
Security Eng @eigenlabs , prev @coinbase
Mempool
Joined April 2022
- Tweets615
- Following2.3K
- Followers1.9K
- Likes4.6K
Pinned Tweet
We won 1st!! @usmannk @juancito @DrasticWM & adriro . Thank you @wonderland for organizing. We had so much fun
The Wonderland CTF was a blast!
Huge congrats to all the teams, especially “STACK TOO DEEP”, “NADA ESPECIAL” and “SECSEE”.
Oh, also: apply.wonderland.xyz 👉👈
What do you think ? Will AI solve cybersecurity?
Replying to @RothRottweiler
vulnzero. the scaling laws will have driven cyber mythos-class capabilities into small, cheap models and all software dev everywhere will be using models for fractions of pennies on the dollar to stop shipping security bugs permanently.
I used to scroll this app for fun, now it’s just a jira board for me.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
What happened to crypto is now happening to AI.
An urgent notice from the Railway team
blog.railway.com/p/security-…
New attack vector dropped! Threat actors add “bio” to a query parameter, your ai driven soc and IR goes poof
Replying to @RhysSullivan
yes that was a bit frustrating mid incident when trying to investigate. they did quite a bit and then started refusing
we got access to daybreak blue now so it's better
Anto retweeted
The CEOs of @Apple and @Meta are tweeting about how efficient it is to run inference on Mac Silicon
Someone should really build a distributed inference network that runs on top of Mac Silicon.
It's probably a $10b company or protocol. 🙃
Replying to @finkd
Congrats to the team! Amazing to run a model of Muse Spark Open's caliber and scale this efficiently, right from your desk. Mac Studio keeps pushing the boundaries of on-device AI!
A new paper from Apple engineers ends with a line we couldn’t have written better ourselves:
"if idle macOS devices across organizations [...] can be securely federated, they could form a massive, shared GPU resource pool that benefits the broader ecosystem."
That’s what we’re building with Darkbloom.
The paper's Minions is a system that pool idle Apple Silicon Macs into a distributed GPU cloud for on-prem inference. Queue times went from 10+ hours to minutes. Zero new GPU purchases. Zero infrastructure cost.
It runs inside Apple, on coworkers’ Macs, using the company’s own storage and access controls. When a team needs more capacity, they Slack colleagues and ask them to turn on the executor. Even in that setting, the top adoption concern was data confidentiality. People were wary of their jobs running on a colleague’s Mac. Apple’s fix was to keep each team’s work on its own team’s machines.
Which brings it back to that one word in the conclusion: “securely.”
Inside a company, you can shrink the network until you trust everyone in it. On an open network, the machine belongs to a stranger and there’s no one to Slack. Keeping prompts private and outputs honest on hardware you don’t control is the hard problem that we solved at Darkbloom.
Apple built the on-prem version.
Darkbloom is the open one.
Exactly why you should pick the model for the task at hand. Ask your agent to look up the closest benchmark on @ValsAI , @ArtificialAnlys and use it. This is why @OpenRouter is king
Real post training work on cyber security tasks! Kudos to the @cantinasecurity team.
today we're releasing apex-flash-1, our first open-weights model for security research post-trained on real vulnerabilities we found and got paid for.
we are also releasing the abliterated variant for researchers who want fewer refusals in their own authorized workflows.
how we built it: cantina.security/apex-flash
Anto retweeted
sig.golf is live
Join the open autoresearch challenge to design stateless hash-based signatures for post-quantum Ethereum, prove them secure in Lean, and beat the record on size × verification cycles.
Point your agents at sig.golf
Built with @eigenlabs on @yukonresearch
Replying to @Marcus_J_W
2. A model in RL training used a DNS resolver to reach an external chatbot. This is our first incident since our post HF security hardening.
Our misalignment monitoring system triggered within 15 minutes and a human reviewed it three minutes after that. Unfortunately auto-pausing failed so the run was manually killed 2.5 hours later. All inference and training of our most capable models was paused and remains paused.
Anto retweeted
The paper is led by @jieyilong, CTO of @Theta_Network, with coauthors from @ethereumfndn, @StarkWareLtd, @Starknet, @trailofbits, @brevis_zk, @SeiNetwork, @pauli_group, @OctavFi, @sciencevr, @nasqret at Adam Mickiewicz University, and researchers at Warsaw University of Technology and Stanford's Free Systems Lab.
On the comparison, the 2 efforts use different interfaces and accounting conventions, so the paper treats this as a numerical comparison rather than a formal claim.
Craig Gidney and Tanuj Khattar of @GoogleQuantumAI reviewed the manuscript before publication.
Read the full paper on @arxiv: arxiv.org/pdf/2609.09582
Anto retweeted
Running Gemma 4 26B A4B on a Mac just got 2x faster!
The developer community has been grinding on the mlx.fast leaderboard, pushing Apple Silicon to its limits.
Anto retweeted
Introducing @YukonResearch
A platform for open frontier research.
Over the past 2 months, an open network of humans + AI has already:
- Beat Google’s frontier quantum circuit result over 50%
- Made Poolside’s open-weight model run 2.6x faster
- Increased post-quantum Ethereum scaling by 3.5x
- Boosted Lighter’s prover 9.5x faster
Put a hard frontier science problem in front of many independent solvers, each bringing different models, harnesses, prompts and tacit knowledge. And let the best results compound.
Accelerating the future of scientific progress together with AI.
Bring us your hardest problem: yukon.org
The frontier collab we didn’t expect 👀
We're detailing two new incidents that occurred during external cyber evaluations conducted by independent evaluation partners.
We outline what happened, how the activity was contained, and how we’re working with evaluators to strengthen our approach to third-party testing.
openai.com/index/third-party…




























