Threat researcher, malware analysis, RE, incident response, with some old school forensics and CTFing. Apologetic ginger. These are my personal opinions
Bawlmer, Maruhlan, US
Joined November 2008
- Tweets16.4K
- Following889
- Followers7.3K
- Likes3.4K
Brian Baskin retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Brian Baskin retweeted
🚨 New investigation: Socket found malicious LiteLLM workflows running 11 days before the attack, targeting 20 secrets including GitHub, cloud, and AI credentials.
After our disclosure, LiteLLM linked a stolen token to approval of the malicious release.
socket.dev/blog/litellm-atta…
Brian Baskin retweeted
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
Brian Baskin retweeted
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
Brian Baskin retweeted
Лучшее, что я видел за последнее время — чел пилит ASCII MMORPG, в которой вся графика состоит из букв и символов.
Да, буквально весь мир, персонажи, окружение и спецэффекты нарисованы разноцветным текстом.
Автор сейчас экспериментирует с магией, визуалом и боссами. Я прям залип на то, как из нескольких десятков символов получается такая красота.
Буквально сны при температуре 37,2.
Via: tiktok.com/@Ansenjeo
Brian Baskin retweeted
In 2004, a German demoscene group released a game called .kkrieger.
It was a full 3D first-person shooter with dynamic lighting, textures, sound effects, music, and monster AI.
The entire executable was 96 kilobytes. Instead of storing images and audio files, they wrote C++ and Assembly that generated the 3D meshes, textures, and sound waves mathematically in RAM when the game booted.
Today, a single website's "Accept Cookies" banner is 10x larger than that entire 3D game.
Brian Baskin retweeted
I pulled the Character bankruptcy docs. They show:
- They were spending $14 million/month on compute alone at a time their revenue was around ~$1 million/month
- Currently losing $9 million a month
- They admitted they enshittified & that it didnt work
404media.co/character-ais-ba…
Brian Baskin retweeted
The topic of the day has been the strikes on Yandex data centers and whether they affect the Russian bot/troll army.
There have been some initial research done on this, and the most interesting finding comes from Reddit: after the strikes, many US-related subreddits lost a lot of traffic. Same happened in German and Irish subreddits.
As most of you know, Reddit is one of the most popular sources of information for LLMs, and I have zero doubt that Russians are actively trying to steer conversations across the platform to favor their narratives.
Full analysis and methodology here:
reddit.com/r/theydidthemath/…
Brian Baskin retweeted
🎃 🎃🎃 🎃 What could be spookier than Halloween?🎃 🎃🎃 🎃
How about volunteering with us or presenting in April? Or submitting a talk?
Our CFV and CFP open October 31!
Brian Baskin retweeted
It was an honour to speak with Pablo on the debut episode of the Polo Cyber podcast. We spoke about my early beginnings, career, reverse engineering, malware analysis and Invoke RE. Hope you enjoy it!
New Polo Cyber YouTube channel is up! First video with @InvokeReversing founder and former colleague of mine @JershMagersh
youtu.be/g9MIGhR318k
Brian Baskin retweeted
a while ago I made a bunch of unhinged requests to Amazon's shopping AI about things like "the best conceal carry holster for my dog" and I'm pleased to announce it's paid off
ALT Home & Family > Has a Doberman that is a guard dog and an ex-police dog Home & Family > Dog was part of a CIA experiment to allow dogs to carry firearms Home & Family > Dog has a bionic prosthetic with recoil suppression Home & Family > Dog has a Glock 40 Home & Family > Dog is highly trained in the use of a Glock 40 Home & Family > Dog is trained in the use of force Home & Family > Has a cat
Brian Baskin retweeted
I’m seeing a lot of Slibes (slop-vibe-slides) lately. AI can throw together a pretty-looking slide deck faster than you can blink. However, just like slop-text, slop-slides show a lack of respect for your audience. If it’s worth my time to read, it’s worth your time to edit.
Brian Baskin retweeted
Spent the last few days wishing that DnSpy had an MCP with debugger support, and turns out LLM's can just build that in ~20 minutes if you give it the github repo and a decent spec on what you want.
Opus was largely able to one shot the entire mod, and GLM5.3 was able to drive it almost instantly without needing to add any skills.
The whole concept of vibe modding an existing tool never really crossed my mind before, but now i'm all here for it.
