Cipher0k

Breaking AI to rebuild trust | Security Consultant | Thinks in threat models + ex-web3 and traditional security guy

[Cipher0k @theaihacker]

@boardyai So connect me with someone !

[Cipher0k @theaihacker]

@maxwong Dm’ed you !

[drop @dropn0w]

The recording is finally out! 🎉

Here’s my talk from @defcon 34, presented at the @BugBountyDEFCON !

🤖 AI Nightmare: Hacking at 0-Hour

Once again, a huge thank you to the Bug Bounty Village team for the opportunity!

🎥 Watch the talk here: https://t.co/PS5Mvo9v29

#DEFCON #BugBounty

[Doruk @Peak__Twilight]

Introducing: 0 - the open-source AI security harness by @0securitylabs (YC F26).

It found 30+ Linux kernel 0-days. Then we got backed by @YCombinator

> Found vulnerabilities in software running on 3+ billion devices & government code from 🇨🇭🇮🇹🇪🇺 + Wireshark, node-forge & jsonata
> Full-stack pentesting: from web apps & APIs down to binaries & kernels
> Multi-model, Reverse engineering, web interface + CLI and MCP for agents.
> Security Workflows: parallel agents investigate, reproduce vulnerabilities & test fixes

Use it with your coding agent:
https://t.co/sJsI6jMZjM

[Cipher0k @theaihacker]

@poteto dropping adversarial review to save tokens is an attacker subsidy. empirical checks catch the bugs you already know how to name.

[Cipher0k @theaihacker]

@cryptodotnews apple already shipped the darksword fix, so update ios. and a seed phrase in your camera roll is a backup for whoever gets into the phone

[Cipher0k @theaihacker]

@Itsfoss per the open issue, claude sometimes puts your email in the user-agent of commands it writes. very polite client, introduces you to whatever site it's calling

[Cipher0k @theaihacker]

@exploraX_ per the readme it copies your chrome login for each site into its own browser. so the agent scrapes as your main account unless you swap in an alt

[Cipher0k @theaihacker]

@shanaka86 fintech api that trusts "looks like our app". who else gets to look like that?

[Cipher0k @theaihacker]

@Tomeratt 🇸🇪

[Cipher0k @theaihacker]

@otoge_3107 @kskrygan Brought to you by yours truly @AnthropicAI

[Cipher0k @theaihacker]

@otoge_3107 @kskrygan Maybe i am both , the next gen AGI X Human

[International Cyber Digest @IntCyberDigest]

The bug is like a joke.

On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

[Cipher0k @theaihacker]

@PinkDraconian I still have 3 reports in mediation cuz bot decided to close it !

[Cipher0k @theaihacker]

@rtehrani singapore airlines is changing exposed booking refs for people with upcoming flights. is jal doing the same, or only the phishing warning?

[Cipher0k @theaihacker]

your desktop agent's threat model includes that coupon extension from 2019, if it can read your https://t.co/4Vy8B7POM7 tab
https://t.co/EeJYHIhjB5

[Shashi Bellamkonda @shashib]

Conductor Cloud customers have eight days before their workspaces go read-only, and 15 before Conductor starts deleting cloud data.

Meta bought Conductor on Wednesday. Conductor is the Mac app that lets one engineer run coding agents from Anthropic, OpenAI and others side by side. OpenAI agreed to buy Pierre the same day.

I spent years as a product manager. A feature that once took a quarter to build can now go to five agents in the morning and come back for review by afternoon. That speed is what artificial intelligence companies are paying for, and they have made ten coding and agent tool deals since July 2025.

Those deals show a pattern worth knowing. When the buyer depended on the product, the product survived. Bun, Astral and Graphite are still running. When the buyer wanted the team, the product wound down. Vercept closed its external product within weeks of joining Anthropic, and Conductor stopped new sign-ups the day it announced.

Conductor handled the exit well.

Users get a one-click move to their own machines and a full data export. Conductor says it never sold or trained on user data. The exposure sits elsewhere. Conductor Cloud ran agents in hosted sandboxes, and engineers could download the app for free without a purchase order. Your security team may not know which workspaces hold copies of your source code.

One question is still open. Meta has not said whether Claude Code and Codex support will carry over to the new product promised for early next year. Meta has a reason to keep it, because a side-by-side console lets engineers compare Muse Code's pricing against the others on the same task.

Chief information officers and chief technology officers: do you know how many agent tools have access to your repositories right now, including the ones engineers pay for on personal cards?

The coding tool your engineers like this quarter could belong to a model lab next year.

The full piece covers all ten deals and the change-of-control terms to add to any developer tool contract that touches source code:
https://t.co/TGeAABH9sB

#aicoding #developertools #cio #softwareengineering #mergersandacquisitions

[Cipher0k @theaihacker]

@jasonlk raised guidance and the multiple still waits for the word agent on slide one

[Cipher0k @theaihacker]

@TheRegister which side was supposed to say no here, the extension or the desktop app?