Akshay Suthar

Nihil timendum est! Opinions & views are solely my own

[JS0N Haddix @Jhaddix]

Next hacker summer camp giveaway!

3 seats to our “The Bug Hunters Methodology” course!

Like and share to be entered!

https://t.co/9QffdliW7l

[JS0N Haddix @Jhaddix]

Giveaway time!

Up for grabs is 3 free tickets to our “Attacking AI” live course!

Repost and like to enter!

https://t.co/cp2y6DDxqp

[Teknium 🪽 @Teknium]

Kimi made it to Hugging Face and is now open weights, with a paper too!

[Jensen Huang @JensenHuang]

For my first post, I’m sharing a letter @NVIDIA signed on why open models matter.

AI will transform every industry, power every company, and be built by every country.

Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty.

The world needs both frontier closed models and frontier open models.

https://t.co/AUKzoQ5Ikb

[Jensen Huang @JensenHuang]

Attackers have frontier AI. Defenders need a frontier AI ecosystem—the best open and closed models, force-multiplied by a global community.

During the Hugging Face incident, closed AI blocked essential forensics. An open-weight frontier model helped contain the intrusion.

That’s why we created the Open Secure AI Alliance.

[Arctic Wolf @AWNetworks]

Arctic Wolf recently investigated multiple intrusions in which threat actors exploited CVE-2026-0257 as an initial access vector, rapidly transitioning from perimeter compromise to domain-wide #Qilin ransomware encryption.

Learn more: https://t.co/YC0k3aYtH7

#EndCyberRisk

[Akshay Suthar @AkshaySth]

@leftcurvedev_ What inference engine have you found works best? Any specific setuo options? I’ve tried omlx/lm studio and my pp/s and tg/s are in the single digits 😭

[BAPS Public Affairs @BAPS_PubAffairs]

Less than 10 days after the desecration of the @BAPS Mandir in New York, our Mandir in the Sacramento, CA area was desecrated last night with anti-Hindu hate: “Hindus go back!” We stand united against hate with prayers for peace.

[Thomas Roccia 🤘 @fr0gger_]

I might be wrong, but I believe a TI analyst should be able to conduct a forensic investigation, build his own tools, and know how to reverse a malware. Otherwise, you rely heavily on other people's skills, and you're stuck with the first problem.

My 2c 🤓

[NilbinSec @NilbinSec]

Okay #badgelife fans. Let’s make it official! We hit 500 followers so to celebrate we are doing a giveaway! Next year @NilbinSec will be selling full size badges to help us give out even more FREE #SAO s. Follow, like, and retweet this post to enter, we will pick a winner 30Aug!

[🎙Cyber Distortion Podcast🎙 @DistortionCyber]

FREE SUMMER SWAG ALERT!!! BUCKET HATS ARE HERE!

GOING TO 1 PERSON WHO REPOSTS THIS ON X & SUBSCRIBES TO THE YOUTUBE CHANNEL.

FOLLOW SO WE CAN DM YOU!

[Akshay Suthar @AkshaySth]

@Intel_Ops_io @MichalKoczwara @threadreaderapp unroll

[Alex Xu @alexxubyte]

Explaining JSON Web Token (JWT) to a 10 year old Kid.

Imagine you have a special box called a JWT. Inside this box, there are three parts: a header, a payload, and a signature.

The header is like the label on the outside of the box. It tells us what type of box it is and how it's secured. It's usually written in a format called JSON, which is just a way to organize information using curly braces { } and colons : .

The payload is like the actual message or information you want to send. It could be your name, age, or any other data you want to share. It's also written in JSON format, so it's easy to understand and work with.

Now, the signature is what makes the JWT secure. It's like a special seal that only the sender knows how to create. The signature is created using a secret code, kind of like a password. This signature ensures that nobody can tamper with the contents of the JWT without the sender knowing about it.

When you want to send the JWT to a server, you put the header, payload, and signature inside the box. Then you send it over to the server. The server can easily read the header and payload to understand who you are and what you want to do.

Over to you: When should we use JWT for authentication? What are some other authentication methods?

–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/uc5M7CdXXC

[Akshay Suthar @AkshaySth]

@paigehacks Congratulations! It's a great read!

[Ironwood Cyber @IronwoodCyber]

Howdy hackers, are you ready for another chance to score an IWC Mark II Badge before @defcon?
Just follow @IronwoodCyber and retweet this tweet.

We'll pick a winner daily, plus a few extra on the last day 8/2 😉

Winners will be contacted via DM!

#defcon #dc31 #badgelife

[Brett Callow @BrettCallow]

Kudos to @RobertMLee and team for the speed and completeness with which this was disclosed. 1/

https://t.co/EG2ID8q18a

[Akshay Suthar @AkshaySth]

@Louishur Interested!

[vx-underground @vxunderground]

Hello,

If you're a person who possesses the recently leaked Vulkan files, and would be kind enough to share them with us, we would appreciate it. We would like to read them.

Thank you.

https://t.co/oZ3bl83BAp

[Nils Kuhnert @0x3c7]

If you're using @virustotal and @MISPProject a lot, you might enjoy the new release of vt2m. It now allows a pivot before ingesting the results into MISP. This way you can query a common subfile, pivot to parent files and ingest them as well as their, e.g., contacted URLs.