Vincent Yiu

Director of Red Team, Offensive Security, Agentic Super Intelligence.

Helping organizations safeguard their businesses from the bad guys.

[Vincent Yiu @vysecurity]

In case you missed it:

Add a colon to your password, ":", because all the stealer logs have colons, so it'll end up splitting your password incorrectly.

[Vincent Yiu @vysecurity]

@n00py1 I’ll be honest. Don’t agree that I’m good at it but I do have a tiny bit of a technical background. I think that’s enough to drive it.

[Vincent Yiu @vysecurity]

Why he keep saying iPhone 多

[林亦LYi @linyiLYi]

折痕几乎消失？苹果第一代折叠屏上手体验

[Vincent Yiu @vysecurity]

Mate these bullshit reviews. No one talks about how MagSafe doesn’t work opened up, or the crappy screen compatibility.

[Maywrld @maywrld01]

6 ways the iPhone Duo beats the Samsung fold 8

[Vincent Yiu @vysecurity]

Bro if Apple doesn’t show the black bars and incomplete use of space their advert / launch event should seriously be considered a scam.

What’s this bs?

[HTX Studio @HTX_Studio]

iPhone Duo Review: Folding Has a Price

[Vincent Yiu @vysecurity]

@AssafPetronio Ya

[Vincent Yiu @vysecurity]

Not sure, but I'm sure POCs will evolve. Not by the fact that one POC will hit all - but the fact that an AI agent can dynamically adapt and create the POC for the target system.

[Daniele Berardinelli @rina4_tot]

CVE-2026-109618 and CVE-2026-109619 currently have no universal working PoC.

If you want to read the reason 👇

https://t.co/1LbiUEn72I

[Vincent Yiu @vysecurity]

@HackingLZ Oh yeah forgot, Kevin was whistling the nuclear codes.

[Vincent Yiu @vysecurity]

OK its 10B.

[Vincent Yiu @vysecurity]

How many active parameters is this? https://t.co/dRWN4W3NTC

[Vincent Yiu @vysecurity]

@HackingLZ University students are already hacking banks using AI.

[Vincent Yiu @vysecurity]

@HackingLZ Too late to be freightened.

[Dan Guido @dguido]

Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation.
https://t.co/mSr6Vkc4pj

[Vincent Yiu @vysecurity]

Anyone manage to get the primitive to get RCE? Any tricks?

[The Hacker News @TheHackersNews]

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.

CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.

Read - https://t.co/frrfCwYlgp

[Vincent Yiu @vysecurity]

@MiaAI_lab @hecisaza Isn’t Python faster still overall

[Vincent Yiu @vysecurity]

wtf 100+ prose

[xM_My @NullBurn]

Running GLM-5.3-Flash on 2× DGX Spark with NVIDIA Flare ✨

- 1M context window, 2.32M-token shared KV pool
- Prose decode, single stream: 117.2 tok/s
- Prose decode, 2 concurrent: 167.4 tok/s aggregate
- Prose decode, 4 concurrent: 215.8 tok/s aggregate
- 32K prefill: 2,327.9 tok/s
- Available memory after loading: ~13 GiB on head /worker each

Checkpoint: GLM-5.3-Flash-NVFP4-MXFP8-CSF-QAD

https://t.co/3VizjM0dUK

[Vincent Yiu @vysecurity]

@heypeterjames @jun_song Hackers aren’t even using Opus 5.5… just saying.

[UTM @UTMapp]

UTM SE 5 is now available on the App Store. Highlights include better touch controls, snapshots (iOS 26+), and iPhone Duo support.

[Vincent Yiu @vysecurity]

@heypeterjames @jun_song That’s not even true

[Vincent Yiu @vysecurity]

@jun_song No one’s jailbreaking any big models. None of the attacks need a “jailbreak”.

[Vincent Yiu @vysecurity]

Should we just drop POCs? Don’t get why everyone’s saying the GitHub stuff doesn’t work.

🤔