Ciarán Cotter retweeted
my spidey senses are telling me the labs are, as we speak, using unguardrailed versions of their unreleased models to systematically reverse-engineer ALL of the internet’s software, apps, and games, then feeding the reconstructed source code straight into their training pipelines while simultaneously building guardrails to ladder-pull the rest of us
741
1,993
24,969
1,819,466
🐵 MonkeHacks #102
Singapore, Prompt2Pwn, Budapest
monke.ie/p/monkehacks-1…
#bugbountytips #hacktheplanet #BugBounty
Singapore, Prompt2Pwn, Budapest
monke.ie/p/monkehacks-1…
#bugbountytips #hacktheplanet #BugBounty
0
3
36
1,752
A lot of Japan’s infrastructure is built on really old systems, so this doesn’t surprise me. The corporations tend to kick the can down the road and avoid dealing with it until this kind of thing happens
🇯🇵 Japan’s hacking problem has gotten so bad the Prime Minister is stepping in herself.
PM Sanae Takaichi is holding an emergency meeting with her ministers tonight, after a bunch of cyberattacks left Japanese companies leaking huge amounts of data.
The latest one hit GMO ackers got into its currency trading service and some customers found trades in their accounts they never made.
GMO is now asking the government to help take the attackers down.
And the awkward part is that Japan only just brought in new laws less than a month ago, letting it hunt down hackers before they strike.
Turns out the hackers weren’t too worried about them.
Source: Bloomberg / Writer: Daniyal
2
0
18
1,434
I won Best Chrome VRP Researcher at Bugswat Singapore! I also shared Best Meme with @inspector_amb. I’ll be talking (in abstract) about some of my exfiltration and guardrail bypassing techniques at NahamCon in California next month!
14
7
220
4,215
Ciarán Cotter retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.com
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.com
93
998
5,152
4,771,623
I’m liking this recent trend of people outside the bug bounty community calling out the low max bounties of some very large companies.
4
4
74
3,726
As someone who got an N/A yesterday because the company decided that my 0-day wasn’t their responsibility, limiting based on N/As is definitely not the right way.
@Bugcrowd is becoming the anti-platform.
Using N/A to calculate accuracy and limit reports is terrible. Soon, many researchers may not be able to submit reports.
How they use N/A:
• Took 20 days + fixed → N/A
• No time to understand → N/A
• Don’t understand scope → N/A
3
2
58
4,193
Ciarán Cotter retweeted
Introducing Gemini 4 Argon, our new frontier model, rolling out to cyber defenders starting today, and more widely as soon as possible. I am really excited by the progress we have made here. Argon is priced at $2 in and $10 out during introductory pricing!
1,030
1,044
14,776
1,646,688
🐵 MonkeHacks #101
Cork LHE, Moving, Prompt2Pwn
monke.ie/p/monkehacks-1…
#bugbountytips #hacktheplanet #BugBounty
Cork LHE, Moving, Prompt2Pwn
monke.ie/p/monkehacks-1…
#bugbountytips #hacktheplanet #BugBounty
2
2
47
2,078
Bug bounty these days is like:
"We regret to inform you that BigStinkyCompany is pausing all submissions until further notice. We're excited to add "subdomain.stinky.com" to our assets after this break, but we're lowering our Medium and Low payouts in line with industry standards"
"We regret to inform you that BigStinkyCompany is pausing all submissions until further notice. We're excited to add "subdomain.stinky.com" to our assets after this break, but we're lowering our Medium and Low payouts in line with industry standards"
5
1
72
3,679
I wish more tokens were spent on making existing software more efficient instead of generating new slop code
3
4
31
1,783