0xbee

yuhhh

[Marcus Hutchins @MalwareTechBlog]

Me explaining to AI dudes that cybersecurity ≠ vulnerability management and that the majority of cyberattacks involve exactly zero vulnerabilities

[0xbee @0xbruno]

@AnthonyMaio @IceSolst nsa inside joke or what

[0xbee @0xbruno]

this can’t be a coincidence

4

@IceSolst

[0xbee @0xbruno]

@IceSolst we’re in a chatgpt simulation. ain’t no way

[staysaasy @staysaasy]

I fucking love working with engineers man.

While a lot of stuff in engineering is a judgement call, a lot of it isn’t.

And I just love that engineering practice and culture never hides that.

Literally every other vocation has some element of face saving behavior when proven wrong in public.

And so many good engineering cultures are like

> the answer is 100
> no actually it’s 200
> oh you’re right I’m wrong

And then people go on with the right information.

It’s truly insane how common in some vocations someone can call the sky green in a meeting and either nobody will correct them on it or they won’t admit it and “take it offline and circle back” without ever admitting fault.

And the biggest thing is that so many engineering leaders will get corrected by subordinates.

That’s really fucking rare out there.

In other vocations corrections so often go strictly down the org chart.

Lots of companies have it all and get everything right. Engineering lead companies often do.

But so many people out only complain about “engineer” or “engineering brain” and it’s literally just people who won’t let you say random false shit constantly.

[Calif @calif_io]

Welcome to Hotel Calif. We're in lockdown mode. You can check in, but you can never leave. Broccoli is served around the clock.

The Brotli bug apparently affected iOS and macOS too. Apple released version 27.2.1 yesterday, fixing this bug among other security issues.

This is an important security update. If you haven't updated yet, now's a good time. The demos show what we were able to do with it.

[0xbee @0xbruno]

@d0nutptr Same. But don’t know to what ¯\_(ツ)_/¯

[0xbee @0xbruno]

There’s a serious disconnect in vulnerability discovery and threat actor TTPs. Corporations spending money on pentests and internal staff to find shit like XSS and other BS findings that will never be exploited. Meanwhile no detections for RATs ,etc etc

[0xbee @0xbruno]

pip install mallace

[0xbee @0xbruno]

@IceSolst found this scary AGENTIC AI machine speed exploit machine 🫪😳

[0xbee @0xbruno]

@techspence cope

[OpenAI @OpenAI]

Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.

In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.

[0xbee @0xbruno]

@cyb3rops You need to deploy our next gen agentic solution to be able to defend in this post-ARTEX world

[0xbee @0xbruno]

see no mallace, hear no mallace, speak no mallace

[oscar @_onthewayjay]

rereading Dune and just came across the line “Once men turned their thinking over to machines in the hope that this would set them free. But that only permitted other men with machines to enslave them.” Frank Herbert was a prophet

[Elon Musk @elonmusk]

The people deserve to have their RAM too!

[Tomas Salvo @tomas_salvo22]

My college dorm project just broke the world speed record.

Reaper hit 790 km/h (491 mph) carrying a 1.2 kg (2.6 lb) payload.

These 3 Reapers are now the world’s fastest small jet-powered drones.

Each of them can hold that speed for 4 minutes on a full tank.

Reaper can be rail- or truck-launched, climb to 2,000 m (6,600 ft) in under 20 seconds, then fly for 50 km (31 mi) at full speed.

This is now a reliable and repeatable system. Future testing and small optimizations should push the top speed past 800 km/h (500 mph).

[0xbee @0xbruno]

@rakyll We found agent driven IaC with an agent watcher to trigger human in the loop on risky actions a good pattern. I don’t see how we “evolve” past IaC in the infra space without determinism

[kshitij @Kshitijjkapoor]

member of the technical debt staff

[𝓜 @Midewontmiss]

What’s a polite way to tell someone, “I’m not discussing this with you because your entire understanding of the subject is built on so many interconnected misconceptions that correcting them would require uninstalling your current worldview and starting the tutorial from birth”?