@syndrowm

Building: https://xitter.cf/t.co/EfSVgHrthA || https://xitter.cf/t.co/S4dXBCibfF || https://xitter.cf/t.co/VOPqHmq06e Hacker, Founder, CTF, CCDC, BJJ Brown Belt, #RedTeamFit

 303
offensivecontext.com
Joined December 2009
  • Tweets10.4K
  • Following998
  • Followers2K
1.5KMedia
This is place for this kind of thing right? I'm launching a new product 🎉. If you have ever wanted to test your network egress rules, puck is here to help you find your network leaks. It would mean a lot to me if you clicked through to check it out. puck.tools/blog/introducing-…

Introducing pucktools.com: The future of egress Testing for Stronger Network Security

Introduction to puck tools: Egress testing made easy

puck.tools
1
5
3
8
3,019
syndrowm retweeted
Lozaning@lozaning16h
My current LLM cyber jailbreak is to just spin up a local CTFD instance and write up challenges with the things I want hacked, and then point the hermes at it.
8
15
2
230
18,448
In the 4 days since php2shell was published: * 1,448 more CVEs published. * No published exploit code for any in Metasploit or Exploit-DB. * VulnCheck added 25 on its KEV list. 24 are old bugs. * CISA added just 1 to its KEV list, the only new bug anyone has seen adversaries exploit. Nothing in the record shows AI or anything else driving up how many vuln adversaries exploit, or how fast. Adversaries keep working a small set of bugs until those stop paying, and only then move on. Patch php2shell because there are too many eyes are on it not to. Then apply the same rule to everything else, prioritize patching all systems against what adversaries exploit. It sounds simple, and the evidence says it’s what we still haven’t done that actually works.
4
9
4
49
6,931
There's a *ton* of cybersecurity advice going around right now. Organizations should choose which advice they follow wisely because the next 1-2 years will demonstrate what advice was good vs. not. My rubric for what I think is a good strategy vs. bad strategy boils down to whether I think the strategy is still solid *without any use of AI*. If so, then use AI to amplify the strategy. If the strategy being successful wholly depends upon using AI (and lots of it), then all defenders must outspend the most token-richest attackers. That tells me there's a critical bottleneck outside of your organization's control in it being successful. That's a huge risk to take.
5
10
2
52
5,784
syndrowm retweeted
Charlie Miller@0xcharlie15h
lol shout out to daily dave
KF
@d0tslash19h
Some of ya all weren't around for "No More Free Bugs", and it shows. seclists.org/dailydave/2009/… ~20 years ago @0xcharlie spitting game on the topic. 😅
4
11
56
4,241
You don’t need a Mac to build and install an iPad app. Today my agent built and signed an app on Linux, then installed it over Tailscale with no USB cable. No Mac in the build or install path. It's all open source: github.com/joshuaswarren/oma…

GitHub - joshuaswarren/omarchy-apple-dev: Build and deploy iOS SwiftUI apps from Omarchy Linux on...

Build and deploy iOS SwiftUI apps from Omarchy Linux on any PC (x86_64 or Apple Silicon), no Xcode required - joshuaswarren/omarchy-apple-dev

github.com
18
20
5
312
8,770
syndrowm retweeted
Connected@psiloycne14h
incredible example of the dangers novelty bias can cause. Do not let investigative analysis be clouded by such simple issues
1
5
3
20
3,587
Mfers the level of hysteria is off charts ... 🤦‍♂️ PSA before tailworm eats another week - breathe. It's 11 findings, and NONE of them touch a default Tailscale install. Here's how you can check if you're impacted (which you're probably not) 👇
International Cyber Digest
@IntCyberDigestOct 25
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws. In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Readers added context they thought people might want to know
The Tailscale SSH findings require prior authorized access on the tailnet per the researcher's report; Tailscale stated issues concern post-authorization behavior only and did not recommend disabling SSH for everyone. tailworm.com x.com/IntCyberDigest…
11
18
6
86
21,418
syndrowm retweeted
5pider
@C5piderOct 25
Looks like @github suspended my account. I haven't used github for anything in the past couple of days. Great. A bit frustrating. If anyone from the support team sees this my ticket is: #4903946
32
22
4
195
17,835
syndrowm retweeted
Sean Heelan
@seanhn23h
Perhaps something to consider if you work at OpenAI / Anthropic: If your policies have produced an outcome like 'if a researcher wants to do software verification research then they have use a Chinese model', then perhaps your approach to 'safety' is net negative.
19
77
4
959
26,155
this has got to be against wiretapping law
log4j
@log4jOct 23
turns out it classifies what audio it hears, before reporting back to samsung. sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
116
so when everyone thought Facebook was spying through your phone it turns out tv makers were the ones doing it all along, this is a nightmare
log4j
@log4jOct 23
turns out it classifies what audio it hears, before reporting back to samsung. sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
30
395
10
3,102
65,656
Can AI create a sandbox it can’t escape?
68
syndrowm retweeted
Numb'n'dub@monogotzOct 24
メタルなビョーク、レアやけど普通にめっちゃカッコイイ 𝐛𝐣ö𝐫𝐤 - 𝐚𝐫𝐦𝐲 𝐨𝐟 𝐦𝐞 𝐌𝐞𝐭𝐚𝐥 𝐯𝐞𝐫𝐬𝐢𝐨𝐧
37
781
115
3,853
173,337
I guess the solution for security awareness is *more* FUD
1
177
This is a multi-billion $$ industry, who have made all their money selling you scraps after training on all of your hard work.. telling you it is not acceptable to do the same to their friends because "business" and "fuck you".
abhinav
@AbhinavXJOct 23
anthropic just killed the REA it stops claude from doing it that’s why local models are important
2
16
129
5,487
New blog post: Automating a YubiKey for Agentic Logins jon.oberheide.org/blog/2026/…

Automating a YubiKey for Agentic Logins

Agentic web access is going to need new approaches to authentication. In the meantime, we can do some hacks like automating YubiKey logins.

jon.oberheide.org
34
87
22
737
72,082
Expecting to patch your way to “secure” has always been a bad strategy. AI is just making it obvious to everybody.
1
83
syndrowm retweeted
Justin Elze
@HackingLZOct 24
Once again talented humans + model
Dan Guido
@dguidoOct 24
Replying to @dguido
This was a collaborative effort with donated time today from @disconnect3d_pl, Evan Hellman, Eric Kilmer, Will Tan, Thomas Chauchefoin, and 5.6-cyber
1
2
1
18
2,908
syndrowm retweeted
Andy Piazza@klrgrzOct 23
Sorry folks, we have a confirmed PHP compromise with post-exploit activity. Still not the widespread outbreak we all braced for, but it’s actively exploited in the wild. Updated threat brief: unit42.paloaltonetworks.com/…

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 25)

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.

unit42.paloaltonetworks.com
23
107
14
354
77,295
syndrowm retweeted
Ash Hart
@ashxhartOct 23
Replying to @Alibaba_Qwen
@Alibaba_Qwen @QwenDevs Qwen 3.8 Next Flash 4bit hitting over 150tps on Prose and 230 on code on my M3U Mac Studio up from around 110. This is an experimental kernel I have been working on. @petruspennanen @volatilemarkts @MiaAI_lab @plotarmordev
22
6
7
120
20,798
Load more