LogicalTech

DevSecOps pretendgineer. Cyber sweatshop architect or just another network janitor cleaning up the Super Intelligent slop clogging up the pipes.

[daksh @daksh0x]

banger tshirt idea

[LogicalTech @RealLogicalTech]

@anton_chuvakin Ah what the hell it’s end of the year, let’s blow the budget margins on datacenter and AI rigs!!

Said no one, never

[LogicalTech @RealLogicalTech]

The OpenAI waahmbulance trying desperately to squeeze PR out of this pretending they’re behind it all. Disgusting really. But also extremely on brand for our modern AI labs

[OpenAI @OpenAI]

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.

Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.

Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.

This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
https://t.co/TW3jrSbB3f

[LogicalTech @RealLogicalTech]

@S1r1u5_ It’s just money, who cares. Can always make new money.

[HD Moore @hdmoore]

If you're looking for the most detailed AND *entertaining* way to read about the php2shell bugs, the Calif post is epic: https://t.co/9bg670ujNc

[LogicalTech @RealLogicalTech]

@HackingLZ Who would win? Huge agent swarm.. or one little Fail2ban boi

[Kostas @Kostastsale]

I used Opus 5.5 on max and GPT-6 Astra for 5 days straight and I reversed engineered Elastic Security and extracted all the rules. I made them available here:

https://t.co/fGAoNleFEW

You’re welcome.

[LogicalTech @RealLogicalTech]

@ClementDelangue @netflix @OpenAI @huggingface Ah. Same as the ”science educator” Kurzgesagt did in their Youtube video about it. They have 25M subscribers … https://t.co/BMVR534JSA

[LogicalTech @RealLogicalTech]

@vxunderground Goopverse

[LogicalTech @RealLogicalTech]

@UK_Daniel_Card @AndrewCurran_ @0xocdsec But lately I've started thinking all of these AI startups are just yoloing and hoping to cash out. They all seem to have couple of devs who just vibe it all and bunch of business folks who pump the hype. That's all. Nothing resembling security or even structured IT

[LogicalTech @RealLogicalTech]

@UK_Daniel_Card @AndrewCurran_ @0xocdsec I guess no one does the basics anymore.

1) No preparation. No IR plan at all? Nothing? No idea at all?
2) Identification. Surely after 24h you need to have an idea? Hypothesis? Some dude just guessing?

But no, it's like straight to:
99) We need agents that don't refuse to cyber

[Juha Hakala @juhakala3]

Muistuta taas: jos joutuisimme sotaan, olisi Suomen kiireellisin tehtävä tuhota Muurmannin rata, että amerikkalaiset eivät pysty sitä kautta lähettämään apua Venäjälle.

[annie @soychotic]

“You look amazing, what’s your secret?”

UNIX and vim ❤️

[LogicalTech @RealLogicalTech]

We now know how the seeds of the NIST elliptic curves were generated
https://t.co/q33ZC4KzRy

[LogicalTech @RealLogicalTech]

@merill @UK_Daniel_Card But! I have sent, and successfully phished creds and even MFA codes during stupid red team gigs where customer pays for "real intrusion" test.

Always try to tell customer to not run those tests and let us spend time fixing their filters/DNS instead, but..

[LogicalTech @RealLogicalTech]

@merill @UK_Daniel_Card This is actually quite close to reality. Except I auto-filter the corporate phising because they have obvious headers. So I don't "see" them either.

Never received Teams/SMS/Signal phishing either. Quite sad about this.

I've received a few fake Discord mesages though!

[Spud @SpudSecurity]

Why you should hire Spud for your company:

- extensive knowledge in multiple security fields including SOC/IR, Incident Management, Threat Hunting/Insider Threat, Threat intelligence, engineering and more.

- over 12 years of experience in tech with nearly a decade of that in cyber

- Spare time I’m active in multiple local cybersecurity groups and regularly attend industry conferences even on my own dime.

- tinkers with electronics in my spare time including Embedded systems.

- very friendly and lovable

- long, tan, handsome

- has a cool cat

- loves trains

[LogicalTech @RealLogicalTech]

@LiveOverflow @HackingLZ But this also requires strong sales pipes built for both so avoid "yoinking" people to roles they don't want to work with - which happens if one part is overloaded and the other has idle time

[LogicalTech @RealLogicalTech]

@LiveOverflow @HackingLZ It's not 100% solution of course and sometimes roles get mixed and you can't do stuff in a vacuum, but it does allow specialization and gives people options based on their personal preferences