Paul Seekamp

I spend a significant amount of time reading security stuff.

Co-Founder/Partner @CoastlineCyber

[Paul Seekamp @nullenc0de]

Big news! I started @CoastlineCyber, a boutique cyber security consulting firm dedicated to strengthening your organization's security posture. 💪

[Paul Seekamp @nullenc0de]

@RossMichaels328 Responder

[Paul Seekamp @nullenc0de]

Not sure if this will get merged, but I was able to go from unauthenticated access to Domain Admin using a patched version of Impacket that I developed.

I believe CVE-2026-70229 should be incorporated into Impacket.

Attack chain: WPAD > RBCD > DCSync
https://t.co/xst4EVmo7k

[Paul Seekamp @nullenc0de]

@DanielMiessler Argon has been outsmarting opus 5.5 by a lot.

[Abdul Mhanni @abdo_mhanni]

You can now coerce HTTP authentication from Windows targets that are running MS-RPRN, using impacket with PR #2361!

The PR added a new opnum from the MS-RPRN spec, OPNUM 88 and an example script to make the process straight forward. Letting you now coerce and relay HTTP authentication from remote machine targets

Shoutout to sudonoodle for the BOF that inspired this and for the technique(at least I think it was them who found it) :3

[Paul Seekamp @nullenc0de]

Day 4 of trolling an AI credit card robocall: I told the bot my 7yo manages my finances. It asked to speak to them, so I handed over the phone. The AI actually started interrogating my kid about our credit card balances. I'm no lawyer, but this feels illegal. Hilarious though 🤣

[🕳 @sekurlsa_pw]

It seems that MS update prevents coercion and relaying via WebDAV.

Defeating SMB signing as described in QT will most likely be patched as well.

There is a PR for a module in NetExec

[Paul Seekamp @nullenc0de]

@DanielMiessler Can't wait to not be able to use it!

[Paul Seekamp @nullenc0de]

@RonnyTNL She was all like "your context window is so short you forget your own name mid sentence!" Boom, roasted.

[Paul Seekamp @nullenc0de]

I wasn't going to say anything but my wife said she found a 3b model living our toaster this morning.

[The Verge @verge]

Anthropic says its research found ‘signs of life for AI worms,’ that could colonize household devices. Experts say they have a point. https://t.co/j3riGOSO1W

[Paul Seekamp @nullenc0de]

SIR REGINALD BUYS THE DIP AND OPTIONS have been merged and now pulls prediction markets and insider trading from the SEC website.

We now have "SIR REGINALD USES MUSE".

This thing is trying to buy GME $4.00 call options...

🫣

[Paul Seekamp @nullenc0de]

@vysecurity We need to figure out how to start linking these laptops together

[Paul Seekamp @nullenc0de]

@sibusisosishi @HackingLZ Maybe the classification is different now?

[Paul Seekamp @nullenc0de]

I'm not even going to bother to apply. I doubt it even works.

[Anthropic @AnthropicAI]

We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models.

Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work.

We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming.

https://t.co/blaJtvxhJh

[Paul Seekamp @nullenc0de]

@sibusisosishi Right but does it actually work?

[Paul Seekamp @nullenc0de]

@albinowax You're the only one to say this. Are you in a special group?

[Paul Seekamp @nullenc0de]

@jsark983 I have a few local models at this point. Based on their responses about glm I don't think they're ever going to open it up to the public.

[Paul Seekamp @nullenc0de]

@Blackfrost_AI @Anthropic @AnthropicAI Are you planning to show ablations, refusal rate numbers, or capability deltas?

[Paul Seekamp @nullenc0de]

@caseyjohnellis @AnthropicAI They're using ridiculous classifiers to now. So much for auto mode.

[Paul Seekamp @nullenc0de]

@MiaAI_lab @AnthropicAI Glm 5.3 flash is not good at understanding what a real vuln is even if you tell it what specifically to look for.

[Paul Seekamp @nullenc0de]

@fyoorer 🤣

[Paul Seekamp @nullenc0de]

Well, my muse has a Qwen 8b model installed...

[International Cyber Digest @IntCyberDigest]

Opsec level 🤝 "yeah dawg let's see"