AI offensive security at @RunSybil (prev. @BishopFox). security research. ccdc red team. tummy ache survivor.
Virginia, USA
Joined June 2013
- Tweets6.3K
- Following1.5K
- Followers10.4K
- Likes47.6K
i tried to subscribe to the encarta 96 encyclopedia updates, but sadly my email could not be delivered :^(
@MicrosoftHelps pls help
2
8
704
supremely talented team, very excited to see what these guys come up with!
Exciting announcement: I am launching a new AI-focused company today named Umbriel (@Umbriel_AI)! Excited to do some cool research in the space 😎
8
1,007
@rebane2001 don't know if you saw, but you have a cameo in the latest ladybird browser update!
2
497
spotted @NousResearch walking around NYC. real question is where can i buy one of these lights for my office too?
How in the world could @Cloudflare post this blog without crediting the amazing research from @hash_kitten and @SLCyberSec (@infosec_au) at all!?
blog.cloudflare.com/wordpres…
20
2,265
refreshing to see a sane and rational take in a frenzy of mythos-induced madness
There are a lot of hot takes about Mythos right now but what’s missing is the following:
Mythos is a genuinely great model that proves the hypothesis that reasoning capabilities scale supralinearly with model training time and data volume.
This has significant implications for security and I’m excited
how it feels not being a victim of a supply chain attack yet this week
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Incredibly proud to be a part of this team. I'm consistently blown away by the creativity, talent, drive, and humanity of everyone I work with.
The product is already finding mind-blowing vulnerabilities and delivering world-class outcomes, and it's something I truly believe in
if you're looking to work in the intersection of AI and offensive security, come work with us!
runsybil.com/careers
i 1000% could not vouch for @blastbots any harder if i tried
This quoted post is unavailable.
i love that there are viral slop repos out there posing as AI tools with 5,000 stars on github, and it's obvious that nobody has ever used it even once.
like yeah, i would LOVE to use a tool that stores every word as... a completely random number?
9
754
amazing opportunity to work with some of the best and brightest
it's end of year planning! open roles at our small team at
@conviction:
- engineering
- general creatives (experience, storytelling, design)
- investing
- always happy to have amazing operators camp with us
4
864