2nd place National CCDC concludes my participation in collegiate cyber competitions. I'm proud of my team Cal Poly SWIFT giving it our all and fighting till the end 🫡.

last summer as an intern with @xforce my partners and i found some bugs in iot gym equipment affecting 143k+ devices! read the x-force blog about it :) securityintelligence.com/x-force/intern…

OPPORTUNITY Reversing ruinous policies is just one side of the coin. We can also imagine positive policies that encourage tech startups to flourish – benefiting those startups and their customers, and forcing big incumbents to stay vital and dynamic due to startup competition.

I'm hiring for a Head of AI Security Testing (aka AI red teaming) role! This role is responsible for conducting applied research to develop novel ways to manipulate and breach AI systems, focused on meaningful impacts to safety and security. Joining a huge team of hackers,

I love Austin, Texas.

MLOps platforms are becoming critical to enterprises. This has caused Chris Thompson and I to research these platforms and how they can be abused by attackers. Check out our research we will be presenting ShmooCon this week. securityintelligence.com/x-force/abusin…

cursor after I send “still broken” for the 15th time:

One of the most dangerous temptations investors face is the temptation to find problems with startups in order to show how clever they are. This can make them reject companies that end up doing well.

It will never be possible to patch up all the ways these things can be bamboozled into doing stuff they're not supposed to do. Fundamentally unsolvable. It's fun watching everyone try though

Loki C2 blog drop! Thank you for all those who helped and all the support from the community. Big shoutout to Dylan Tran and chompie for all their contributions to Loki C2! IBM IBM Security X-Force securityintelligence.com/x-force/bypass…

I am excited to announce the first conference dedicated to the offensive use of AI in security! Request an invite at offensiveaicon.com. Co-organized by RemoteThreat, Dreadnode, & DEVSEC. The Call for Papers opens Tuesday, March 25, 2025, and will remain open until Friday,

Had a lot of fun digging into COM stuff with bohops recently! We ended up finding a way to laterally move without dropping a file. ibm.com/think/news/fil…

Wrote a short article talking about why RAG is a mind virus that must be eradicated

some of us are new to research so I’ll help with the basics: - repro of other’ ppl’s work is encouraged - using other ppl’s terms is encouraged - don’t claim them as your own - clarify what your contribution is - don’t blur the line - reference their work happy hacking!

“genai”

kache thanks bro

You’ve gotta be an abysmally dim MF to see AI jobs handing out $100m salaries and thinking “nah, gimme the $100k cybersecurity job where all the grumpy mentally unstable people are”

time to listen to DS2 by Future and write some mf prompts