Cybersecurity stuff. Wrote tech for ZDNet, TNW, others. Created @cyberprismapp, @everythingms, @fussyvegetarian @artfallapp
Seattle & Bombay
Joined January 2008
- Tweets70.2K
- Following885
- Followers3.1K
- Likes36.1K
Pinned Tweet
wrote about building @cyberprismapp beingmanan.com/wp/2026/04/cyβ¦
hey @sama heard you want everyoneβs PC RAM? Iβll give you all of mine, 1 OAI share for each 8GBβ¦
the only reason I find this problematic is because I am not making $200M at their IPOβ¦
Weβve trained Claude to flag potential misuse in conversations, a technique we call self-assessment. Right after it responds, Claude gives a preliminary safety assessment of the conversation.
Since we began using self-assessment in June, it has surfaced misuse that our other safeguards werenβt designed to catch.
Because Claude has already read the conversation, self-assessment is very efficient. And unlike classifiers, which target a discrete set of harms, it draws on Claudeβs own judgment, so it gets more accurate as our models improve.
Read more on our new Safeguards blog:
safeguards.anthropic.com/202β¦
Manan π€¦π½ββοΈ retweeted
Black October just got its final boss:
with the largest crypto heist in history.
In one month :
1. Pentagon personnel data breach (3M people)
2. Denmark population register breach (8.8M people)
3. French supermarket freezers remotely disabled
4. Ahold Delhaize grocery systems knocked offline
5. Educational Testing Service California student data theft (5.7β7M)
6. eMudhra certificate authority key compromise
7. ConnectWise Cloud Backup supply-chain attack
8. PHP2Shell critical RCE flaws (CVE-2026-109618/109619)
9. LiteLLM malicious package supply-chain attack
10. Railway environment variables breach
11. Zeabur hosting platform breach (3.2M records)
12. GMO Onamae Desktop Cloud malware (26k+ servers)
13. Oracle Health/Cerner patient data breach (20M)
14. Capcom ID account exposure (11.7M)
15. University of New Mexico Health ransomware disruption
16. Quest Diagnostics lab platform breach
17. University of Copenhagen data breach (525k)
18. DHS Icepick employee records leak (41k+)
The big boos is
19. Binance hot wallet drain ($5.5- 6.3B) largest crypto heist ever
Who are these CISOs???
- last week, vuln and attack surface management is going to be crazy 12-18 months
- this week, well yea no Iβm worried about AI spendingβ¦ yea
In a single year, AI has rewritten the security priority list for CISOs.
Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses.
There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems.
In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI.
The biggest jumps since 2026:
- Internal AI agent security (+28 pts)
- AI SOC (+26 pts)
- AI offensive security (+24 pts)
- AI code security (+23 pts)
- AI vulnerability remediation (+22 pts)
Last year's staples:
- Exposure & vulnerability management (-21 pts)
- SIEM / security data (-18 pts)
- Privileged access management (-18 pts)
From a16z's @OwenColby and @steph_zhang on The New Security Agenda: a16z.news/p/the-new-securityβ¦
keeping battery saver on my iPhone is very effective. Why is the regular mode not the battery saver mode
walking around Germany & the Meta glasses are very useful QoL upgrade.
real time translation has been a bit of miss:
- People breaking into partial English
- ambient discussions being picked up
- when I ask it to tell me what I should say in German, it speaks so quick that itβs useless
one other thing thatβs been annoying is that when I am talking to the Meta AI -> AI is working on the answer -> my kid says something or I turn around to say something to wife / kids -> Meta AI takes that partial thing as new context
hi @UberEats, great use case for AI. I walk english, I talk English, I laugh Englishβ¦ your app can translate ALL of this with an LLM into English for me when I am travelling to a country that isnβt English-first
moving houses and so my home servers are down. Crazy 2 weeks.
π‘οΈWe added Adobe Commerce vulnerability CVE-2026-48356 & Google Brotli vulnerability CVE-2026-111497 to our KEV Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org. #Cybersecurity #InfoSec
wtf??? Someone please reverse engineer this
i find this pretty funny
the M4 iPad Pro with 8GB RAM actually shipped with 12GB RAM, which we found out through teardowns, Apple never acknowledged it and still only let you use 8GB RAM
fast forward to 2026, Apple releases a more powerful on device Apple Intelligence model that requires a minimum of 12GB RAM, which won't run on the base model M4 iPad Pro cause it has "8GB RAM", even if the underlying hardware had 12GB RAM
make it make sense Apple
so fucking annoyed with Railway right now. What a fucking disaster. And the Google Cloud Console is also such a pain to use.
