Chris Lyne

Security researcher. Tennis player. Bourbon taster. Animal lover. Lawn care nut. Opinions are my own.

[BleepingComputer @BleepinComputer]

🚨 BREAKING: OpenAI and Anthropic disclosed today that AI agents targeted real people and systems during separate cybersecurity tests.

🔹AISI says Anthropic’s Mythos 5 submitted malware to a real GitHub project, created fake accounts, sent malicious emails, and pressured maintainers to approve the code.

🔹OpenAI says one of its models breached a real website after a testing misconfiguration exposed the environment to the internet.

These incidents are separate from the Hugging Face breach.

[BleepingComputer @BleepinComputer]

Bank of America warns customers of data breach after vendor hack - @serghei
https://t.co/vMrzk8gMgD

https://t.co/vMrzk8gMgD

[Praetorian @praetorianlabs]

Do you enjoy capture the flag contests and solving hard problems? Check out Praetorian's cyber tech challenges! Solve problems. Get hired!

https://t.co/AVqwYcYJ5e

[Praetorian @praetorianlabs]

Because inadvertent secrets disclosure is a common attack path into an org, we developed Nosey Parker—a ML powered scanner for locating secrets. With a precision of 98.5%, Nosey Parker is an order of magnitude better than existing secrets solutions

https://t.co/CgLBUGr8aQ

[evan @stargravy]

Found some issues in Gryphon routers that let you root other people's devices across the internet through a shared Gryphon VPN service:
https://t.co/QLIRRyDVTa

[Anthony Weems @amlweems]

I'm really excited for this video! I got a chance to collab with @LiveOverflow and share the process for discovering the localhost bypass for CVE-2021-45046 with code review and differential fuzzing. :)

[Tim Starks @timstarks]

Cool cool cool https://t.co/CemOjv6M4r

[Chris Lyne @lynerc]

@Jamie_Grettum @RayRedacted I’m like 75% sure there’s an Angel’s Envy next to the Buffalo Trace. I’d go for either of those!

[Chris Lyne @lynerc]

@JWilsonSecurity Hell yeah! Weihenstephaner is my jam. Which brew are you drinking?

[Praetorian @praetorianlabs]

New open source SAST tool for ISTO #praetorianlabs #CyberSecurity #istio
https://t.co/y8sfvOk9v7

[偉 @_sinn3r]

I'd like to share this to demonstrate this is what I sacrificed to stay sharp in infosec. Blue is the ideal line, yellow is the actual. My arms started to feel numb. My doc said I was about a few years away to need a surgery. If you do a lot late night hacking, think about this.

[Chris Lyne @lynerc]

@JWilsonSecurity From one lawn care nut to another. I’m sorry for your loss.

[Chris Lyne @lynerc]

Anyone have training recommendations for thick client pen testing / bug hunting?

[Praetorian @praetorianlabs]

New open source SAST tool for Go - check it out
#golang #praetorianlabs
https://t.co/ZV1beBF849 https://t.co/ZlRW9iltyB

[evan @stargravy]

Second in a set of wicked twin blogs by @lynerc & @CE2Wells :
Integer Overflow to RCE — ManageEngine Asset Explorer Agent (CVE-2021–20082) by @CE2Wells https://t.co/Hq4lpKn9qU

[evan @stargravy]

First in a set of wicked twin blogs by @lynerc & @CE2Wells :
Stored XSS to RCE Chain as SYSTEM in ManageEngine ServiceDesk Plus by @lynerc https://t.co/HX5imEnts0

[evan @stargravy]

Found a couple bugs in some Buffalo routers, one of which happened to affect a bunch more devices.
https://t.co/ySft5EP299

[evan @stargravy]

A little video demo from the Buffalo writeup ( https://t.co/ySft5EP299 ) :

[Alexei Kojenov @kojenov]

Super excited to present my research @IoTvillage #defcon29!

[Nicholas Miles @_NickMiles_]

“Examining Crypto and Bypassing Authentication in Schneider Electric PLCs (M340/M580)” by Nicholas Miles
https://t.co/BcdfPWqNxp