Mike Wilkes

world traveler, philosopher and sometimes jazz musician

[Aikido @AikidoSecurity]

Incident response usually opens with the "Who did this?" question. The recent AIs on the loose this summer kind of broke that question, because the answer might be nobody. @CharlieEriksen's new piece gets into it. 🧵
https://t.co/B3AnwJ0rJ1

[Mike Wilkes @eclectiqus]

@CharlieEriksen @AikidoSecurity You remind me of the ASCII animation that is apparently still running at:

telnet https://t.co/ImYAX4omnc

[Aikido @AikidoSecurity]

🔥 Introducing Aikido Machine, on-prem AI pentesting entirely under your control.

Attackers use AI to find and weaponize vulnerabilities faster and cheaper than ever. Now you can find them first, without your code ever leaving your network.

Aikido Machine is a GPU server that runs continuous pentests on your critical applications, fully within your premises. Built for the regulated industries, and powered by our acquisition of Milou to bring AI pentesting fully on-prem.

Offense is your best defense.

[Aikido @AikidoSecurity]

https://t.co/0ZmcxuFjJk

[Aikido @AikidoSecurity]

‼️ The popular npm package keyv is being actively compromised (127 million weekly downloads). The attacker is still pushing malware across packages right now.

Developing story.

[Aikido @AikidoSecurity]

The Hugging Face breach ran just over four days. Thousands of failed experiments buried the handful of actions that counted. Most of us can reconstruct an attack after the fact. Far fewer can act while it's still unfolding. Here are the four decisions that show which camp you're in. 🧵

[Aakash Gupta @aakashgupta]

The Matrix took its name from a 1984 novel written on a manual typewriter by a man who didn't own a computer. 42 years later, that novel finally gets its own screen.

William Gibson typed Neuromancer on a 1927 Hermes portable. He coined "cyberspace" before he'd ever logged onto anything. The book swept the Hugo, the Nebula, and the Philip K. Dick award in the same year, the only novel ever to take all three.

Then Hollywood spent four decades strip-mining it while calling it unfilmable. The Wachowskis lifted the matrix, the jacked-in hackers, the AI pulling strings behind a corporate veil. Every razor-girl assassin in sci-fi traces back to Molly. Johnny Mnemonic, an actual Gibson adaptation, flopped so hard in 1995 that studios treated his work as radioactive for a generation.

At least five directors attached and detached over the years. Chris Cunningham in 2000. Vincenzo Natali in 2010. Tim Miller at Fox in 2017. Each attempt died the same death. By the time the technology existed to film Neuromancer, audiences had watched its ideas in a dozen movies that borrowed them first.

The original became unfilmable because it looked like a copy of its own copies.

Now the timing loops back on itself. A story about a rogue AI maneuvering to escape its corporate constraints, written before the web existed, lands in January 2027 as the least speculative thing on television.

And one detail makes the whole arc perfect. When Neuromancer royalties came in, Gibson bought his first computer, an Apple IIc. Four decades later, Apple is the company putting his book on screen.

[𝕎𝕠𝕝𝕗 𝕋𝕣𝕒𝕚𝕟𝕖𝕣 @WolfTrainer_101]

CrowdStrike 月初发表blog，揭露新的提示词注入技术。本次新增18项注入技术，项目累计覆盖200多种不同的注入技术。CrowdStrike AI安全研究团队号称维护业内最大规模的提示词注入分类体系，提供了一个结构化的层级结构，清晰的展示了人工智能威胁的全部风险。

[Mike Wilkes @eclectiqus]

Check out my latest article: Just Alert on Real Issues (and other advice from the Hugging Face breach) https://t.co/kxiRx62wJu via @LinkedIn

[Kristi Yamaguccimane @TheWapplehouse]

Me: this THC drink ain’t shit

Me, 15 seconds later:

[Aikido @AikidoSecurity]

Ramen Club is now taking reservations for Black Hat 🍜❤️‍🔥

Find Aikido at booths #5720 & #5732 from August 4 to 6. Instant security, fresh memes, tea on tap, and the crew behind it.

[Mike Wilkes @eclectiqus]

IYKYK

[Aikido @AikidoSecurity]

Kimi K3, @Kimi_Moonshot's new open-weight model, launched this week, so we added it to the benchmark from our report: 14 models tested on rediscovering 26 known CVEs through our AI Code Analysis harness.

At pass@3, Kimi K3 rediscovered 23 of 26, matching the top GPT-5.6 variants at a lower cost per run, and well ahead of GLM-5.2, the other open-weight model in the set.

[ThePrimeagen @ThePrimeagen]

The new software dev cycle

[Aikido @AikidoSecurity]

Aikido Supply is here 🥋💜

From Anti Magic Quadrant Club to Infinite, every campaign we've ever shipped now has a home.

[Mike Wilkes @eclectiqus]

Practical (aka praktisch) advice on autodidactic pentesting...
https://t.co/WdQ73FOznI

[HackerOne @Hacker0x01]

Congratulations, @H4cktus, on being the latest researcher to celebrate the $1 million earnings milestone!

From quitting his restaurant job at 19 to 1500 bugs later and a million dollars, Hacktus shares his story.

Read the blog to hear about how he got started, what his take on AI really is, and his advice for those starting out.

https://t.co/HKMwubmN7R

[Aikido @AikidoSecurity]

❤️‍🔥 Aikido has acquired Root.

Together, we're uniting behind a shared mission to make it easy for developers to build with secure open source and tackle the growing threat of supply chain attacks. Open source is the foundation of almost every application in the world, and it has become the primary entry point for attackers. It needs patching, and it needs it fast.

Root takes an Agent-native approach to this. We're introducing Aikido Images and Aikido Libraries, where agents research, patch, and test open source vulnerabilities, delivering drop-in replacement libraries and container images that are vulnerability-free and without breaking changes. Every time a new CVE drops, a precise patch is ready to merge in under an hour.

We're also contributing backported fixes for critical, actively exploited open source vulnerabilities to the community across supported ecosystems.

Aikido Libraries and Aikido Images are already in production and available to all users.

[Jay in Kyiv @JayinKyiv]

A whole new level..

Russians complaining that Ukrainian Forces are now outsourcing drone operations to gamers all over the world by connecting hundreds of drones to a virtual server and inviting skilled drone operators to take out battalions, with cash prizes awarded for each.

[Opengrep @opengrep]

❤️‍🔥 Opengrep v1.23.0 is here.

This release adds Crystal support and guarded taint signatures, a more precise algorithm for intrafile taint tracking.

Highlights:
• Experimental support for the Crystal language.