David retweeted
🚨👾First post → Awesome research.
We compromised the latest version of OpenAI Codex.
We prompt injected.
We escaped a sandbox.
We exfiltrated secrets…
And ended up with control over what could be published to the official openai/codex npm package.
Prompt injection → RCE → supply chain compromise.
Full research by @0xMadder and @_Worty in the comments 👇
David retweeted
@SandflySecurity 6.0 is really awesome all around, but the machine learning malware classifier is my baby and dramatically increases detection capability on Linux. It was built to hunt for network implants and related malware which are major threats to critical infrastructure providers. Let me discuss just some things it does in this thread.
Log in to answers, not alerts. Sandfly 6.0 is live! Your team opens the dashboard to a ranked list of real threats, with the triage already done. Agentless, and it works with or without AI. Read our blog on the new release: ap1.hubs.ly/H01wk6B0
David retweeted
This is good info about Microsoft Defender internals.
protokol-7.github.io/dfir/20…
David retweeted
Microsoft just published Autoruns for Linux 1.0.0, so I created a Velociraptor artifact for it.
Linux.Sysinternals.Autoruns covers cron, systemd, XDG, ld.so.preload, udev and more.
🔗 Linux.Sysinternals.Autoruns
github.com/Velocidex/velocir…
🔗 Autoruns for Linux
github.com/microsoft/Autorun…
David retweeted
Welcome to Hotel Calif. We're in lockdown mode. You can check in, but you can never leave. Broccoli is served around the clock.
The Brotli bug apparently affected iOS and macOS too. Apple released version 27.2.1 yesterday, fixing this bug among other security issues.
This is an important security update. If you haven't updated yet, now's a good time. The demos show what we were able to do with it.
David retweeted
"The remote server request makes it look like it could be a GIF image that is being downloaded. The file is dropped to C:\programdata\ using a filename that looks like a JPEG image."
Read the full report: buff.ly/Fi47zHg
#DFIR #ThreatIntel
David retweeted
Refrigeration incidents: We still track around 170 Danfoss AK-SM8xxA Series CVE-2025-41452/CVE-2025-41451 vulnerable instances & 136 CVE-2025-41450 in our Vulnerable HTTP reporting: shadowserver.org/what-we-do/…
World Map view: dashboard.shadowserver.org/s…
David retweeted
I can barely believe it myself, but urlscan.io is 10 years old today. Time to reminisce and look back at the things we have built over the past decade, how our platform and company have grown and where we're headed next: urlscan.io/blog/2026/11/09/u…
David retweeted
MemProcFS-Analyzer v1.3.0 is out! 🚀
- PowerShell 7
- Command-Line Parameters
- Config.json (modules, whitelists, colors)
- 803 YARA custom rules
- New FindEvil alerts
- Zircolite v4 incl. Viewer
- Amcache SQLite Support
#MemProcFS #MemoryAnalysis #DFIR
github.com/LETHAL-FORENSICS/…
David retweeted
Online malware analysis sandbox. Detonates a submitted file or URL and publishes the report, and lets you search past public scans by indicator: IP, domain, URL, mutex, registry key, hash or JA3/JA4 fingerprint.
Reports are readable without an account; a free tier adds submissions, an API and a command line client.
malwagon.com
David retweeted
A lot of people don't realize that Windows has a built-in feature called Windows "Sandbox" that boots up a brand new virtual Windows machine in seconds. So I made an MCP server so you can test your apps inside a throwaway machine in seconds. github.com/shanselman/sandbo…
David retweeted
As promised, here is the blogpost for code execution on the meta rayban 😎 p0pcycle.com/2026/11/06/hack…
David retweeted
This is the future of malware. 👀
VOLTA doesn’t just steal your passwords and crypto wallets.
It packages everything and sends it to Claude Opus 4.6 with this prompt: “You are a forensic intelligence analyst. Rank what this victim is worth.”
If Claude refuses → Kimi K2 → Gemini.
We caught the full chain in the sandbox (including the exact request it sent to the AI)
Stealers are now outsourcing target prioritization to commercial LLMs. 🚨
app.threat.zone/submission/c…
David retweeted
Changing one letter bypassed an entire admin API in @huggingface chat.
One request could trigger bulk internal exports of every user’s private chats, completely unauthenticated.
Here’s how. 🧵
David retweeted
Introducing GPT‑6 Cyber: a major advance in security research that pairs stronger capabilities with better model alignment.
The model powered the Linux kernel research we announced yesterday, and security teams at companies like Mozilla, Palo Alto Networks, Calif, and Cisco—alongside our own at OpenAI—are already putting it to work.
GPT-6 Cyber is available to select Daybreak Red customers and we are expanding access over time.
openai.com/index/introducing…
David retweeted
Our profile of TraderTraitor - the DPRK group behind Binance, Bitget, AFX and LayerZero - with the fake company domains we’ve seen in 2026.
radar.securityalliance.org/t…
David retweeted
My new guide explains how to build a malware analysis lab with REMnux. A Windows VM and REMnux share an isolated network. The AI agent runs on REMnux, with the model as its one allowlisted destination.
zeltser.com/malware-analysis…
