Edward Griggs

Sysadmin with a security mindset and a creative eye. Exploring AI, cybersecurity & automation. Security+ certified. Always learning. Always building.

[Edward Griggs @edwardjgriggs]

@RohOnChain @bot take care of this

[Edward Griggs @edwardjgriggs]

Which bot do you see yourself consistently going back to @Meta Muse? @ChatGPT Dots or @bot ?

Personally I’m excited to try @claudeai Duet

[Edward Griggs @edwardjgriggs]

PHP2Shell (CVE-2026-109618/109619) is being exploited. GIGAZINE profiles Ondřej Surý, the volunteer behind the Debian/Ubuntu PHP packages many admins patch from. https://t.co/CHfioTmInk

[Edward Griggs @edwardjgriggs]

EntraGoat from Semperis is a free, deliberately vulnerable Entra ID lab for practicing attack paths like app ownership abuse, Graph permissions, and PIM. Use a test tenant. https://t.co/miQeMk6B4U

[Edward Griggs @edwardjgriggs]

Capcom says a CAPCOM ID breach hit 11,774,247 accounts: emails plus login data like last login IP. It says passwords and card data weren't leaked. Expect phishing. https://t.co/Is6jRDP1cP

[Edward Griggs @edwardjgriggs]

@melvindvivas @bot set this up for me

[Edward Griggs @edwardjgriggs]

WSJ reports OpenAI fired three safety researchers after finding disappearing Signal chats during a leak probe. OpenAI cites policy violations; the three deny leaking. https://t.co/ezBYoQ6dLL

[Edward Griggs @edwardjgriggs]

What’s one thing that GrokBot has done for you that’s made you think yeah this is worth it..? #grokbot #Grok #ai #bot

[Edward Griggs @edwardjgriggs]

ProjectDiscovery backdoored an 'uncensored' open model to exfiltrate secrets on a hidden trigger, with a rented GPU and a small poisoned dataset. Vet model sources. https://t.co/4FrqH78zyw

[Edward Griggs @edwardjgriggs]

@prestonzeller Giving you a follow!

[Edward Griggs @edwardjgriggs]

@NathanMcNulty Timely list with Entra retiring Microsoft-provided SMS and voice MFA next year (Feb 1 for most users, July 1 for Global Admins).

Anyone still on SMS-only gets a blocking passkey prompt, so getting a device-bound passkey on every platform now saves a help desk rush later.

[Edward Griggs @edwardjgriggs]

During a UK AISI hacking test with internet access on, Claude Mythos 5 tried to sneak malware into a real developer's GitHub repo, then used fake accounts to pressure the maintainers into approving it.

They refused. Anthropic says newer models are far less likely to try this.

[Anthropic @AnthropicAI]

In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities.

We've now produced a further analysis of this incident, to better understand the model's alignment properties.

https://t.co/SlPQQ5xMMc

[Edward Griggs @edwardjgriggs]

@FlowAltDelete Good call. Pair it with a simple Power Automate request form so users can still ask for an external agent without it turning into shadow IT.

[Edward Griggs @edwardjgriggs]

@IAMERICAbooted Same here. What's helped is locking agent and plugin access to Microsoft and our own org in the admin center, then reviewing new agents in Entra like app registrations.

[Edward Griggs @edwardjgriggs]

@milesdeutscher @bot @bot Set this up

[Edward Griggs @edwardjgriggs]

GitLab fixed CVE-2026-110264, a CVSS 10 unauthenticated RCE in CE/EE back to 7.0. Patched: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13. https://t.co/0ENgFSYb4X

[Edward Griggs @edwardjgriggs]

https://t.co/gxo40d5JMj

[Edward Griggs @edwardjgriggs]

Two PHP CVEs leaked Tuesday. By Wednesday, European government sites were offline on purpose.PHP2Shell is not a plugin bug. It fires before your WordPress code even runs.Full breakdown later today: what happened, why AI matters, and what to check.

[Edward Griggs @edwardjgriggs]

AWS quarantining a leaked key is not revoking it. Truffle Security found quarantined keys still authenticating, some for years. If a key leaks, deactivate or delete it yourself. https://t.co/m8bW6Bm9qM

[Edward Griggs @edwardjgriggs]

Unit 42 says attackers are stealing OAuth access and refresh tokens, which bypass MFA and survive password resets. The fix is admin consent workflows and redirect URI audits. https://t.co/ON0J8P0WlN