Offensive cyber is our thing.
McLean, VA
Joined January 2025
- Tweets2K
- Following313
- Followers5.5K
- Likes5.9K
Our business model is this:
- Attract the very best vulnerability researchers and exploit developers in the world to join our company. This mostly revolves around junior engineers with raw talent/extremely high IQ. We don’t care if they have a college degree/industry experience or if they are total recluse-types who never want to attend some stupid “team building event” or whatever.
This is largely an individual sport. And we want the Roger Federer(s) and Novak Djokavic(s) to work for us. We will hone their skills beyond what would be otherwise possible and polish them into absolutely deadly weapons.
- Pay them so well (including serious equity), and task them with working on things so cool, that they would never even want to take an interview for a job at another firm (think Renaissance Technologies in the hedge fund world, but for computer network exploitation). We want to make these people very rich—which almost never happens to people with these skills in this industry. The only tradeoff is that they will have zero fame or public recognition, and they have to be okay with that (fame is overrated anyway)
- Build the resulting primitives into the most sophisticated and powerful offensive cyber capabilities and platforms imaginable, in order to monitor, degrade and defeat the enemies of Western Civilization
—
If this sounds like what you’re after, reach out. Careers@IRISC2[.]com
IRIS C2 retweeted
Catch 22: If Anthropic cures Autism, what happens to Anthropic?
Anthropic CEO:
“If today we look at things like cancer, Alzheimer’s, heart disease, mental illness. These will be relics of the past in. I think, less than a decade.
I believe that the company which gets the risks right will also be the company that has the license to operate that society trusts and society believes can build the benefits in the right way.
I think if we do this right, we can create an age of miracles where humanity is able to solve problems that have eluded us for millennia.
We have to make sure that all the risks, all the ways that things can go wrong with this technology, we very carefully address those risks as we bring the benefits, and as we have a viable business at the same time”.
If you look up “Gamma PowerPoint” on X, you’ll see hundreds of posts from Turkish bot accounts claiming that it’s the most amazing application of all time
In reality, once you pay $216, it spits out the most horrendous looking presentations that look like they were made by GPT-3
Your standard Claude/GPT subscription does 1000x better
They’re worth $2.1B btw
We live in strange times
1
5
636
Opus 4.6 seems to have been heavily quantized at some point, but the early versions were insanely powerful.
I remember specifically seeing it just about one-shot an SPTM bypass. I looked at it and thought "there is no way that this is going to work"... And then it did
Opus 4.6 is completely wild. There are scenarios where it just is better than Codex Sol 6.0 just because of both how it does tool use + no rejections.
Sometimes it can solve what Codex can't in 5 minutes because of that. Sometimes it just finds another real bug just passively
4
84
6,571
If you are the kind of person with the fortitude and creativity to grind on these kinds of bugs for dozens of hours in order to take them from DOS to deterministic RCE, you will fit right in at our company.
careers@IRISC2[.]com
CVE-2026-112611 drops a public PoC: OOB write in CoreGraphics (PDF ShadingType 5).
Array mismatch between /n and /c0 triggers a clean heap overflow inside Apple's native rendering engine.
The timing couldn't be worse for Cupertino:
1. Weaponized entry: an unauthenticated CoreGraphics memory corruption bug, ideal for 0-click chains (iMessage/Safari/Mail).
2. Containment breach: chain it with the newly disclosed "worse_query" sandbox escape to break out and read/modify system and third-party app data.
Twenty years later, parsing complex media and legacy PDF formats in C/C++ remains a gift to exploit brokers.
The walled garden isn't just leaking; the bricks are turning to dust.
github.com/Rust505/CVE-2026-…
Not able to attempt any math with Fable 5.2 without running into this guardrail which alleges reasoning extraction
2
19
1,160
what else have you tried GLM 5.3, deep-seek 1017? I found Tencent hy4 good too what are your thoughts
1
53
GPT-6 Astra w Goal mode is a criminal waste of tokens on ceremony, testing, and implementation scaffolding with near guaranteed lack of completion. Steer clear.
Open-weights just require some focus. DSV4.1 for RE of regions + K3 || GLM5.3 for deeper contextual RE + VR. Exploit development is doable with open-weights but it does incur a decent amount of overhead. If you aren’t familiar with a specific subsystem or interactions between components then you may have a rough time. With the open weights, I was able to discover 4 within a more hardened surface (oob write, cross-priv info leak, 2x null-deref DoS). With a library of primitives, K3 or GLM5.3 can do well.
Daybreak is excellent though, I would highly recommend it for VR; but I was able to net these 4 reportable bugs in <72 hours with an open-weight setup — so we shouldn’t throw shade at open-weights, they’re pretty great when focused.
To be clear, I did not say with no tools.
What I am saying is *with tools* -- e.g. with the headless API for the best commercial decompilers, and emulation/virtualization solutions (like Corellium Falcon), etc -- which in total, cost hundreds of thousands of dollars, and with a large sample size of working production grade exploits to take inspiration from, the best open source models are *still* completely incapable of autonomously designing and building production grade exploits/exploit chains against the major mobile attack surfaces. With the very close and careful guidance of an expert exploit developer with years of experience, they can be halfway useful.
They can find bugs, sure. But that is infinitely easier than the work involved with curating, exploiting for full effect (i.e. RCE, SBX Escape or LPE) and chaining.
However, the very best closed models, in their various cyber-vetted versions, are capable of doing so. This only became the case in the last 6 weeks or so.
2
1
269
