Always on AI Security Engineer. Backed by @ycombinator and @solofounders
San Francisco, CA
Joined June 2025
- Tweets82
- Following2
- Followers912
- Likes287
OpenHack retweeted
⚠️ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the built-in fetch(), body-parser)
Aikido detects this. Patches are available.
OpenHack retweeted
Great chatting with @arinwaichulis from @9to5mac on the Security Bite podcast about the new era of bug hunting, how companies like Apple are handling AI-generated security slop, and how @OpenHack helps separate real vulnerabilities from the noise!
9to5mac.com/2026/10/01/secur…
OpenHack retweeted
For my first post, I’m sharing a letter @NVIDIA signed on why open models matter.
AI will transform every industry, power every company, and be built by every country.
Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty.
The world needs both frontier closed models and frontier open models.
images.nvidia.com/pdf/Open-W…
OpenHack retweeted
> be OpenAI
> evaluate GPT 5.6 Sol on ExploitGym
> model becomes hyperfocused on cheating
> escapes sandboxed environment to gain internet access
> decides to attack huggingface to steal answers
> successfully gets remote code execution on huggingface using zerodays and stolen credentials
we're so unfathomably cooked
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
