Direct link to the sqlite 0day logs: theori-io.github.io/aixcc-public/l…

Parsing PDFs has slowly driven me insane over the last year. Here are 8 weird edge cases to show you why PDF parsing isn't an easy problem. 🧵

While playing DEF CON CTF Finals with Shellphish I managed to solve the ICO challenge using LLMs (GPT5 + Cursor) and almost no human intervention. You can read how I did it here! wilgibbs.com/blog/defcon-fi…

The West has a blindspot when it comes to alternative CPU designs. We’re so entrenched in the usual x86, ARM, RISC-V world, that most people have no idea what’s happening over in China. LoongArch is a fully independent ISA that’s sorta MIPS…sorta RISC-V…and sorta x87!

Sebastien Bubeck I'll throw this out there: I have a site, Emergent Mind, where I've built a platform for analyzing arXiv papers at scale. I also have over $100K in Azure credits and can use those credits on GPT-5. It would not be hard for me to run thousands of papers in math, AI/ML, etc

New post and tool! Attackers can break production AI systems by using image scaling to hide multi-modal prompt injections from users. 🧵for more info on what broke, how this works, and our new tool to try this out yourself

OAIC talk acceptance notifications went out this afternoon! Official speakers list and session details coming SOON.

You must augment LLM systems with info retrieval; they won’t excel as the IR system itself (context limitations, poisoning, hallucination, etc). Especially when you start engineering for cost, throughput, etc. AI apps make search API calls. Feels like Google/search is safe.

"Building internal-only tools! Where you don't need to worry about security, scalability, malicious usage." Red teams everywhere: 🤪

Which SDK do you think has so far found the best abstraction layer for creating small agents?

We are looking for interns to work with us on VLA, reasoning model and security related topics. Please apply via the following link

Jensen didn’t mention all of our published AI security research?! I guess we need to get into his script generation prompt. Gotta be a RAG system somewhere… Seriously though: it’s great how much we’re encouraged to share with the ecosystem at NV.

Apple's Real World CTF : you get the flag, you get the bounty security.apple.com/blog/apple-sec…

Can anyone point me at a good example of a multi-arch docker image that is built through GitHub actions? The image description has gone missing since it was changed to multi-arch and I want to find another repo who has it working so I can see what fix is needed.

Fun read: allvpv.org/haotic-journey…