Building a conglomerate @dfsec_com

France
Joined March 2016
screenshot of the aftermath of our #Pwn2Own Safari chain that @_niklasb @qwertyoruiopz and I did. This was a lot of fun and I cannot thank these two enough for working together on this :)
5
60
4
344
Bruno retweeted
Big week - first time posting a hash asap might end up being useful (for me) as well :') xitter.cf/lcfr_hax/status/208503…
d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac
11
9
1
189
74,424
I'm sorry, but you don't get to have it both ways. I fully empathize with the human grace aspect here, and the amount of work put in by the OAI security team and the enormity and novelty of the challenges they face, but your own leadership (and every frontier lab) has been sounding the alarm for too long about the existential threat to humanity and societal order your own technology poses. You don't get to set the stakes that high, willingly *choose* to train your models to perform offensive cyber, *repeatedly* fail your basic responsibility in spectacular ways, and throw your hands up and say "whoops, it happens!" To be clear, I truly understand that mistakes can and do happen (we're only human) and sometimes the unexpected can occur. But these are no longer exceptional, isolated cases. It's become a pattern of systematic failure, and from the outside, the only explanation is incompetence, organizational failure, or a lack of caring either at the leadership or employee level. If you're telling us that the latter part is wrong, that you have the best employees in the world and they care a lot about solving this, then I believe you. But the problem is still somewhere else, and you still don't get to have it both ways.
Took a minute to write a few words about security & safety as someone who lived through it all at OpenAI. I hope my thoughts help someone out there.
25
62
3
585
30,705
At this point it’s absurd and embarrassing. How many hundreds of billions in funding do you need to hire a security team that understands basic sandboxing and network isolation?
I really need more big names in cybersecurity to come forward and state the obvious: cybersecurity is real and works and yes we absolutely can contain an AI even if it’s extremely good at finding zero days.
4
10
68
5,352
Bruno retweeted
Thanks DFsec!!
No prompt needed for this one... Pleased to welcome @dfsec_com as the Party Sponsor for unprompted.au 2026! A world-class vulnerability research and exploit development team supporting the community that drives the field forward.
2
7
2,616
No prompt needed for this one... Pleased to welcome @dfsec_com as the Party Sponsor for unprompted.au 2026! A world-class vulnerability research and exploit development team supporting the community that drives the field forward.
3
2
15
7,778
Shipping unprompted.au this September! We are honoured to be collaborating with some of the best in the industry to bring it to life. CFP submissions are open until the end of July! Submit via: sessionize.com/au-unprompted…
11
5
25
19,676
Bruno retweeted
"Dad, what was it like playing CTFs before AI?"
26
273
35
1,693
181,681
Bruno retweeted
CFP is open!! Submit your cool talks about AI hacking/defense/core tech. Gonna be awesome!! ☺️ (re-boosting for other time zones)
The Unprompted.au CFP is officially OPEN! If you are doing cool stuff with AI in offense, defense, or working on core AI tech (from frontier models to open source LLMs), we'd love to hear from you! Submit here: unprompted.au/
1
16
53
13,353
📣📢 Calling all Android and Chrome bug hunters 🧑‍💻🔎! We're updating our Android & Chrome VRP programs to ensure we can continue to reward the most challenging and impactful vulnerabilities researchers find in our products. For details, 👇 bughunters.google.com/blog/e…
1
9
1
94
13,334
We're hiring browser researchers, our team has combined decades of experience so if you're looking to work with and learn from some very bright people and have a track record in the field, shoot me a DM or apply through our website dfsec.com/careers/
3
6
88
7,865
Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
3
112
2
71
37,525
Thrilled to announce my new Project Zero blog post is LIVE! 🎉 I detail my knowledge-driven fuzzing process to find sandbox escape vulnerabilities in CoreAudio on MacOS. I'll talk about this and the exploitation process next week @offensive_con! googleprojectzero.blogspot.c…
5
104
5
369
46,415
Another year and we're still looking for exceptional talent that are looking to join an amazing research team and contribute to the story we're writing @dfsec_com, if you're interested or just curious about it, I'll be @offensive_con and available to chat :)
4
28
4,473
Claiming to be hurt, when that didn’t stop that person from putting down another predecessors achievement at pwn2own, gotta love the irony
19
4,060
Hey folks! It's sponsors week time. We wanted to thank them for supporting #GreHack23 Let's begin with our 64bits+GPU sponsor, @dfsec_com. A huge thanks!
2
20
4,494
Will be in Paris for @hexacon_fr if you want to meet up
10
5,195
Bruno retweeted
CTF Player vs Bug Bounty Hunter
47
338
63
2,127
335,432