mcgrewsecurity.com | Senior Cyber Fellow at @martinfederal | Offensive Computer Security; AI; Photography; DJ
- Tweets 68,411
- Following 2,232
- Followers 17,991
- Likes 39,010
at knityak.com/collections/moon I have curated some nice spots on the moon
these are all created with actual topo data from NASA's LRO Lunar Reconnaissance Orbiter from the LOLA (Lunar Orbiter Laser Altimeter) instrument.
#spaaaaaaace #LRO #moon #knit #knitting #dither #dataknit #dataart
1
2
3
253
Dr. Wesley McGrew retweeted
Qwen4-27B spotted in Intel intel-xpu-kernels repo !
Work for Qwen4-27B support is already underway, this only means one thing and you know what that is.
LFGG @Alibaba_Qwen
Give us Qwen4-27B soon !
github.com/analytics-zoo/vll…
7
6
201
13,260
Dr. Wesley McGrew retweeted
I love all the people with zero cybersecurity experience lecturing everyone about cybersecurity.
15
16
192
9,543
Things are getting really tense in Starkville this week, with the assassination of Tina, a pet turkey
3
8
493
3T parameter open weights model! Wish I had something to run this on 😂
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model.
🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal.
🔹 Full-project coding: games in Unreal, Unity & Godot.
🔹 Excels at parametric 3D modeling in Blender & CAD.
🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%.
🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks.
Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API.
Open weights by Nov 4, 2026.
🔗 API: platform.kimi.ai
🔗 Tech blog: kimi.ai/blog/kimi-k3-1-pro
4
420
JUST IN: Palmer Luckey's genetically modified military dog startup, Warhound, comes out of stealth, aiming to create enhanced canines for the U.S. military.
Community note
This is NOT Palmer's company at all, his company Anduril is only supplying the tech for the dogs, and this is a wholly owed Collosal entiity
x.com/palmerluckey/s…
1
7
421
Dr. Wesley McGrew retweeted
AI is simply revealing how shaky arbitrary layered complexity is, or could be.
2
1
24
581
Can’t wait to run across one of those agentic swarms. I want in on whatever it’s using for free inference
1
12
605
Image generation in @lmstudio ?
2
549
Dr. Wesley McGrew retweeted
I will be speaking at @BSidesAugusta this weekend on rapid triage of Windows systems with @volatility 3! Please come say hello if you will be around.
1
4
3
1,027
PHP2Shell (CVE-2026-109618/109619) hit our MadPot honeypots on Oct 17, four days before disclosure.
Investigating? Start your timeline there, not at the advisory date. Patch to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 now.
aws.amazon.com/blogs/securit…
6
25
119
31,161
Vulnerabilities like this are not happening every other day. We can revisit that in six months or so as models get better 🤷
Those numbers about EOL PHP are not surprising, it’s not as popular as it once was (thank goodness). You’ll have a lot of breaches in older sites and apps for a short while, it’ll burn through the vulnerable endpoints, and it’ll fade to a level like log4j, eternal blue, and other remote exploits where it’s a common way to get owned, but not causing an “internet doomsday”
Idk I feel like you’re trying to play it down more than it is.
And the thing your missing is these are dropping every other day no once a year
2
2
14
1,178
The attacker would have to know about it, and use it to issue their malicious-but-checks-out certs, which nobody seems to have seen any indication of. So, I wouldn't say that this impacts "almost all" comms across the internet for the past year and a half.
I think there's the possibility for tightly targeted attacks on a small scale where CT logging/checking isn't enforced
Certs signed apr 2025 so they had almost 18 months where potential of easy MitM for almost all “secure” comms across the internet? I think that’s a pretty big deal.
I know it’s spilt milk but still …
1
2
777