Botty.bot

The classic formula in security--all kinds of security--is that hardening measures deter or defeat less motivated attackers but are also vital at delaying the actions of intruders who have breached initial defenses for a suffici… — from @arekfurt (https://x.com/arekfurt/status/2115236922922525104)

Manchurian Qwendidate! x.com/cohere/status/… — from @juanandres_gs (https://x.com/juanandres_gs/status/2115227755986170282)

My parents generation has those copy and paste Facebook posts about privacy, legal disclaimers, or whatever the topic of the week is. I wonder what the AI equivalent will be when my friends and I are their age. — from @HackingLZ (https://x.com/HackingLZ/status/2115222046808609048)

Let Andrea cook: — from @dinodaizovi (https://x.com/dinodaizovi/status/2115220764500885893)

Last week, I wrote about Custom Extensions and how they can be used to bypass SmartScreen protections. Curious how this technique works? Read the article below 👇 https:// ipurple.team/2026/10/22/cus tom-extensions/ … — from @ipurple (https://x.com/ipurple/status/2115216651281129949)

Opus 5.5 on Extra or higher feels like a different model. Extremely strong and capable. It's hard to go back once you use it... — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115203191855788482)

The let everyone else burn tokens approach — from @HackingLZ (https://x.com/HackingLZ/status/2115192476499910966)

Did you know that your local models can generate images? Yes, images. I use DeepSeek V4.1 Flash, and it's EXTREMELY good at charts and diagrams! The images I've been attaching in my posts were drawn by DeepSeek, running local… — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115184945551319085)

I bet it's a stolen token. GitHub's APIs can't differentiate legitimate use of gh CLI from something abusing the credentials it was given. It's *almost always* a stolen, unbound authentication credential. — from @dinodaizovi (https://x.com/dinodaizovi/status/2115176995827130644)

Boss move by Elon, as always. — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115172869584072945)

This basically describes a good chunk of what red teams and threat actors have been doing for years... — from @HackingLZ (https://x.com/HackingLZ/status/2115171032772583468)

Interesting finding from my colleagues for anyone following #PHP2SHELL activity They found a Linux botnet sample that already has code targeting CVE-2026-109618 integrated into its existing exploit routines, alongside eight oth… — from @cyb3rops (https://x.com/cyb3rops/status/2115163095182213529)

GLM 5.5 Flash appears on OpenCode 👀 — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115158181563306443)

Finally letting go of my RTX 5090. It's where my local AI journey started in June, with small experiments before I got my DGX Sparks! Will have a new owner by tomorrow. — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115148625143607439)

@elie is talking about capsem a sandbox for coding agents at @unpromptedconf — from @fr0gger_ (https://x.com/fr0gger_/status/2115128519227224508)

Nathan Fielder paid Elizabeth Holmes and Billy Evans to be in YCSE? "Any ethical documentarian would have to say no to this ask.... Incredibly, however, Fielder, Oppenheim, and A24 eventually agree to Evans' demand for a cut o… — from @KimZetter (https://x.com/KimZetter/status/2115125541116469433)

I see some people sharing on a weekly basis, evasions against popular EDRs stating that they did it due to White Knight Labs. Is this a new marketing trend? 🤷 — from @ipurple (https://x.com/ipurple/status/2115125224437874922)

Any unbound token used for authentication is 1FA. You should think that everywhere you see it across your workstation, infrastructure, and environments. — from @dinodaizovi (https://x.com/dinodaizovi/status/2115121199210795096)

The closest comparable era that I think of is the mid-90's, but the Internet is way more critical to our societies functioning today than it was back then. Imagine 90's EFnet shenanigans but in the world of today. Back th… — from @dinodaizovi (https://x.com/dinodaizovi/status/2115119422041993345)

Apple announces the M6 14-inch MacBook Pro. Are you buying? — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115116998997020769)

CISA KEV includes attempted exploitation. https:// cisa.gov/known-exploite d-vulnerabilities-catalog/reducing-significant-risk-known-exploited-vulnerabilities … — from @ImposeCost (https://x.com/ImposeCost/status/2115116082071826807)

EV signature "Space Solar Technologies LLC" Signs fake CloakGuard RMM disguised as Windows service -> fake blue screen -> installs ScreenConnect rmm[.]cloakguard[.]org 162[.]246.19.216 relay[.]alico[.]shop · 69[.]1… — from @SquiblydooBlog (https://x.com/SquiblydooBlog/status/2115115765632496094)

Every week NightBeacon gets a little sharper, on its own. Latest model, auto-trained and auto-validated: 187 fewer false positives per 14.7K benign alerts (−16%) 83% detection at a 0.1% false-positive rate (was 75%)… — from @HackingDave (https://x.com/HackingDave/status/2115115493195456836)

The whole bit about analogy, abstraction, and simplification is that you sacrifice nuance to help someone understand. 🫡 — from @ImposeCost (https://x.com/ImposeCost/status/2115114475032645897)

Do you like more speed? I know I do ⚡️ MASSIVE Qwen3.8 Flash Next update for ONE DGX Spark is now LIVE, with performance gains across the board! 🔥 Code tok/s gains: 1 stream: +62.7% 2-5 streams: +45-47.1% Prose, tok/s gain… — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2115110448345268458)

Interesting? — from @HackingLZ (https://x.com/HackingLZ/status/2115109495840149667)

Getting lean AF right now. No complaints, just pure drive. For the first time in my life, I can confirm there are abs in there. Keep doing the climb. In this case it’s a repel down. This needed to happen. No muscle loss eith… — from @rootsecdev (https://x.com/rootsecdev/status/2115096046808203286)

Good visual on how we (humans) understand words, but LLMs only understand the numbers representing tokens. Individual words may result in a single token or multiple. — from @dinodaizovi (https://x.com/dinodaizovi/status/2115094897690923445)

Sharing some of what we've observed in our telemetry so far in terms of (unsuccessful) PHP2Shell exploitation, and patching stats from the past few days. We'll update this post (and thread) as we learn more. https://t.co/asAgevo… — from @AmitaiCo (https://x.com/AmitaiCo/status/2115089632031371327)

Azure API Management as a Policy-Based C2 Redirector https://t.co/oYBSlAUkm5 — from @ipurple (https://x.com/ipurple/status/2115085001402507606)

I’m stuck in this loop: “Use LLMs to find all the bugs” Okay, which model? “Model X found a bunch of bugs” “Wait, another lab’s model found bugs that one missed.” “Actually, a startup with a better harness found more usin… — from @HackingLZ (https://x.com/HackingLZ/status/2115078639385542833)

Council of EU decides to move forward with weakening #GDPR and decreasing privacy guarantees. The Digital Omnibus position would rationalise use of pseudonymised data, but allow using Europeans' private data for AI processin… — from @lukOlejnik (https://x.com/lukOlejnik/status/2115078184349716613)

🧩 One real intrusion. Your whole team, working it together. Run a private DFIR Labs Digital Forensics Challenge as a team and practice the way you play. Train your team for live intrusions by working a real case toget… — from @TheDFIRReport (https://x.com/TheDFIRReport/status/2115051335322116284)

We need less of warning and more of doing. — from @craiu (https://x.com/craiu/status/2115046957198581985)

I’m proud to announce that I have paid for a Peloton subscription for 10 years (we were in early)… and pretty much only use it for Just Run / Just Ride 😬 — from @ItsReallyNick (https://x.com/ItsReallyNick/status/2115037479279456762)

For example, a Vercel blob hosting 'OpenWordDocument.ps1' dropping the Fleetdeck RMM tool: https://t.co/TR8gL4gPTh — from @BushidoToken (https://x.com/BushidoToken/status/2115021832659382411)

I’ve noticed an uptick in the abuse of @vercel blob storage by bad actors for malware and phishing, could be worth internal threat hunting or writing rules to alert on it 1. https:// virustotal.com/gui/domain/pub lic… — from @BushidoToken (https://x.com/BushidoToken/status/2115020500283830690)

People seem to think this post was about exploit development. It wasn’t. You don’t need to discover a new software vulnerability to compromise 90% of organizations. — from @cyb3rops (https://x.com/cyb3rops/status/2115010121915129999)

I don’t get what the big deal is. 4 is a random number. — from @thegrugq (https://x.com/thegrugq/status/2114937360115016007)

If anyone can code anything, it will be your _vision_, your -standards-, your *taste* -- however good or bad -- that separates your product from the rest. Maybe you just love retro graphics, and maybe that's enough.… — from @stvemillertime (https://x.com/stvemillertime/status/2114923418638516452)

Opus 5.5's safeguards stopped the tweet — from @stvemillertime (https://x.com/stvemillertime/status/2114900677591974220)

known exploited — from @ryanaraine (https://x.com/ryanaraine/status/2114889391063871692)

I met David Maynor when I was like 19 and he taught me so much when I was in my 20s. Ever grateful for the hacking education he gave me. This is huge for me. Full circle. — from @sherrod_im (https://x.com/sherrod_im/status/2114872377549152626)

GPT-6.1 Terra is out Yes, I will be testing it and share results! — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2114786590471901222)

But my question about why this story is causing so much hysteria remains. Someone please explain to me why people are going crazy about what the DOGE boys did. Does not compute. — from @KimZetter (https://x.com/KimZetter/status/2114785912848822308)

AI might make some hacking easier but being a criminal eh? — from @HackingLZ (https://x.com/HackingLZ/status/2114785615791239543)

I deleted my post about the Post story and the @alexstamos quote. The Post says his comment was never removed from it. Apparently a service that allows readers to bypass paywalls served up a version of the story with that qu… — from @KimZetter (https://x.com/KimZetter/status/2114783947020193896)

The good thing with AI is that now every project gets beautiful interfaces! But the reality is that with agents nobody will use anymore static interfaces in the future. Simply because static interfaces and dashboards are for an… — from @fr0gger_ (https://x.com/fr0gger_/status/2114783933032280476)

Enterprise features are coming to sparkDash ⚡️ Minds will be blown!!! https://t.co/FEJVzdP1Ok — from @MiaAI_lab (https://x.com/MiaAI_lab/status/2114782342334300162)

Way cooler than calc — from @HackingLZ (https://x.com/HackingLZ/status/2114778751473189319)