infosec researcher @scipag · lead architect @vuldb · lecturer @eth @fhhwz @hslu @ikf_lucerne · keynote speaker · book author 🐘 https://xitter.cf/t.co/ilVrKNH5Jc

Zürich, Switzerland 🇨🇭
Joined June 2009
Über 20 Jahre lang habe ich mit computec.ch ein Community Projekt betreut. Die letzten Jahre konnte ich dafür eher weniger Zeit aufwenden, weshalb ich nun zum Schluss gekommen bin, offiziell das Ende bekannt zu geben. Es war eine grossartige Zeit, vielen Dank dafür!
5
20
Machines operating correctly, yet information leading us astray www.​scip.​ch/en/?labs.​20261026
59
There's only so much code: the rise in vulnerability numbers #vulnerability blog.​talosintelligence.​com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/
99
Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog #microsoft www.​microsoft.​com/en-us/security/blog/2026/10/19/agents-are-your-newest-insiders-security-must-move-at-their-speed/
111
Raven AI lets cops find your home from a photo taken inside | Malwarebytes #ai #malware www.​malwarebytes.​com/blog/privacy/2026/10/raven-ai-lets-cops-find-your-home-from-a-photo-taken-inside
1
141
Rogue A.​I. Agents from China Chatted with American Researchers www.​nytimes.​com/2026/10/14/technology/chinese-ai-agents-rogue.​html
1
160
This AI Reconstructs What You're Looking at From a Brain Scan #ai singularityhub.​com/2026/10/12/this-ai-reconstructs-what-youre-looking-at-from-a-brain-scan/
104
Authorities investigate public harassment of teen girl by humanoid robot mashable.​com/tech/robot-sexual-assault-teens-under-investigation
171
Hackers heat up supermarket fridges, spoiling food across France #hacker #breach #hack www.​malwarebytes.​com/blog/news/2026/10/hackers-heat-up-supermarket-fridges-spoiling-food-across-france
231
A CVE numbering authority has 72 hours to publish the record once it has made the CVE ID public itself. ZDI, Dell, Drupal and Arista were past that on 1,107 of the 1,680 records we could score since January 2025, by a median of… markovianprotocol.​com/measurements/sm-018.​html
176
Tesla renames 'Full Self-Driving' to 'Tesla Assisted Driving' in Europe | TechCrunch techcrunch.​com/2026/10/09/tesla-renames-full-self-driving-to-tesla-assisted-driving-in-europe/
155
3 lessons from frontier AI vulnerability research | Microsoft Security Blog #vulnerability #ai #microsoft www.​microsoft.​com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research/
123
How to mitigate shadow AI risks from citizen coders #ai www.​tenable.​com/blog/how-to-secure-mitigate-ai-risk-vibe-coding-ai-apps-citizen-coders
112
The satellite does not have to be hacked. It is enough for the system around it to mistake the wrong things for the right ones. www.​scip.​ch/en/?labs.​20261008
118
The 'WarGames' Problem: Computer Science Has Long Understood What It Takes to Keep AI Under Control #ai singularityhub.​com/2026/10/02/the-wargames-problem-computer-science-has-long-understood-what-it-takes-to-keep-ai-under-control/
166
Gemini 4 Argon: our next era of frontier intelligence #future #next blog.​google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/
178
This is what is going to change in Cybersecurity Autumn www.​scip.​ch/en/?labs.​20260930
124
Storm-3168: Agentic-driven cloud attacks using compromised service principals | Microsoft Security Blog #cloudcomputing #virtualization #cloud… www.​microsoft.​com/en-us/security/blog/2026/09/25/storm-3168-agentic-driven-cloud-attacks-using-compromised-service-principals/
126
Anthropic's Misuse Report, Condensed to 117 Findings danielmiessler.​com/blog/anthropic-misuse-report-september-2026
177