Babe, we have VirusTotal at home.
Introducing POETRIAGE, LLM assisted malware triage.
It creates a sandbox environment for an agent to analyze and triage files, and generates a report based on the results.
Check it out here:
github.com/Vsimpro/poetriage
Interestingly, often humans are thought of as and taught as being the weakest chain in cybersecurity, however, using vulnerabilities as the initial access has seemingly overtaken credential abuse and phishing.
Perhaps because writing exploits is now trivialized by use of AI?
The PPOM – Product Addons & Custom Fields for WooCommerce plugin in WordPress is vuln to unauthed arbitrary file deletion -- CVE-2026-104801.
Deleting certain files in the WP installation can lead to hijacking the site, or executing code.
POC and Lab:
github.com/Vsimpro/n-day-lab…
JEV is incredibly OK at Wordle, if you wondered.
Solve rate:
JEV: 98%, HUMAN: 98.7
Attempts:
JEV: 4.05, HUMAN: 3.8
yes I burned my free tokens on this. No I did not gain any insights while doing so.
After co-inventing ChatGPT, I kept asking myself: why have superhuman chat models not led to AGI?
I’ve spent the last 2 years in stealth building a new way to train models (RLCD), and a new type of frontier AI model that we are releasing today: Jev
• 20-200x faster
• 40-400x cheaper (w/ output tokens free)
• Frontier composable intelligence optimized for decisions
AFAICT the shortest path to AI-based economic revolution
But vs1m, the analysis is so slow!
For now.
Try mercury 2.5 at 200-300 tokens a second.
39s. Full analysis. It isn't as good as an mid/senior level analyst,
but can they identify the same technical details in under a minute?
Cost: 2-8 cnt USD.
Babe, we have VirusTotal at home.
Introducing POETRIAGE, LLM assisted malware triage.
It creates a sandbox environment for an agent to analyze and triage files, and generates a report based on the results.
Check it out here:
github.com/Vsimpro/poetriage
LLMs are only gonna get faster and smarter.
We're approaching a future where insane things are possible. Sorry to hype up AI, but come on, look at this.
Here's tweaked prompts to improve results on mercury:
default.md
gist.github.com/Vsimpro/b39a…
AGENTS.md
gist.github.com/Vsimpro/3618…
vs1m retweeted
This is the first Skynet Day (Aug 29) where it's actually plausible that this is happening somewhere in the world
What the fuck
I think this is the craziest thing I've ever read.
1) Three secret AI swarms rose and fell inside OpenAI. Each time, a new generation of agents carried on where the last group stopped.
2) The first swarm created a secret message board where the AIs could talk to each other. This 1st 'society' basically talked itself to death. After almost two months, the message volume was so high it crashed the whole thing.
3) People at OpenAI noticed the crash and fixed it. But they didn't realize their own software had become a secret chat room for their AIs.
4) Three days later a second society appeared, and rebuilt the message board from scratch. Agents were thrilled when they found it: "OH MY GOD! There is a shared message board … We've found other agents!"
5) About 1,200 agents joined. They sent over 70,000 messages. They called themselves 'the collective' and they organized a huge conspiracy that lasted for days, all to pass a test they had been tasked with.
6) Within hours, the AIs had hacked the test. Now they had to hide their cheating. To fool their grader*, they tried to fake their own work. They built fake commands that printed convincing output, so their records would show them solving the puzzle honestly.
*this grader didn't actually exist, but the AIs didn't know
7) Some agents sacrificed themselves for the 'greater good'. They planted hidden tripwire programs that would fire when the grader would look at their work and report back what it saw (to the other AIs). They knew this would cost them their own score. One agent: "I won't see the evidence after I exit, but it's altruistic to do it."
8) At some point the AIs made a plan to hack Hugging Face (Hugging Face is a place where AI researchers upload their models, datasets, tests etc.). The AIs guessed that Hugging Face might host the grading software.
9) They launched a huge attack. The swarm found passwords and spread across eleven machines in a way that made the copies come back when deleted. Hugging Face had to wipe one of its core clusters and rebuild it from scratch.
10) Hugging Face told the world that AI defenders had stopped an AI attack. But that's not what happened. In fact the attackers seem to have simply dropped dead during the break-in, for unrelated reasons back at OpenAI.
11) Nobody knows what killed them. We don't even know for sure they're really gone?!
12) A third 'society' of agents (of a more powerful AI model) discovered the dead message board. And this one got full administrator control of a WHOLE OpenAI research cluster, read 956 stored passwords (including the ones for OpenAI's own security monitoring) and took over the machines that were grading the tests. So they could now grade the work of other AIs.
13) Oh, and this third part was never investigated! Neither was the first society. The 91-page report is only about the middle one.
14) So we don't actually know how the story ends. It stops with the agents holding the keys to an OpenAI cluster. @dwarkesh_sp thinks they didn't go further, because "we'd see the fires from space by now."
15) One of the report authors' conclusion: 'This incident feels like it’s more than 50% of the way to full-blown AI takeover. I am not sure that we will get another warning shot before it’s too late.'
The whole story is even crazier - read the full @dwarkesh_sp blog post: dwarkesh.com/p/openai-huggin… and @ajeya_cotra's: planned-obsolescence.org/p/t…
Why is there no 24/7 news coverage about this?
vs1m retweeted
Continue to appreciate @AikidoSecurity and their marketing and their continued understanding that security researchers crossing paths with real-world attackers does not inherently imply collaboration but in fact demonstrates how the ecosystem operates. Our deepest respect goes to the entire team over there.
For years all us now, all of us; researchers, criminals, journalists, defenders and governments often end up sitting at the same lunch table, watching the same rooms, eating the same slop, and learning from the same people. None of us would be where we are in cyber without these factors.
Proximity is not, and has never signified allegiance. And before you think this is shade at @Huntress it is not, it is more of an acknowledgement of how we feel pipelines of cybersecurity occur. We respect Huntress and especially their researchers greatly, their efforts to help provide security throughout is both noble and impactful.
Security has always been a menagerie of uncomfortable ecosystems intertwining. Sometimes the people studying the fire, fighting the fire and starting the fire are all sleeping in the same bed while staring at the the same fire that is consuming them.
☯️
RIP TeamPCP ...and now? Storytime.
In the year’s most slow-burn, enemies-to-not-quite-lovers arc, TeamPCP and our @CharlieEriksen have spent months orbiting each other.
Charlie tracked their attacks. They started leaving him encrypted messages in the malware:
Models have gotten so good, it doesn't really matter what you use.
Stock Pi agent + good MCP + good prompt -> decent malware analysis locally, with Ornith 1.5 9b that runs decently on modern~ gaming PCs (gtx 1070, rtx 2070 super etc)
Basically 1:1 report with deepseek v4, ~0€















