David Barroso

I'm Winston Wolfe. I solve problems. Yersinia author. Founder, CounterCraft @countercraftsec

[David Barroso @lostinsecurity]

Muchas gracias, es un honor recibir este Premio. Es fantástica y puntera la comunidad de ciberseguridad en España y no cabe duda que el @CCNCERT ha sido uno de los principales contribuidores. Vaya sorpresa más bonita!

[CCN-CERT @CCNCERT]

@dsn Finalmente, se ha hecho entrega del Premio a la Trayectoria Profesional en Favor de la Ciberseguridad a David Barroso @lostinsecurity, CEO de @countercraftsec #XVIIJornadasCCNCERT #VJornadasESPDEFCERT ¡Enhorabuena!

[haroon meer @haroonmeer]

I’ve mentioned this before: this is one of the oncoming trains for corp-security. We’ve long failed at least-privilege, but weren’t often punished for it.

Helen in HR (or Bob in accounts) didn’t know what to do with the extra perms they didn’t know they had.

Their agents will.

[Brandon Carl @brandonjcarl]

Earnings Before Tokens

[Minh Nhat Nguyen @menhguin]

glad to know Mythos' safety concerns have been addressed right as Anthropic also secured tens of billions in inference compute 👍

[Anthropic @AnthropicAI]

We've raised $65 billion in Series H funding at a $965 billion post-money valuation, led by @AltimeterCap, Dragoneer, @Greenoaks, and @sequoia.

This investment will help us advance our research and expand our capacity to meet growing demand for Claude.

[ClaudeDevs @ClaudeDevs]

Opus 4.8 is live in Claude Code today.

A few things worth knowing: 🧵

[David Barroso @lostinsecurity]

@soy_capo Si, 100% de acuerdo. Me refería al abuso de la palabra, no al hecho en sí.

[David Barroso @lostinsecurity]

Me parece excelente por fin discutir sobre tecnología en Europa, pero nos estamos pasando un poco usando las palabras 'soberanía digital,' 'soberana', etc. Muy similar a lo que ocurrió con 'cooperación público-privada' :)

[Brandon Carl @brandonjcarl]

Very interesting data across 2,444 companies.

82% of tokens are spent on AI-generated bugs, rework and review friction.

[Philo Groves @PhiloGroves]

GPT 5.5 found a 27-year-old RCE introduced in April of 1999. I've triple-checked the flow and commit history, it's real.

Can't wait to responsibly disclose!

[David Barroso @lostinsecurity]

This

[Juliano Rizzo @julianor]

AI attackers have terrible OPSEC.
Use it against them.
Hallucinate exposed services. Waste their tokens. Seed prompt-injection traps, canaries, and honeytokens where attacker LLM will read them.
Have fun.

[Thomas Rid @RidT]

Periodic reminder: the Shadow Brokers, masterful curators of one of the most devastating technical intelligence leaks ever, will turn ten years in August — and we still don't know who they were.

[Dave W Plummer @davepl1968]

I'm pleased to announce that, when combined with my phone, my PDP-11 has achieved a storage capacity of 128.01GB!

[gabe @allgarbled]

I made a /seppuku skill for my Claudes for when they make an unforgivable mistake, and now they use it spontaneously without me asking.

[Ansem @blknoiz06]

what in the black mirror episode is this

[𐌁𐌉Ᏽ 𐌕𐌉𐌌𐌉 @OrevaZSN]

I came across a theory that AI is starting to make more mistakes because the internet is increasingly polluted with AI slop. The idea of AI cannibalising itself into obscurity is one of my favourite things ever. I hope it is true and I hope it becomes impossible to fix.

[Polymarket @Polymarket]

JUST IN: Iran declares it will not charge tolls in the Strait of Hormuz, will instead charge “environmental protection fees”

[(Stephanie) Slade @sladesr]

Congratulations, Twitter is good again.