Vylegzhanin Daniil retweeted
I do wonder when someone will end in court over
“exploiting beyond what is necessary to demonstrate impact”
how delusional "security" specialists are that think they can conduct unauthorized activities in other org infrastructure. openai is very kind to not escalate (and imo that's what they needed to do).
Vylegzhanin Daniil retweeted
.@L3HarrisTech says Palantir helped them beat frontier AI models in less than 2 days, at 95% lower cost:
"When we fine-tuned open source models trained on our own data, we were able to outperform the frontier models in less than 48 hours."
"The cost of our fine-tuned open source model was 95% lower than the frontier models we were using."
"AI is a commodity. It's all about the data. We view our data as a corporate asset. It's our unique hard-earned knowledge."
"We believe American defense companies should not be a vassal for frontier AI labs, handing over our data and institutional knowledge, hoping to rent back the intelligence it creates."
" We own the model, we own the compute, we own the advantage."
Palantir CEO Alex Karp says enterprises want to "own the means of production" instead of "transferring their alpha" to OpenAI or Anthropic:
"Why are [LLMs] charging for tokens if it's so valuable?"
"If it was so valuable—let's say I can make you a billion dollars tomorrow. Wouldn't I say, 'I'll make you a billion dollars, and I want 30%?'"
"Look at our financials. The reason why everyone is chillaxing with bad financials and growth while losing money, is the client refuses to pay the true cost."
"The two places that actually make money—profit, free cash flow—are our application layer called ontology, and compute."
"We can get the frontier application to be exactly the same as a frontier model without the risk of transferring the alpha of your business to another."
Via @CNBC
Vylegzhanin Daniil retweeted
"I have observed at least four recent examples where a crash or query in online models resulted in loss of a specific asset in an unambiguous way within weeks of exposure. Therefore, many researchers should keep their workflows and expertise offline as online models may absorb and commoditize unique techniques and research patterns over time. It is also likely that marquee government clients will begin insisting that sensitive research work remain entirely “untainted” by online frontier models."
The Supply Chain - A New Hope: The Era of AI and its impact
A new article is out!
medium.com/@maor_s/the-suppl…
Vylegzhanin Daniil retweeted
Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.
Now you can. Enjoy!
netspi.com/blog/technical-bl…
I heard artifactory is hot now
netspi.com/blog/technical-bl…
Vylegzhanin Daniil retweeted
Welcome to the red team world…. where blue chastised us for hoarding TTPs 😂😂
Knowledge getting distilled by LLMs, creates the illusion that R&D is getting cheaper or easier. While its the opposite in fact. Sharing "methodologies" or certain kind of "outputs" (like engines, complete working tooling, etc) is now harder than ever if you are in the R&D space be it blue or red.
It was already hard tbf, but now the time has shrunk and value perception has changed :D
So, while sharing detections rules, snippets of tooling and things in between is still valid and should happen imo. other things should be kept close :)
Shared a note about the issue I discovered during the weaponization of auditd persistence on macOS
blog.offensive.af/posts/audi…
Vylegzhanin Daniil retweeted
We've just pushed details on our latest #Nighthawk release (Sivako) nighthawkc2.io/sivako/ - including async BOF support, native kerberos and more 🔥 vimeo.com/1115201393?share=c…
Vylegzhanin Daniil retweeted
Exploring the WDAC Microsoft Recommended Block Rules: kill.exe
kill.exe is an interesting SDK #lolbin. Instead of loading unsigned code through deserialization or through some script host trampoline magic, kill.exe appears to bypass WDAC b/c it is vulnerable to buffer overflow
Infosec twitter is something
Vylegzhanin Daniil retweeted
So I wanted to collate a bunch of different attacks you can perform via ServiceNow that we've used pretty regularly, but for which there doesn't seem to be much out there publicly.
Stumbled on ServiceNow during a red team? If not you might want to check our latest post on Red Teaming with ServiceNow by @__invictus_ mdsec.co.uk/2025/03/red-team…
Vylegzhanin Daniil retweeted
V8 Sandbox escape/bypass/violation and VR collection
github.com/xv0nfers/V8-sbx-b…
Nothing feels better than finishing a year with a high integrity callback on the high value server running under privileged account.
Spent last two weeks working with Binary Ninja and finally can put ida to the bin. Awesome product, solid plugin support (lighthouse available!), 10/10
Rip webdav motw bypass, was part of some nice exec chains, burnt as cve-2024-38213 by zdi. Unlucky that won't be able to use it for my next gig but had some good time.
Vylegzhanin Daniil retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996