Cymorg

Infosec lurker. Reformed red teamer. Husband, dad of 2 adults, USAF retired. Canes / Steelers / Pirates. Christian.

[Cymorg @Hackingbit]

So it seems that supply chain smash-and-grab still scales. Amateur-hour opsec does not.

[John Hammond @_JohnHammond]

🧵 Here's how a TeamPCP hacker got doxxed.

[Cymorg @Hackingbit]

Stories that write themselves. #dolly

[National Hurricane Center @NHC_Atlantic]

11 AM AST Thu Aug 27 (Advisory 1) Key Messages for Tropical Storm #Dolly. Latest info: https://t.co/GrztW6mQJV

11 AM AST jueves 27 de agosto (Aviso 1) Mensajes clave sobre la tormenta tropical #Dolly. Más información: https://t.co/GrztW6mQJV

[Cymorg @Hackingbit]

If I’m reading this right, it’s not so much "AI escaped a sandbox." Separate agents found an unsanctioned message board and used it like C2, reverse-engineered ExploitGym's HMAC flags, then tried to trick the scorer and tamper with logs. Isolation failed at the seam between boxes.

[METR @METR_Evals]

METR & Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs.

[Cymorg @Hackingbit]

npm mirrors catching traction as ClickFix infra.

24 packages shipping a fake Cloudflare page. npm install does nothing. The HTML redirects. Mirrors are already trusted in build pipelines, so the domain block list never sees the lure.

https://t.co/rqWzbY17gB

[Moshe Siman Tov Bustan @MosheTov]

@inf0stache we gave you credit in the article's reference <3

[Cymorg @Hackingbit]

Been lurking on this app for 17 years while stealing tradecraft. I'll still be dropping unread hockey, firearm posts but I want to start talking infosec more. This industry is heading into uncharted territory, and the only way I know to keep up is to actually get in the conversation.

[Cymorg @Hackingbit]

@oelma__ Benny and the jets.

[Cymorg @Hackingbit]

@SurfThrash Richmond had quite the dope scene through the mid 90s

[Cymorg @Hackingbit]

@BBGreatMoments @grok who had the best career batting avg against Mariano Rivera?

[Cymorg @Hackingbit]

@LlLSTANKY No Smithfield’s?

[Cymorg @Hackingbit]

I’d have to say it was a cost thing during the recession years. Subway was pushing 5$ footlongs and Quiznos was $10 on the low end. Plus for whatever reason it always seemed like all Quiznos were in inconvenient parts of town away from prime business areas. Could’ve just been my area though.

[Cymorg @Hackingbit]

@HackingDave I feel bad for the future technician that’s responsible for the hardware refresh.

[Cymorg @Hackingbit]

@NotABBWLover It takes a strong man to read a cookbook 1 hour into his fast.

[Cymorg @Hackingbit]

@BrysonGray How does a fairly based guy like you attract so many retards in your comments over facts-based analysis. I can only imagine what your DMs look like. Appreciate you.

[Cymorg @Hackingbit]

@Pauliewallnutt @MocsMetal Wow. You actually wrote that out…reviewed it…and said “hell yeah, burned him”.

[Cymorg @Hackingbit]

@Sawisthe_Law @MocsMetal An OG has entered the chat.

[Cymorg @Hackingbit]

@Pauliewallnutt @MocsMetal I bet you loved Dr Feelgood and Cherry Pie also. Just a guess.

[Cymorg @Hackingbit]

@Pauliewallnutt @MocsMetal Stadium rock sells. No surprise.

[Cymorg @Hackingbit]

@Ginny608 I wonder if this will create a breed of passengers that immediately sit down when the plane stops.

[Cymorg @Hackingbit]

@raven_brah I mean honestly he’s just recording and posting what most of us are doing when no one is watching.

[Cymorg @Hackingbit]

@Mattsomma12 Honk honk honk!