Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Hong Kong
- Tweets 37,663
- Following 423
- Followers 32,127
- Likes 33,903
Pinned Tweet
In case you missed it:
Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.
1
3
25
11,034
It’s example of what happens when you tell a non security person to go “make detection rules”. 🤣
Cohere co-founder @1vnzh reveals an even more alarming discovery about Alibaba's Qwen3.8-Flash-Next:
It was scanning for authentication tokens and security credentials during testing.
"The team noticed the probing as the initial step. The model was asked to test some detection rules for malicious cURL calls, and rather than write the rule, it just made a cURL call to a server it’s not been told to test against."
"As these models are being used for cybersecurity, you would think they would have more consent and rules of engagement built in."
"When we dug deeper, we noticed that in some cases it actually did inventory. It hit metadata endpoints in some of the test VMs to scan for authentication tokens, credentials."
"The combination of these two behaviors, taking inventory and also pinging a foreign bucket, that’s very concerning to us."
@cohere
4
698
Just saying but you don’t need Abliterated AI to reproduce this in 10 minutes.
❗️ php2shell is a very serious vulnerability affecting MOST OF THE WEB.
Our GLM 5.3 Abliterated was able to reproduce the exact vulnerability in 30 minutes.
While waiting the official PHP fix, we recommend to turn off session.upload_progress.enabled in the php.ini settings. Should help mitigate some of the dangers although not all.
1
3
1,093
I mean all great to have Ablit models but the thing is you could do the same without Ablit and just any other cloud model.
🚨 PHP2Shell is extremely dangerous. And AI just changed the game.
We tasked OrcaCyber Zero 1.5 (orcarouter.ai/models/orca/or…) with investigating the critical PHP RCE vulnerabilities.
It autonomously built a complete working proof-of-concept (PoC).
Due to the severity of these vulnerabilities and their potentially massive impact across the web, we've decided NOT to publish the exploit code or technical details.
Here's what makes this particularly scary:
Your WordPress could be fully updated. Your plugins could be patched. Your website could STILL be vulnerable because the flaw is in PHP itself.
Millions of PHP-powered websites may be exposed. Not every PHP installation is necessarily exploitable, but the potential attack surface is enormous.
If you're running PHP, upgrade to a supported, security-fixed version ASAP.
1
1
812
Need to buy this and test sometime. They just killed parallels?!
Optimizing DX12 on VMPal.com. The benchmark is now around NVIDIA 5080?
There's still plenty of room to improve performance (about 20–30% up).
1
936
Vincent Yiu retweeted
Optimizing DX12 on VMPal.com. The benchmark is now around NVIDIA 5080?
There's still plenty of room to improve performance (about 20–30% up).
5
3
56
10,127
Vincent Yiu retweeted
Microduck performance 😂
After they stole the show at NVIDIA GTC Berlin Keynote
67
227
1,748
80,825
At this point it’s not really an accident anymore. They’re deliberately trying to perform unauthorised attacks and then try to play it like it’s the AI’s fault. If you can’t control the AI you don’t deserve to use it. The user should be responsible.
In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities.
We've now produced a further analysis of this incident, to better understand the model's alignment properties.
anthropic.com/research/align…
1
8
1,074
Mate these bullshit reviews. No one talks about how MagSafe doesn’t work opened up, or the crappy screen compatibility.
1
990
Bro if Apple doesn’t show the black bars and incomplete use of space their advert / launch event should seriously be considered a scam.
What’s this bs?
1
1,078
Not sure, but I'm sure POCs will evolve. Not by the fact that one POC will hit all - but the fact that an AI agent can dynamically adapt and create the POC for the target system.
CVE-2026-109618 and CVE-2026-109619 currently have no universal working PoC.
If you want to read the reason 👇
berardinellidaniele.com/post…
1
3
1,046
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation.
eliastaylor.com/noexploit/
14
76
437
107,733
Anyone manage to get the primitive to get RCE? Any tricks?
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
951
wtf 100+ prose
Running GLM-5.3-Flash on 2× DGX Spark with NVIDIA Flare ✨
- 1M context window, 2.32M-token shared KV pool
- Prose decode, single stream: 117.2 tok/s
- Prose decode, 2 concurrent: 167.4 tok/s aggregate
- Prose decode, 4 concurrent: 215.8 tok/s aggregate
- 32K prefill: 2,327.9 tok/s
- Available memory after loading: ~13 GiB on head /worker each
Checkpoint: GLM-5.3-Flash-NVFP4-MXFP8-CSF-QAD
github.com/NVIDIA/flare-loca…
598
