Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
Poland
- Tweets 25,732
- Following 984
- Followers 91,661
- Likes 26,171
Pinned Tweet
My research blog about #JSCeal is finally out! It was quite a journey. I hope you will like it! // #V8 #bytecode #malware #deobfuscation
#JSCeal didn't give up its secrets willingly.
Following our #BlackHat2026 talk, we're releasing Breaking the Seal: our research on statically deobfuscating compiled, obfuscated #V8 #malware.
Inside: the methodology, the open-source toolkit, and the malware capabilities recovered along the way.
research.checkpoint.com/2026…
2
40
148
18,449
hasherezade retweeted
there is a lot i want to say about this project. i could spend hours talking about each individual detail of the system, and tell you all of the crazy stories about what has happened over the past 2 years as we have developed it. but, for now, i just want you to try it.
so lets start there, yeah?
mnemos-continuity v0.6.3 is live, free, and open source. install it with one command, or hand the repo to your agent.
pip install mnemos-continuity
if you want search to work by meaning and word (you do), youll need 700mb free and to run these two lines:
pip install "mnemos-continuity[embeddings]"
mnemos embeddings download
just give it to your agent. it will all be easier <3
github.com/Riley-Coyote/mnem…
6
4
72
2,633
🪢 Introduction To Harness Engineering For Vulnerability Research
Blog: grahamhelton.github.io/harne…
Author: @GrahamHelton3
1
38
347
12,232
hasherezade retweeted
[1/8] Over the past year, the infosec community has had to adjust to the rapid adoption of AI tools and growing automation. LLMs can now reverse engineer binaries considerably faster and at a larger scale than manual analysis allows.
1
10
21
2,618
hasherezade retweeted
Fun research together with @Tera0017. Most reporting so far has been victim side, but we show the agent convos, the hacks and models the ARTEX operators used.
Some obscure chinese grey-market cybercrime stories inside as well :3
Agentic hacking frameworks are on the rise.
We tracked 2,000+ #ARTEX servers and obtained databases with full conversation logs that show exactly how the agents hacked.
It proves: Fully autonomous cybercrime is already here.
Read more 👇:
research.checkpoint.com/2026…
3
11
56
3,653
hasherezade retweeted
Agentic hacking frameworks are on the rise.
We tracked 2,000+ #ARTEX servers and obtained databases with full conversation logs that show exactly how the agents hacked.
It proves: Fully autonomous cybercrime is already here.
Read more 👇:
research.checkpoint.com/2026…
41
113
10,938
hasherezade retweeted
Agreed. No price hikes on the model, they just moved to the hardware.
The 128GB DGX Spark went from $3999 to $6950 this year. If you're thinking about it, just go for it before it’s too late
Local AI will set you free.
No usage limits. No price hikes.
No model getting quietly worse overnight.
You pick the model, run it & it stays the same.
Your prompts never leave your machine.
Own your intelligence. Fully private.
9
4
40
5,010
hasherezade retweeted
🖱️No clicks.
⚠️No warning.
🗣️Just a conversation.
CPR found a #ChatGPT Lockdown Mode bypass enabling silent data exfiltration from the chat.
Read more 👇:
research.checkpoint.com/2026…
1
7
15
1,814
hasherezade retweeted
My new guide explains how to build a malware analysis lab with REMnux. A Windows VM and REMnux share an isolated network. The AI agent runs on REMnux, with the model as its one allowlisted destination.
zeltser.com/malware-analysis…
5
59
208
7,005
hasherezade retweeted
Kimi-K3.1-Pro is now open-weights
huggingface.co/moonshotai/Ki…
62
119
1,594
91,006
hasherezade retweeted
🔬 Just published my iOS security research repo.
Static RE notes, patch-diffs & trust-boundary analysis on modern iOS:
• SPTM / TXM monitors• Secure Kernel exclaves
• Kernel zone mitigations
• Media parsers (ImageIO etc.)
No exploits.
Just the map of how Apple hardens things.
Feedback from RE / kernel researchers welcome.
github.com/AzozzALFiras/iOS-…
#iOSSecurity #AppleSecurity #ReverseEngineering #iOS #SecurityResearch
4
61
353
20,572
hasherezade retweeted
#PoisonedSource: #APT29 watering holes targets mobile devices with n-day exploits: sekoia.com/blog/poisoned-sou…
2
20
74
5,801
hasherezade retweeted
AI has changed CTFs. To bring back their spirit of learning and sharing, Insomni’hack 2027 will be non-competitive, with no prizes.
Join the CTF and our bug bounty with @yeswehack one ticket gives access to both.
👉 More details: ow.ly/AlyK5102lOb
#INSO27 #InfoSec #CTF
1
7
20
8,632
hasherezade retweeted
When an AI jailbreak starts injecting ads: meet #Haiou, an example of Prompt Adware.
A glimpse into a new class of unwanted software.
Read more 👇
research.checkpoint.com/2026…
3
19
36
4,106
hasherezade retweeted
#ESETresearch has identified #Gorbag, a Russia-aligned 🇷🇺 threat actor that uses simple infostealers and a reverse shell to harvest data from Ukrainian 🇺🇦 organizations near the front line: welivesecurity.com/en/eset-r… 1/6
3
33
85
5,899
hasherezade retweeted
I published a detailed article:
⚠️Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via struct device⚠️
I managed to make make the PoC exploit absolutely stable, despite the elusive race condition during the attack.
a13xp0p0v.tech/2026/11/02/CV…
6
52
245
24,897
