Shak Reiner 🍍

This may be a fun example, but it proves we can not 𝘁𝗿𝘂𝗹𝘆 trust black-box LLMs

Ever wondered 𝗵𝗼𝘄 𝗟𝗟𝗠𝘀 𝗰𝗮𝗻 𝗯𝗲 𝘂𝘀𝗲𝗱 𝗯𝘆 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿𝘀 𝘁𝗼 𝗲𝘅𝗲𝗰𝘂𝘁𝗲 𝗮𝗿𝗯𝗶𝘁𝗿𝗮𝗿𝘆 𝗰𝗼𝗱𝗲? Uncover the details of 𝗖𝗩𝗘-𝟮𝟬𝟮𝟰-𝟲𝟵𝟴𝟮 in my latest blog post: cyberark.com/resources/thre… 🤖🐞

We should establish a new paradigm - 𝗮𝗻 𝗟𝗟𝗠 𝗶𝘀 𝗮 𝗽𝗼𝘁𝗲𝗻𝘁𝗶𝗮𝗹 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗶𝗻 𝘆𝗼𝘂𝗿 𝘀𝘆𝘀𝘁𝗲𝗺 ⚠️🤖 Read more in this short post on the risks of LLM integrations cyberark.com/resources/thre…

Be sure to check out my recent blog about my latest research “Your NVMe had Been Syz’ed”. In there I show how to add new subsystems to syzkaller, and how to use it to find new vulnerabilities. cyberark.com/resources/thre…

@CyberarkLabs Hebrew name pronunciation is on point! 💯😅

Finally got around to publishing this post on a 𝙘𝙧𝙞𝙩𝙞𝙘𝙖𝙡 𝙫𝙪𝙡𝙣𝙚𝙧𝙖𝙗𝙞𝙡𝙞𝙩𝙮 𝙞𝙣 𝙖 #𝗖𝗼𝘀𝗺𝗼𝘀𝗦𝗗𝗞 𝙘𝙝𝙖𝙞𝙣! Dive in if you're interested in the security of the #IBC protocol and the Cosmos in general 🪐✨ cyberark.com/resources/thre…

👀👀 more details soon...

Governance votes are very limited as a security boundary... Thanks for the clear explanation!

@thevaizman Great stuff! I always like low-level blockchain content 🤓

The first in a series of solc deep-dives. Highly recommended if you often find yourself looking at EVM bytecode of contracts for fun and/or profit 🌝 link.medium.com/7HhNkEbnVzb

@megabeets_ Great stuff!🔥🔥 The cover photo is amazing *𝘤𝘩𝘦𝘧'𝘴 𝘬𝘪𝘴𝘴*

I'm very excited to share our latest research which uncovers a malicious firmware implant for TP-Link routers, linked to Chinese state-sponsored APT group #CamaroDragon. Read our blog @ research.checkpoint.com/2023/the-drago… >>

@EranShimony Much appreciated 🦡

Awesome work @ShakReiner cyberark.com/resources/thre…

Getting into smart contract security research, I found that there are still a lot of uninitialized ones out there 🫥 This post covers the basics of uninitialized smart contract vulnerabilities and demonstrates how to write a quick PoC using Foundry 🛠️ cyberark.com/resources/thre…

@TalBeerySec @ZenGo @BlueHatIL Cool work bringing "anti-sandboxing" to web3 🤓

1/ Our @ZenGo @BlueHatIL #web3 security talk is now online. "Web3’s red pill: Smashing Web3 transaction simulations for fun and profit" Video: youtube.com/watch?v=zKqr9C… #web3sec

@ifsecure 🤯

Most of these have tweetable PoCs, for example: SIP/2.0 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA foo

I derestricted a batch of seven (now fixed) bugs affecting SIP protocol (i.e. VoLTE) implementation affecting (some) Exynos chipsets. bugs.chromium.org/p/project-zero…

Awesome summary!

@realgmhacker @_Parsely_ Try @browsercompany's Arc arc.net It has a built-in Archive function that closes inactive tabs every set period of time. I recently switched and I'm very happy with it 🤓

@_Parsely_ The number is fine as long as the tabs keep being updated. Should create a browser extension that pops a tab that hasn't been open for 1 or 2 weeks. Just an incentive to not procrastinate 😉

Trying to read all my open tabs with articles and papers. - start reading paper - halfway and already opened 3 new paper references tabs Struggle is real.

Great post @DeGatchi! It's always refreshing to see more low-level work in these areas

@megabeets_ Well deserved! 🔥 Super happy for you 💜

I am incredibly honored and grateful to have been selected to the Forbes 30 Under 30 list for 2023! 🎉 This recognition is deeply important to me. I’ll continue pursuing my biggest goal — making the world a safer and more just place for all of us, humans & animals.❤️ #30under30

@immunefi @joranhonig Thanks for this: marketplace.visualstudio.com/items?itemName… 🤓

We're back. You've missed us. We have the next installation in the much-demanded U UP interview series with a Mr. @joranhonig, an elite web3 whitehat. Read more to discover his background and bug bounty secrets. medium.com/immunefi/the-u…

@mintscanio @cosmos Why is this so pretty ⚛️✨

gm, interchain. 🌞