𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon) header
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon) profile picture

𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐

@DasMeDevon

Just trying to reach that upper level — where your mind body and soul become one 🤌🤌🤌

 🇺🇲 ATX
Joined May 2011
  • Tweets5.8K
  • Following1K
  • Followers496
196Media
Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)Photo by 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 (@DasMeDevon)
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Atredis Partners (@Atredis) profile picture
Atredis Partners@AtredisOct 30
Multiple heap overflows found in NVIDIA's nvpcf laptop GPU driver; technical details in the advisory here buff.ly/5ObMaPz
advisories/2026/ATREDIS-2026-0013.md at master · atredispartners/advisories

advisories/2026/ATREDIS-2026-0013.md at master · atredispartners/advisories

Atredis Partners Security Advisories. Contribute to atredispartners/advisories development by creating an account on GitHub.

github.com
6
18
672
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
PWN AI (@pwn_ai) profile picture
PWN AI
@pwn_aiOct 30
Introducing CVE-2026-106378: Chrome GPU Sandbox Escape to full Remote Command Execution using synthetic keyboard injection By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser 😬
61
182
62
1,557
289,799
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Atredis Partners (@Atredis) profile picture
Atredis Partners@AtredisOct 28
Take a dive into the Steam platform as @dronesec details several LPE and RCE bugs in Valve's popular platform buff.ly/Lbj04kv
Turning the Valve - Exploiting RCE and LPE in the Steam Platform

Turning the Valve - Exploiting RCE and LPE in the Steam Platform

Diving into the Steam platform for local and remote code execution vulnerabilities.

atredis.com
5
8
379
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Project Zero Bugs (@ProjectZeroBugs) profile picture
Project Zero Bugs@ProjectZeroBugsOct 27
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines projectzero.google/2026/10/f…
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines

Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines

SummaryProject Zero compared two automated tools used by Google to find vulnerabilities in Chrome...

projectzero.google
3
43
226
14,418
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Parsa Hosseini (@paahrsa) profile picture
Parsa Hosseini
@paahrsaOct 25
Interested? Check out this paper from UMD grads at Apple:
Image from Parsa Hosseini (@paahrsa)
lyra (@_lyraaaa_) profile picturelyra
@_lyraaaa_Oct 24
if you have a qwen3.5 4b around, please try steering neurons L14 N8949 +1 and L13 N7956 -1 now you have evil qwen recipe: dose × median(‖resid‖ leaving layer L, tokens 1:) / ‖W_down[:, n]‖` at the down_proj at every input
9
97
9
1,311
37,237
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Jake (@jakeisinvestor) profile picture
Jake
@jakeisinvestorOct 26
Anthropic's S-1 is public as of this morning. Nasdaq, ticker ANT, with Goldman, Morgan Stanley and J.P. Morgan on the cover. First-half 2026 revenue was $16.3B. For all of 2025 it was $4.6B. No price range yet.
2
1
2
233
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Michael Helcig (@mhelcig) profile picture
Michael Helcig
@mhelcigOct 23
Run a 763B-parameter model locally. DeepSeek-V4.1-Flash-1017 on a 12GB GPU. Frontier quality with GSQ-RCO quants, directly supported in the Strata inference engine. Further info below. Much more to come. Follow for updates.
Image from Michael Helcig (@mhelcig)
98
189
65
1,773
187,094
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Juliano Rizzo (@julianor) profile picture
Juliano Rizzo@julianorOct 22
Brotli CVE-2026-111497 goes well beyond Node.js. Quick search shows unpatched Brotli decoders in Java HTTP stacks, WOFF2 libs, CF workerd. TLS certificate compression (RFC 8879) is another attack surface worth investigating. Check statically linked Brotli copies.
3
39
3
122
15,932
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_auOct 22
Just published our high fidelity scanner for php2shell: github.com/assetnote/php2she… See our detection logic here: slcyber.io/research/high-fid… We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.
14
89
8
534
51,101
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
s1r1us (@S1r1u5_) profile picture
s1r1us
@S1r1u5_Oct 21
ffs, litellm compromised again! if you installed llitellm==1.107.0, good chance your environment is compromised
12
24
9
254
19,670
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
H4x0r.DZ (@h4x0r_dz) profile picture
H4x0r.DZ
@h4x0r_dzOct 20
laravel Auth Bypass ! github.com/laravel/framework…
Image from H4x0r.DZ (@h4x0r_dz)
6
35
338
22,100
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Atredis Partners (@Atredis) profile picture
Atredis Partners@AtredisOct 19
Join Atredian Bryan Alexander (@dronesec) at @bsidespdx on Friday, 10/23, at 2:30pm to learn a bit about exploiting the Steam platform! He'll be detailing several LPE and RCE vulnerabilities discovered within Valve's popular gaming platform. Come say hi! buff.ly/fTYefGh
4
11
803
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
kai (@kaimcpheeters) profile picture
kai
@kaimcpheetersOct 16
I've added Gemini 4 Argon and Muse Wonder to StarSkirmish, an arena for LLMs to create StarCraft: Brood War bots
11
12
4
134
8,267
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Barbog Da Big Finka (@BarbogDaFinka) profile picture
Barbog Da Big Finka@BarbogDaFinkaOct 13
Amazing things are coming to the browser...
33
29
5
760
33,620
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Buldjat (@buldjat) profile picture
Buldjat@buldjatOct 9
Я поместил Sonic Adventure DX в Diablo 2, потому что мне не хватало демона скорости для быстро фарма
64
343
34
3,635
183,395
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Franco Belman (@0xFBFBFBFB) profile picture
Franco Belman@0xFBFBFBFBOct 9
Persistent Remote DoS via Integer Underflow in Wire iOS CVE-2026-35049: One message from a chat participant could crash Wire persistently without interaction. Recovery required reinstalling, erasing local message history. Fixed in 4.16.0. Advisory: blackwinghq.com/research/adv…
5
13
1,383
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Satoki@Kn0wl3dg3 (@satoki00) profile picture
Satoki@Kn0wl3dg3
@satoki00Oct 8
Pwn2Own Ireland 2026でMaster of Pwnの称号を頂きました。$361,000の賞金と42.5 Master of Pwn pointsをゲットです。チーム全員で獲得した、日本人初の世界トップハッカーの称号です😎 #Pwn2Own #P2OIreland
Image from Satoki@Kn0wl3dg3 (@satoki00)
35
108
12
1,064
43,931
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
watchTowr (@watchtowrcyber) profile picture
watchTowr
@watchtowrcyberOct 6
We're back, analyzing CVE-2026-21589 - an Arbitrary File Read vulnerability in Atlassian Jira, Confluence, BitBucket and more... Enjoy! labs.watchtowr.com/you-wont-…
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary...

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary...

Welcome back to yet another episode of "security was taken seriously". Being who we are (and constantly being exposed to what we see…), we recognize we have been doomed to eternal damnation as we...

labs.watchtowr.com
2
73
6
209
19,036
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Reflection (@reflection_ai) profile picture
Reflection
@reflection_aiOct 5
Beam combines strong agentic performance, efficient reasoning, and a 500B form factor to give enterprises, governments, and developers a true workhorse open model. It's our first step toward building frontier intelligence that is open and widely accessible to all. Now in the final stages of red-teaming, Beam will be released under an Apache 2.0 license this month, along with quantized FP8 and NVFP4 numerics for efficient deployment. Sign up for early access: platform.reflection.ai
Reflection API Platform

Reflection API Platform

Create API keys, try Beam in the Playground, and manage usage and billing for the Reflection API.

platform.reflection.ai
15
21
1
439
31,271
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 retweeted
Csaba Fitzl (@theevilbit) profile picture
Csaba Fitzl
@theevilbitOct 5
🍎 Pushed some updates to this over the weekend, it has much more data now to show, some key features: - links to open source components - fix timeline where available - jailbreak/in-the-wild exploits and CVE association - researcher profiles - patch coverage
Csaba Fitzl (@theevilbit) profile pictureCsaba Fitzl
@theevilbitOct 2
🍎🐛 I got Claude making this, maybe it's useful for others as well. Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations. apple-cve.com/
APPLE·CVE — every Apple security advisory, indexed

APPLE·CVE — every Apple security advisory, indexed

Search, filter and chart every CVE in Apple's security release notes since 2002.

apple-cve.com
2
1
28
2,435
Load more