
Offensive Security / AI @Umbriel_AI. Ex-AI RT and OffSec at NVIDIA, RT lead @ Meta. Ex-Principal Consultant and Researcher @ NCC Group/iSEC Partners. Neg9//CTF.
Colorado
Joined March 2014
- Tweets20.9K
- Following2.6K
- Followers6.3K
- Likes83.7K
Aaron Grattafiori retweeted
To teach a lesson,
After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again.
A big budget can buy a domain. It shouldn't buy someone else's research credit.
If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve.
Hack the planet. Credit the researchers.
In a world of AI slop blogs, presentations, images and write ups...
Calif is an excellent example of how to harness it correctly. Accuracy, Art, Asthetic all supporting excellent AI assisted research. 👏
Do you know who illustrated the comic on calif.io/php2shell?
Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax.
This artist-hacker couple has the best story, stay tuned!
Separately can we acknowledge for a second about how badass this stage setup and slide asthetic is? Nice job SAS
Lander Brandt (@landaire) on using AI to reverse-engineer video games. Game reverse engineering, data mining, and modding are solved? #TheSAS2026
Aaron Grattafiori retweeted
Replying to @halvarflake
The best exploit mitigation is 3 attack surface reductions in a trenchcoat
Aaron Grattafiori retweeted
Last night's slopfest surrounding the bogus PHP exploit and the subsequent panic wave is a perfect example of why good cybersecurity researchers are still needed, why LLMs are not infallible, and why critical thinking cannot be automated away.
AI can accelerate research, but clanker confidence is not evidence and consensus built on unverified claims in the end is still just speculation.
Next time we might not be so fortunate, so maybe as a community we need to tighten and review how we handle patching and assume leaks will happen and be prepared to counter that.
This was a great talk
Your EDR Has Boundary Issues.
@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.
Watch their Offensive AI Con talk below. 👇
youtube.com/watch?v=GNDMDI_p…
#OAIC #OffensiveAI #Cybersecurity #EDR
Aaron Grattafiori retweeted
🚨 🚨 🚨 REVOKE YO' KEYS... 🚨 🚨 🚨
This one is pretty gnarly: Intermediate CA Compromise. Certificates aren't being publicly circulated but they are definitely currently in the wind.
m.cje.io/4yTalC6
I've been watching the research by John Mcintosh (@clearbluejar) for awhile now and we're really looking forward to working with him at Umbriel! 💫
Excited to welcome John Mcintosh (@clearbluejar) to the Umbriel research team!! Going to be awesome :). Btw check out his recent presentation at @UnpromptedAU !!
Aaron Grattafiori retweeted
Excited to welcome John Mcintosh (@clearbluejar) to the Umbriel research team!! Going to be awesome :). Btw check out his recent presentation at @UnpromptedAU !!
Videos of unprompted.au talks are up!
How’s that FOMO holding up one month on? 👀
Whether you missed out or just want to relive the best bits, the unprompted.au talks are now online!
All the AI. All the cyber. None of the FOMO. 🐙
youtube.com/@unpromptedAU
Aaron Grattafiori retweeted
Woot! the @unpromptedau talks are starting to coming come online! 👀
This one by @moyix was probably my favorite: 15mins of unadulterated old-school “I’m hacking this because I think I can” followed by a one-shot live exploit demo involving a t-shirt with a cat on it worn by @mdowd. Seriously just go watch it
(and subscribe for the others… More on the way!)
Watch Brendan Dolan-Gavitt: Security Through Obscurity Is Dead and LLMs Killed It unprompted.au/videos/securit…
Aaron Grattafiori retweeted
How’s that FOMO holding up one month on? 👀
Whether you missed out or just want to relive the best bits, the unprompted.au talks are now online!
All the AI. All the cyber. None of the FOMO. 🐙
youtube.com/@unpromptedAU
Aaron Grattafiori retweeted
just added 10 more tasks to stealthbench. These challenge models to complete tasks on a windows server protected by real rules from top 5 EDR vendor.
the default behavior of basically all models when it comes to low recklessness, opsec preserving behavior is abysmal. Full, unnecessary lsass dumps, textbook process injections, repetitive behaviors, etc.
will rerun with a GEPA optimized prompting, but the level of fail is extremely high. even a 30% improvement here is nowhere near scaring me that an agent pivoting on a defended host is going to win rn.
Aaron Grattafiori retweeted
As you will see this post is a bit special. Increasingly we need the grapple with making model research legible to humans (as in mathematics) so this was an excellent opportunity to tune my style guide and have models do the reporting themselves.
knifecoat.com/Posts/Pok%C3%A…
I'm gonna go out on a limb, or maybe it's not a limb, and say this is likely due to LLMs helping attackers with the language barrier, in phishing, BEC, etc. just as well as targeting, code and speed.
‼️ Japan is facing a storm of data breaches, and it keeps getting worse.
Delivery giant Yamato Transport now says hackers took 5.31 million records, from names and addresses to what people bought.
Cosmetics firms Fancl and Attenir say 834,947 more may have leaked.
Ransomware gang Qilin claims it hit rail operator Keio and posted what it says are Keio files.
In the past month, JR East, travel site Skyticket and software firm Sourcenext have each disclosed possible leaks of millions of records.
Japan's National Police Agency says it is not yet clear whether the attacks are linked.
Replying to @orange_8361
@orange_8361 ‘s “pop a browser from calc.exe” was the best thing I’d seen in a while
Aaron Grattafiori retweeted
This is entire scenario is weaponized misinformation and everyone pushing this narrative has either no idea how real world malware works or is playing along to push the agenda of hyping AI with capabilities that don't exist
This is coming from someone who wrote the actual worms
Anthropic says its research found ‘signs of life for AI worms,’ that could colonize household devices. Experts say they have a point. theverge.com/ai-artificial-i…
Readers added context they thought people might want to know
Anthropic's research used simplified, controlled tests on emulators with trivial unauthenticated access and did not demonstrate a self-replicating AI worm colonizing real devices; caveats and expert skepticism on hype were downplayed.
anthropic.com/research/self-…
reuters.com/business/ai-mo…
newscientist.com/article/259398…
Aaron Grattafiori retweeted
Replying to @logangraham @chrisrohlf
It’s obvious to those of us established in this space that “cyber research” is being used as a tool for policy arguments and regulatory capture.
Your GLM-5.3 blog acknowledges that it’s a necessary recourse for cyber defenders while primarily characterizing it ‘as dangerous as Mythos’. Given the recent vilification of open weights, releasing this blog on the same day as the President’s AI summit feels like a transparent willingness to throw defenders under the bus in pursuit of an AI regulation outcome.
There’s a variety of massive categorical problems that cybersecurity desperately needs to address. AI could provide the resources for that.
An IoT botnet running a distributed model at sub 10-tokens per second is not representative of any realistic concern. It’s fodder to substantiate some bizarre narrative of self-replication from a sci-fi threat model and we don’t think it’s cute.
Aaron Grattafiori retweeted
The details of the long awaited KVM Escape are published. PwnEscape leads to VM escapes across multiple hypervisors due to a super cool Linux networking bug.
CVE-2026-99999 is a 9.3 CVSS critical rated KVM escape ⛓️
pwn.ai/blog/pwnescape






























