @dcuthbert, and Security Researcher Thaddeus Grugq, @thegrugq, for a candid conversation on agentic hacking, ransomware's impact on security, supply chain compromises, the future of cybersecurity research, and why fundamentals still matter.
From French supermarket fromage-gate, cheese hacks, to the coming "vuln-pocalypse," this inaugural episode explores what's shaping cyber today and what's next.
▶️ Watch now on YouTube: bit.ly/4zs9Z5N
🎧 Listen on your favorite podcast platform:
Spotify: bit.ly/4Aa4k42
Apple Podcasts: apple.co/4AcKpS3
#BlackHatPodcasts
3
7
12
5,958
Daniel Cuthbert retweeted
Today @_rybaz and I are publicly releasing all the materials for our Introduction to Harness Engineering for Vulnerability Research training we gave at @unpromptedconf last week.
Our goal was to teach the concepts we've been using to do much deeper security research and make ysis and red team engagements far more impactful.
The workshop can be found here: grahamhelton.github.io/harness-engine…
The slides can be found here: grahamhelton.com/talks/2026-unp…
Our goal was to teach the concepts we've been using to do much deeper security research and make ysis and red team engagements far more impactful.
The workshop can be found here: grahamhelton.github.io/harness-engine…
The slides can be found here: grahamhelton.com/talks/2026-unp…
15
299
1,529
62,124
Daniel Cuthbert retweeted
OH: “We’re an equal-opportunity team. We believe iOS deserves to be just as secure as Android”
CC @brucedang
CC @brucedang
19
23
596
49,276
moar updates on 100% local LLM RAPTOR. She's looking good, yes lots of changes needed but scaffolding is in place
4
0
9
912
I've also tweaked how we process a lot of findings based on severity. Also added:
Structured-lane tier filter
Better detection of what llms are available and usable
more to come but this is exciting
Structured-lane tier filter
Better detection of what llms are available and usable
more to come but this is exciting
1
0
1
372
Daniel Cuthbert retweeted
hands down the best talk I’ve ever seen. the slides are public now.
- Calif got permission from @OpenAI to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is ith the right prompting, skills, and primitives)
- the world is changing faster than expected
I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️
thank you so much for the presentation! @pwnlambda @brucedang @calif_io
- Calif got permission from @OpenAI to discuss working with the (unreleased) “astra-cyber” model
- researchers are struggling to believe some of these exploits are real
- 0/1-click exploit development is ith the right prompting, skills, and primitives)
- the world is changing faster than expected
I also loved the shoutout to the 2019 group facetime bugs and @natashenka’s FT work. everyone who worked on that will remember it forever ❤️
thank you so much for the presentation! @pwnlambda @brucedang @calif_io
Finally back home! Slides from "0clicks in an AI World," the talk @brucedang and I gave at @unpromptedconf, are now up:
github.com/pwnlambda/talk…
5
43
488
32,890
Daniel Cuthbert retweeted
'One of my favourite cyber security maxims is Halvar Flake’s observation that “All offensive problems are technical problems, and all defensive problems are political problems”' ncsc.gov.uk/blogs/one-does… (spotted at @unpromptedconf and reshared here)
17
110
503
24,198
Well worth grabbing a bevvie and watching this chat between Chris and Lorenzo on spyware.
I talked about spyware with @csoghoian at Mozilla Festival last week.
Chris was among the very first people who spoke out against companies like FinFisher and Hacking Team 15 years ago, helping raise the profile of a then little known industry.
youtube.com/watch?v=q4nVc1…
0
0
3
1,069
sooon my pretty, sooon....
open weights have gotten much better since I wrote RAPTOR, so much so, this weekend I set about making our standalone raptor chat client that leverages local LLMs only (no need for Sam to tell you your memory should be his)
Still lots of testing but..
open weights have gotten much better since I wrote RAPTOR, so much so, this weekend I set about making our standalone raptor chat client that leverages local LLMs only (no need for Sam to tell you your memory should be his)
Still lots of testing but..
1
2
14
1,483
what a dweeb.....
OpenAI CEO Sam Altman believes people owning RAM is wasteful, and that it belongs in data centers instead.
"From a global allocation perspective, actually, it’s quite terrible to have everyone have a bunch of the world’s limited supply of DRAM sitting in their own computer."
1
0
21
1,830