Sabitlenmiş Tweet
DB Cooper
397 posts
DB Cooper
@rootxaman
Your friendly neighbourhood security engineer. 🤖
Katılım May 2020
1.2K Takip Edilen193 Takipçiler
2026 Yıllık Özeti
@rootxaman hesabının Twitter yılını gör
DB Cooper retweetledi
In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations.
Our post describes what happened, how it happened, and what we’re changing. We encourage other AI developers to perform similar reviews.
We conducted this review together with @Irregular, one of our evaluation partners, and thank them for the joint investigation and their collaboration on this post. This type of collaboration is increasingly critical to safe, rigorous evaluation of models, and we look forward to continuing to work together on security.
anthropic.com/news/investiga…
English
DB Cooper retweetledi
For those who don't know they do track TPM information between reimages. I've been told previoisly by multiple ex-MS SOC staff that this is exactly what's used to track people for half a decade even if they are privacy conscious.
VPNs, TOR, etc doesn't matter when Microsoft is tracking your physical hardware and tracking your system activities over years....
vx-underground@vxunderground
> Peter Stokes > Scattered Spider guy > Arrested > Microsoft helps FBI > Read court documents > Page 12 > Microsoft tracks Stokes from GDID > Microsoft Global Device Identifier (GDID) > Stokes used Windows > Page 34 > GDID assigned to each OS install > GDID unique to each device > GDID only change if OS wiped > Stokes GDID 6755467234350028 > GDID reported internet activity to Microsoft > GDID showed Stokes using Ngrok > GDID reported Stokes IP address > GDID showed Stokes web activity > GDID showed timestamps of web activity > GDID mapped with video game activity > GDID showed games played > GDID undocumented > GDID only mentioned in one MSDN document > Azure UCDOStatus > Azure Monitor Logging
English
DB Cooper retweetledi
Someone hacked a Las Vegas casino.
No phishing. No social engineering. No insider threat.
Entry point?
A fish tank.
It was internet-connected.
To monitor water temperature.
The attackers pivoted from the fish tank to the casino's high-roller database.
The house always wins.
Except that day.
English
@IntCyberDigest It’s crazy that Meta AI is still lacking Gateway control and Guardrails even after being in prof for so long.
English
‼️🚨 BREAKING: Yet another Instagram exploit exists due to Meta's AI chatbot having no proper guardrails. Sellers are now using it to grab premium one-letter usernames, by tricking the AI with hidden characters, then talking it into applying the change. Monitor bots show OG handles getting swapped.
English
swisskyrepo built PayloadsAllTheThings.
Then he built InternalAllTheThings.
Active Directory attacks.
Lateral movement.
Kerberoasting.
LAPS bypass.
Azure AD abuse.
Every technique. Every command. One repo.
The fact this gets 10x less attention than PATT is criminal.
English
Cybersecurity is dead again
Sam Altman@sama
OpenAI is launching Daybreak, our effort to accelerate cyber defense and continuously secure software. AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves.
English
OSCP+ / OSEP Advanced Cheatsheet v3 anshu19981.github.io/Pentestcheatsh…
Eesti
DB Cooper retweetledi
@forgebitz Barely scratching the surface? My Brother in Christ it's anarchy in the internet streets
English
Bhai ye ese kese nikal dete hai mnc mai, I mean koi legal action nhi lete kya tum log
Ya phir agreement vghera
Indian Tech & Infra@IndianTechGuide
🚨 Oracle is firing 30,000 employees, early morning layoff emails have started arriving.
Indonesia
LOLEXFIL
Living off the land Data Exfiltration method
lolexfil.github.io
English
@californiadddd S Jaishankar se mang lo bahut h uske pass
Indonesia
Ye bhosdika relative ka ladka laser light le gaya
Filipino
@rootxaman karşılaştırmaları
@irregular vs @rootxaman @rootxaman vs @wearehackerone @hetmehtaa vs @rootxaman @intcyberdigest vs @rootxaman @rekdt vs @rootxaman @grafana vs @rootxaman
Kendi karşılaştırmanı oluştur 
