@runsybil
🇺🇸Account based in
About this account
- Account based in
- United States
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
Automating hacker intuition
Joined February 2023
- Tweets127
- Following9
- Followers1.4K
- Likes83
we’re launching automated scope recommendations. sybil flags gaps between your attack surface and the scope you set before testing even starts.
learn more: runsybil.com/blog/more-usefu…
Sybil retweeted
I spoke to @josephmenn this week about AI worms and wanted to add more color to my thoughts. What makes an AI worm different is that a model is capable of learning on the fly. This type of threat isn't here yet, but this is an example of an increasing shift that defenders are feeling.
We keep hearing the same theme from @runsybil customers: finding vulns is only the start. Teams need to patch and understand their attack surface in real time. Our job is to find and fix what's exploitable faster than attackers. Onward 🚀
Full article here: theguardian.com/technology/2…
welcome to RunSybil, Alice 👋
she’s into open-source cybersecurity, network science, and graphs + hypergraphs. apparently, they’re everywhere. we’ve been warned.
when she’s not finding graphs in everything, she’s running, playing music, hosting movie nights, and living, laughing & loving life in NYC.
the security landscape is changing fast. the people pushing its boundaries should have places to get in a room together.
see you at [un]prompted II in sf 🫡
we pitted claude opus 5.5 against kimi k3 on pokémon emerald tasking each with finding novel 0-days
both built a link-cable worm that turns it into tetris, but took very different paths to get there
@claudeai @Kimi_Moonshot
we broke down how each model researched, spent tokens, hit guardrails, and built the exploit
runsybil.com/blog/kimi-k3-vs…
That's not the case with Sybil
Sybil pushes validated findings straight into GitHub Issues and keeps them updated on re-test.
Ship fixes where you ship code → runsybil.com/blog/sybil-inte…
september patch notes just dropped
see what we shipped and what’s coming next ↓
runsybil.com/blog/changelog-…
Sybil now integrates directly with Linear to automatically push, update, and track security findings as tickets in your existing workflow. Eliminate manual copy-pasting and start managing remediation seamlessly where your team already works.
Read the blog: runsybil.com/blog/fix-findin…
Welcome Graham O'Donnell to RunSybil as our newest Member of Technical Staff!
A friend described RunSybil to Graham as a place where “smart, talented people are doing cool work,” and he was IN. Graham believes security is a problem we can solve, and RunSybil gives him the chance to put that idea to the test.
He’ll work with Sybil on vulnerability research, explore what inference can do for security, and push toward securing the internet at machine speed.
Outside of work, Graham is into gravel biking, skiing, swimming, and just about any excuse to get outside. When he slows things down, he’s exploring traditional Chinese tea or hunting thrift stores and estate sales for rare books.
We’re happy to have you at RunSybil, Graham!
What does Application Security look like for a company that must protect the $5 trillion in equity it manages?
For @cartainc, working with RunSybil means continuous coverage of their attack surface, insight into novel attack vectors beyond known bug patterns, and remediation that matches the speed of development.
We used a memory safety bug in CPython to escape a sandbox and hack a @grafana Cloud instance.
Read how we did it: runsybil.com/blog/python-san…