Security Researcher & Exploit Developer @therealgregoAI | AI Security

Pakistan
Joined October 2023
ABDul Rehman | GregoAI retweeted
Replying to @Amank1412
2
9
790
ABDul Rehman | GregoAI retweeted
🚨 Nightmare day for cybersecurity Multiple major security incidents, active exploits, supply chain compromises... If you run production systems, start patching NOW. PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets. eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores. Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs. TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff. Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors. BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign. And that's not even the full list. Patch. Audit. Rotate. NOW.
98
583
132
3,721
464,661
ABDul Rehman | GregoAI retweeted
We recently started hunting bugs outside of Web3 using @therealgregoAI with impressive results This is one of the first vulnerabilities we have been able to disclose (with many more to come) TLDR: Apple's PCC revocation check was a no-op and revoked nodes kept getting the mesh keys for in-flight Apple Intelligence data Fixed in 26.4. Happy halloween! 🎃 @elonmusk a humble request for full markdown support in X articles as technical write-ups become difficult to accurately comprehend without it
5
2
1
119
4,633
ABDul Rehman | GregoAI retweeted
i used to often think how if i was born a few years earlier, i would've caught so many *obvious* opportunities such as crypto pre-2017. i was even sometimes mad that such opportunities seemingly no longer exist. and every few months i just get humbled as i look back and realize i've missed even more *obvious* opportunities.
22
5
1
212
6,973
ABDul Rehman | GregoAI retweeted
Companies: "AI is going to replace developers." Developers: "Cool. We're using AI to replace your products."
106
566
67
7,032
147,801
ABDul Rehman | GregoAI retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
733
1,474
1,232
11,652
2,955,349
ABDul Rehman | GregoAI retweeted
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
136
394
217
2,273
788,828
ABDul Rehman | GregoAI retweeted
Replying to @elonmusk
41
258
6
10,370
460,798
ABDul Rehman | GregoAI retweeted
38
707
11
16,772
157,345
ABDul Rehman | GregoAI retweeted
it is absolutely insane what elon has done for humanity it actually makes no sense electric, self-driving, flying cars -- openai, reusable spaceships, planetary expansion, new internet network that decides wars, paypal, x, solar, neuralink, hyperloop brother how???
425
519
73
6,717
210,572
ABDul Rehman | GregoAI retweeted
yBorg - Week 3 Day 1 Today we kicked off our bug bounty hunt with an alpha-packed talk and Q&A with reknowned bughunter @0xriptide We also covered preliminary steps to consider before kicking off an ai-assisted bughunt. Enjoy the vid, and post your comments below 👇
1
2
32
1,356
ABDul Rehman | GregoAI retweeted
They’d rewrite the bible in Rust if you let them 😂
259
1,341
190
13,719
321,459
ABDul Rehman | GregoAI retweeted
Hack and party!🕺
26
146
19
1,138
56,431
ABDul Rehman | GregoAI retweeted
Update Telegram Desktop immediately! A critical vulnerability has been discovered that allows attackers to gain access to your account and secretly steal files from your computer. The attack uses links in the format tg://. If a special command is constructed, clicking the link can cause a malicious script to send a selected file to the attacker’s channel - without requiring additional confirmation.
546
220
39
937
139,844
ABDul Rehman | GregoAI retweeted
A note to those building on chain in 2026: vibe coding + high code velocity + bull market pace + rapid TVL growth = bugs galore we see many teams building skyscrapers on sand with a "fix it later" mentality initially this works and they think they are geniuses ... but eventually someone will find the big, protocol wrecking, critical bug capital flight and brand destruction happens overnight entire savings lost, lives ruined financially, lawsuits filed, death threats received i've seen it happen time and time again and it will happen to YOU if this is your approach to building on the blockchain riptide's recommendations: 1) find a balance between securing the code and shipping fast. the security strategy should not be to push critical fixes like OTA updates for an XBOX game when any significant TVL is at risk. 2) invest in top tier human security talent. AI + expert SRs are a force multiplier. get a team that builds with a security first mindset from day 1. 3) properly incentivize responsible disclosure and treat your whitehats like kings. they are your last defense and will go out of their way to ensure your success if treated well remember that you may only get one shot at building a successful project that makes you millions of dollars ... best of luck anon
10
15
2
116
3,457
ABDul Rehman | GregoAI retweeted
All those years of refusing to learn excel and PowerPoint is about to pay off
Claude now works inside Google Docs, Sheets, and Slides, and those files also open inside Claude. In Google Workspace, Claude sits in a sidebar next to your file, reads what you have open, and edits it in place. You can approve each edit before it lands.
180
3,819
146
48,554
1,588,194
ABDul Rehman | GregoAI retweeted
the only moat left is caring about your project past two days
155
423
77
6,084
197,194
ABDul Rehman | GregoAI retweeted
Atomic synchronous composability is no longer a promise. History made on mainnet: the first atomic cross-chain L1->L2 transaction ever 🔥 And this is only the beginning for EEZ ... 🚀 @etheconomiczone
83
132
49
736
123,082
ABDul Rehman | GregoAI retweeted
Realizing that your job is forwarding instructions from your boss to Claude and taking Claude’s responses to send them back to your boss
108
344
47
8,515
503,497