Anvil Secure (@anvil_secure) header
Anvil Secure (@anvil_secure) profile picture

Anvil Secure

@anvil_secure

Anvil delivers high-quality infosec consulting services. To work with the industry's finest or to simply get more information contact us [email protected].

 Seattle, WA
anvilsecure.com
Joined February 2017
  • Tweets303
  • Following503
  • Followers203
141Media
Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)Photo by Anvil Secure (@anvil_secure)
Anvil Secure retweeted
The Verge (@verge) profile picture
The Verge
@vergeSep 20
But they’re more dangerous with AI. theverge.com/science/997834/…
Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems

Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems

Critical infrastructure was already vulnerable.

theverge.com
11
6
1
27
47,410
Anvil Secure retweeted
WIRED (@WIRED) profile picture
WIRED
@WIREDAug 31
A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems extend far beyond your local cash machine. wired.com/story/atm-flaws-re…
ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems extend far beyond your local cash machine.

wired.com
4
13
1
33
34,017
Anvil Secure retweeted
James Kettle (@albinowax) profile picture
James Kettle
@albinowaxAug 5
The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here -> portswigger.net/research/htt…
Can AI do novel security research? Meet the HTTP Terminator

Can AI do novel security research? Meet the HTTP Terminator

Abstract We all know AI can find bugs. After a decade of research, I asked a harder question: can an autonomous system invent new attack techniques, and use them to hack live websites at scale? Buildi

portswigger.net
5
145
5
491
26,703
‼️ ALERT - Windows malware could silently sign in to passkey-protected accounts. Researchers found 3 post-compromise paths in Chrome's Google Password Manager that could bypass user verification, plant an attacker-controlled key, or recover the secret protecting an account's synced passkeys. Two give reusable access from another machine. Here's how the attacks work: thehackernews.com/2026/08/go…
Image from The Hacker News (@TheHackersNews)
10
69
3
219
53,172
🚨 Microsoft just released its largest Patch Tuesday ever. 🩹 570 vulnerabilities fixed 🔥 3 zero-days (2 actively exploited) 💻 141 remote code execution flaws Microsoft recently warned larger Patch Tuesdays were coming as it uses AI to help discover more security flaws before attackers do. ➡️See full report: bleepingcomputer.com/news/mi…
Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclo...

bleepingcomputer.com
17
192
12
591
70,709
New macOS malware embeds fake errors to confuse AI analysis tools bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

New macOS malware embeds fake errors to confuse AI analysis tools

A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable.

bleepingcomputer.com
2
25
2
52
10,094
Anvil Secure retweeted
Burp Suite (@Burp_Suite) profile picture
Burp Suite
@Burp_SuiteMay 21
🏆 Nominations for the 2026 Burp Suite Extension Awards close THIS TUESDAY ⚠️ Week 3 of Extensibility month is almost wrapped - here's what happened, what's still to come, and how to get your nomination in before it's too late 👇
Image from Burp Suite (@Burp_Suite)
1
5
1
26
10,395
Anvil Secure retweeted
Burp Suite (@Burp_Suite) profile picture
Burp Suite
@Burp_SuiteMay 14
👾 Wed 20 May | 12:00 PM EDT (5:00 PM BST) ByteBanter: LLM-driven Payload Generator for Burp Intruder - Andrea Braschi ByteBanter uses LLMs to generate payloads dynamically inside Burp Intruder. Andrea will demo the inner architecture, newly released features, and practical ways to put it to work. Catch it live on the Burp Suite Discord 👇 discord.com/events/115912411…
Discord - Group Chat That’s All Fun & Games

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com
2
2
1
3
188
Anvil Secure retweeted
Burp Suite (@Burp_Suite) profile picture
Burp Suite
@Burp_SuiteMay 5
Welcome to Burp Extensibility Month! #BurpExtensibility #BurpSuite #BApps
Image from Burp Suite (@Burp_Suite)
1
9
1
36
5,709
Anvil Secure retweeted
WIRED (@WIRED) profile picture
WIRED
@WIREDMay 8
Thousands of schools around the US were paralyzed on Thursday after education tech firm Instructure shut down access to its Canvas platform following a breach by hackers going by the name ShinyHunters. wired.com/story/canvas-hack-…
The Canvas Hack Is a New Kind of Ransomware Debacle

The Canvas Hack Is a New Kind of Ransomware Debacle

Thousands of schools around the US were paralyzed on Thursday after education tech firm Instructure shut down access to its Canvas platform following a breach by hackers going by the name ShinyHunt...

wired.com
5
24
1
46
13,623
Everything hit at once this week ... 📦 Supply-chain: Axios hack 🌐 Exploits: Chrome 0-day, TrueConf, Fortinet 🍎 Patches: Apple DarkSword fixes 🧩 Malware: ClickFix, DeepLoad, Mirax, Venom 🤖 Leak: Claude code exposure 🎯 Phishing: device code surge, banking scams 🕵️ Privacy: LinkedIn tracking claims 🛰️ Spyware: Paragon use confirmed 🌍 Infra: residential proxy abuse 💰 Targeting: crypto org attacks 📱 Policy: India SIM-binding 🔁 APT: access regain attempts 💣 Insider: extortion case ❤️ Data: OkCupid settlement 🧠 Trend: stealer surge, malicious extensions Read the full recap → thehackernews.com/2026/04/we…
Image from The Hacker News (@TheHackersNews)
5
41
3
170
35,701
⚠️ A flaw in Claude’s Chrome extension let attackers inject prompts by just visiting a page. No clicks. A hidden iframe + XSS chain made the extension treat attacker input as real user commands, enabling data theft and actions like sending emails. 🔗 How the silent prompt injection worked → thehackernews.com/2026/03/cl…
Image from The Hacker News (@TheHackersNews)
13
91
9
248
30,341
Trivy supply-chain attack spreads to Docker, GitHub repos bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Trivy supply-chain attack spreads to Docker, GitHub repos

Trivy supply-chain attack spreads to Docker, GitHub repos

The TeamPCP hackers behind the Trivy supply-chain attack continued to target Aqua Security, pushing malicious Docker images and hijacking the company's GitHub organization to tamper with dozens of...

bleepingcomputer.com
2
33
2
88
13,241
Microsoft: Hackers abusing AI at every stage of cyberattacks bleepingcomputer.com/news/se… #Security
Microsoft: Hackers abusing AI at every stage of cyberattacks

Microsoft: Hackers abusing AI at every stage of cyberattacks

Microsoft says threat actors are increasingly using artificial intelligence in their operations to accelerate attacks, scale malicious activity, and lower technical barriers across all aspects of a...

bleepingcomputer.com
1
5
12
810
Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks

Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks

A previously undocumented set of 23 iOS exploits named "Coruna" has been deployed by multiple threat actors in targeted espionage campaigns and financially motivated attacks.

bleepingcomputer.com
1
19
1
49
6,233
AI is becoming part of everyday criminal workflows - helpnetsecurity.com/2026/02/… - #CyberSecurity #CyberCrime #ArtificialIntelligence #InfoSec #ThreatIntelligence #CyberSecurityNews

AI is becoming part of everyday criminal workflows - Help Net Security

AI in cybercrime is moving from experiment to daily use, with forums showing growth in scams, fraud, and AI-powered tools.

helpnetsecurity.com
1
3
3
289
Fortinet blocks exploited FortiCloud SSO zero day until patch is ready - @LawrenceAbrams bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Fortinet blocks exploited FortiCloud SSO zero day until patch is ready

Fortinet blocks exploited FortiCloud SSO zero day until patch is ready

Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability, tracked as CVE-2026-24858, and says it has mitigated the zero-day...

bleepingcomputer.com
1
29
2
104
9,764
When the Olympics connect everything, attackers pay attention - helpnetsecurity.com/2026/01/… - @PaloAltoNtwks @Unit42_Intel #Phishing #SocialEngineering #Threat #Cybersecurity #CybersecurityNews
Image from Help Net Security (@helpnetsecurity)
1
1
334
Multiple Target employees confirm leaked code sample is authentic as company rolls out ‘accelerated’ Git lockdown – @Ax_Sharma bleepingcomputer.com/news/se…
Target employees confirm leaked source code is authentic

Target employees confirm leaked source code is authentic

Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an "accelerated" lockdown of...

bleepingcomputer.com
1
16
55
7,051
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More thehackernews.com/2025/12/we…

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

From million-dollar privacy fines to active attacks on everyday software. Catch up on the top cybersecurity threats of the week and how to fix them.

thehackernews.com
1
1
626
Load more