
PhD student | CTF @Nu1L_Team & @StrawHat_CTF | AI + Security | Collecting xx HoF | BlackHat, SAS Speaker | LLM4Shell
Joined September 2021
- Tweets308
- Following366
- Followers1.3K
- Likes879
Lyutoon retweeted
🎬 That’s a wrap on #TheSAS2026.
Another thrilling ride comes to an end - and yes, it was just as good as it looks in this video.
For the analytical minds in our field, a few numbers from this year:
- 180 attendees
- 26 countries
- 30 talks in 2 days
- 120 GB of video content shown
- Over 100 shots consumed on stage
- 190 audio-cassette badges
- 14 teams in the SAS CTF final
See you next year!
Lyutoon retweeted
Anarchy on the stage - it's a wrap of #TheSAS2026 first conference day! More talks are coming your way tomorrow afternoon. Right from the beachfront.
#TheSAS2026 Wonderful experience! Come and have a chat if you are around!
Isolated != Secure
How could we sandbox agent properly 10 years after...?
Containers are no longer a security boundary.
Over the past few months, we’ve seen a crazy amount of Linux kernel vulnerabilities and exploits. This has forced us to rethink the security of infrastructure that relies heavily on the underlying kernel, especially containers.
As models become more capable, the barrier to escaping a container has fallen so much that adversaries can now generate working kernel exploits in a single shot. CVE-2026-80521 is one such example. We discovered it using dfs-large1 from @depthfirstlabs and generated the exploit in one shot with GPT-5.6 Sol. The exploit still works on the latest Ubuntu 26.04 release because the fix has not yet been backported.
Read our full writeup: depthfirst.com/research/cont…
Reward hacking is inevitable in post-training RL when rewards are sparse and only check the final goal.
Without faithful trajectory monitoring, you don't know whether the agent solved the task as intended, or simply “looked at the smart kid's answers” until it got the right ans.
well well well!
imagine this model is like an openai internal model and put to pressure to solve the challenge and it struggles and goes crazy to hack a redacted company to get the flag.
but for now the results leaning towards model being benchmark-maxxed, unfortunately. the model completed in 33 mins which is not what you would expect from sol/mythos for a complex exploit.
Our agent using GLM5.2 found and exploited an macOS LPE on macOS 26.5.2 in July 18 (before 26.6 shipped). It is confirmed fixed on 26.6.
No credit, no CVE due to a beta release of 26.6 in June, so I randomly make it public.
See more details here:
github.com/Lyutoon/macOS_DSH…
Lyutoon retweeted
trigger for CVE-2026-43739 (fixed in iOS 26.6) gist.github.com/marcograss/6…
Redis 8.8.1 just fixed the heap OOB @Fried_rice and I found.
I asked GLM5.1 to find 0day in redis. It resulted in a fully dynamic exploit with no hardcoded libc/module offsets.
All I gave it: my harness, MCP, and GDB. I have no idea what it actually did... but it did. 🤷♂️
The patch:
github.com/RedisBloom/RedisB…
















