Subhash

Security at @Microsoft. everything here’s my opinion and not my employer.

[Subhash @pbssubhash]

@reprise_99 It ain’t a bypass until you see mail items being accessed. At that time, it doesn’t matter

[Subhash @pbssubhash]

@WatcherGuru @SymbianSyMoh Two minute silence for everyone who posted ‘Taking Claude Pro because it’s such an ethical company’. It was about time. At least Open AI didn’t fk around like this

[Rothmus 🏴 @Rothmus]

130k tech layoffs year-to-date.

Insane.

[Subhash @pbssubhash]

@nas_bench @frack113 Do they know that majority of the bug hunters use their own models, automated their workflows to find bugs? 😂

[Mehmet Ergene @Cyb3rMonk]

IYKYK

[James Kettle @albinowax]

We've launched a new @WebSecAcademy topic on exploiting AI-powered security scanners! Learn how to use indirect prompt injection to steal data, cause damage & trigger exploit chains!

[Unprompted AU @UnpromptedAU]

https://t.co/NSdktUM8QC website is live and initial tickets are available: https://t.co/d9C6yxxZbi

[Subhash @pbssubhash]

@ImposeCost Aren’t they called vibe coders? Clauders!!!

[Subhash @pbssubhash]

Many citing that she’s probably faking is precisely the reason why women won’t come up and speak. Instead of waiting for police to say a word, people assumed she’s at fault because she’s a Northie (wth is that? She’s from North of India - the same country all the posters are from) and wearing short dress (? wtf she’s supposed to wear for running? Run in a saree??)

[@Coreena Enet Suares @CoreenaSuares2]

Update: Cyberabad CP @cyberabadpolice tells @NewsMeter_In , We have alloted search teams to identify the person.

He further added- "Requesting citizens to please dail 100 in such untoward incidents. This would allow police to reach the spot and help the victims. Or if a format complaint is registered, it would be better, in such cases.

[Subhash @pbssubhash]

Chased him? Are you kidding me? Would you suggest your sister or wife to go after a man who just behaved so inappropriately, into an unknown territory? Also, what’s this North v/s South? If she’s from the North of INDIA, doesn’t warrant abuse against her. She’s our fellow Indian. We all know how unsafe our metros are. Don’t put north v/s South and dilute the matter

[Subhash @pbssubhash]

@mdisec @supabase Please check DM ..

[Subhash @pbssubhash]

@reprise_99 Off late I don’t find them helpful. fofa is far better with historical data and other pivots. Census is becoming more and more gated

[Subhash @pbssubhash]

This is our MCA website in dark mode 😂

https://t.co/6MkIfemtLC

[s1r1us (mohan) @S1r1u5_]

I pointed claude opus at chrome and told it to build a full v8 exploit for discord.

A week of back-and-forth pulling it out of dead ends. 2.3B tokens. $2,283 in API costs, and it popped a shell.

https://t.co/vwj9d33Bvq

[Subhash @pbssubhash]

- logins from TOR/Proxy IPs for the first time in the last 30 days. (And if using cloud identities, how many non risky sign ins are not triaged)
- no mfa for priv users
- baseline what’s over privilege in my environment and implement detection of stale over priv users.

Bonus:
- check log retention timeline for all logs and ensure they’re 30d or 60d at a min

[Subhash @pbssubhash]

@nimmala @tgspdcl Don’t worry they’ll dig and change something in the next few months. They can’t stand roads being okay for a moment.

[Subhash @pbssubhash]

@cyb3rops How can someone be a part of that small group?

[Subhash @pbssubhash]

@josephabhishek3 @IndiaToday I don’t think so. At least latest reports indicate that they’re together. Unless you have some insider info, maybe it’s just a hunch.

https://t.co/4b6EJudZg3

[Subhash @pbssubhash]

@iuditg I suspect it’s because of huge memory. Try resetting the memory of just send an API call. I’m sure it’ll be a fraction of what you’re having. I believe memory is and will be a bottleneck for token consumption. It’s a race between ensuring context vs. saving tokens