Daniel Cuthbert

Being asked to allow Cowork in your org? It's the first real enterprise-wide adoption of a specific agent - that isn't a coding assistant. Message me for a demo of how we do inventory, detection and response, and SPM for Cowork, along-side other agents. knostic.ai

Been an amazing day of making stuff

Has taken me a while but a bank holiday monday means I finally get to work on the web stuff for RAPTOR and well, we pay homage to the one and only @albinowax

Niels Provos posting smart security stuff, Dave Aitel knows stuff he can’t share, Halvar exploring the current space, and people arguing loudly about disclosure ethics.. This could totally be 2002..

@dcuthbert Ooh nice. Is there a Stratos there at all?

I just…. Temptation.. oh hello

@infosecmo Yup two. My lord give me strength

I love this community. @caseyjohnellis took it upon himself to make an epic UX for RAPTOR It's currently in our dev branch being tested but so far, very noice!!! github.com/gadievron/rapt…

@ethicalhack3r @HackingLZ @watchtowrcyber Attackers are working weekends now/ sorry, their agents are working weekends now

Critical & high vulns in MOVEit Automation enable auth bypass + priv esc via backend command ports. CVE-2026-4670 CVE-2026-5174 MOVEit has been targeted by ransomware groups in the past in mass exploitation campaigns. community.progress.com/s/article/MOVE… @watchtowrcyber

@ethicalhack3r @BSidesLondon @44CON yeah lovely dude and will be missed a lot

@dcuthbert @BSidesLondon @44CON We exchanged a lot on Twitter in the early days and met him in real life a couple of times at BSidesLondon. When I moved to the Basque Country, he’d always comment on my pics of the place, as he lived there at some point in his life. Always super nice guy and supportive.

Has taken me a few days to process this but sadly we lost a big part of the UK security scene the other day, Thomas V. Fischer, to cancer. A big part of @BSidesLondon and @44CON and dude you will be missed. A royal fuck cancer in every way possible. RIP bruv

Big changes to Android and Chrome VRP: - focus on high-impact, reproducible bugs with low/no reward for lower impact - big prizes for full chains with some annual limits - PoCs required It’s the end of an era, but the start of a new one. bughunters.google.com/blog/evolving-…

On our narrow cyber tasks, GPT-5.5 achieved a ~71% average success rate on expert-level challenges that test skills like exploiting memory corruptions, breaking cryptographic implementations, and reversing stripped binaries.

@timinbrum @daveaitel

@daveaitel @dcuthbert I think many are aware of "security theater", now they're having to address it.

Everyone who is not a hacker is now suddenly learning that the level of security they had was more like paper mache and less like plate armor.

Well this is disconcerting... following closely as many shared hosting providers are not super quick to update: copy.fail

The one you've all been waiting for... GPT-5.5 exploits the Compaq Secure Web Browser (re-branded Mozilla 1.7.13) running on an OpenVMS 8.4 system with an Alpha CPU!

The Internet is falling down, falling down, falling down Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940 Enjoy with us.. labs.watchtowr.com/the-internet-i…

...Little reminder that this exist, and is awesome: Vulnerability Spoiler Alert vulnerabilityspoileralert.com

Pushing this again as it's almost impossible to not chair groove whilst at work when listening to this: youtube.com/watch?v=gfF8jz… colleagues must think im mad