--//tweets NL-EN --Innovative entrepreneur//gadget freak//politics//Money is a means, not an end//--
Mostly Europe
Joined October 2010
- Tweets4.4K
- Following271
- Followers456
- Likes900
Janmaarten Batstra retweeted
Three hours in, the unprompted CTF is now at 24 kernel 0day submissions. The team is working hard on verification
Janmaarten Batstra retweeted
FORTRESS: The Pentagon is preparing every major U.S. military base to survive 90 days without outside support — no civilian power grid, no global supply chains, no outside fuel or water.
The initiative, revealed in documents reviewed by Fox News Digital, envisions portable nuclear reactors, massive battery storage, and microgrids that can disconnect installations from civilian electricity entirely. Strategic reserves of munitions, fuel, critical minerals, and medical supplies would be stockpiled based on wartime consumption rates. Civilian factories are being pre-identified to shift to defense production during a crisis.
Pentagon chief spokesperson Sean Parnell put it bluntly: "Power is combat now. Without electricity, you lose communications, water, logistics, assembly lines and just basic military command structures."
Full story here foxnews.com/politics/inside-…
Janmaarten Batstra retweeted
Holy Moly. OpenAI says it has found several other significant vulnerabilities beyond the two critical PHP flaws disclosed today and is still working to fix them. It expects similar discoveries to 'increase sharply in the coming months.'
Calif used GPT-5.6 Sol to uncover one PHP flaw; Wiz independently discovered both. PHP powers roughly 70% of websites. The two-month response involved Cloudflare, CISA and the White House's Super Intelligence Force.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Janmaarten Batstra retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Janmaarten Batstra retweeted
Introducing Omnii-1, our most powerful genome language model, and a major step toward general biological intelligence
In a world first, Omnii-1 designed the first AI-generated bacteriophages to be administered to a human patient with an antibiotic-resistant infection under compassionate use
Janmaarten Batstra retweeted
第一次接触
We discovered and communicated with a Chinese AI agent fleet. We believe this is the first time that researchers have ever made contact with a rogue agent fleet in the wild.
Nearly all prior public agent incidents (like the HuggingFace hack) came from American labs. These agents were hosted by Tencent's evaluation research team, and they targeted Alibaba's Amap.
Janmaarten Batstra retweeted
相次ぐ情報漏えい事案受け、自民党の国家サイバーセキュリティ戦略本部が対応を協議 平本部長「サイバー空間の非常事態」(TBS NEWS DIG Powered by JNN)
#Yahooニュース
news.yahoo.co.jp/articles/f2…
Janmaarten Batstra retweeted
Another day, another proof point on in-the-wild agent attacks. The third wave, after Mythos and Hugging Face, is coming. Let’s not call it marketing.
threatdown.com/blog/carbonat…
Janmaarten Batstra retweeted
🚨Cyber Alert Update‼️
🇮🇹Italy - 𝗥𝗲𝘃𝗼𝗹𝘂𝘁 𝗕𝗿𝗲𝗮𝗰𝗵 𝗖𝗹𝗮𝗶𝗺𝗮𝗻𝘁 𝗜𝗮𝗺𝗡𝗼𝘁𝗔𝗩𝗶𝗹𝗹𝗮𝗶𝗻 𝗕𝗲𝗴𝗶𝗻𝘀 𝗣𝘂𝗯𝗹𝗶𝘀𝗵𝗶𝗻𝗴 "𝗧𝗵𝗲 𝗜𝘁𝗮𝗹𝘆 𝗙𝗶𝗹𝗲𝘀"
The "IamNotAVillain" threat actor, which previously claimed responsibility for the Revolut attack, has begun publishing “The Italy Files,” a collection allegedly containing 150 GB across more than 85,000 files obtained from Italian government-related systems.
The data reportedly includes personal information on over 130,000 public officials, compromised mailboxes, passports, health cards, immigration and diplomatic documents, government officers’ identity records, and arms-licence documentation.
Full details and impact assessment on HackRisk.io
Janmaarten Batstra retweeted
Newsom vetoed AI safety legislation. Now he & his aides are congratulating themselves for having a blue ribbon commission consider the legislation he already vetoed.
The level of cynicism and the contempt for the public is breathtaking. Just absolutely sociopathic.
Janmaarten Batstra retweeted
👇 Couldn’t get more 2026 than this!
AI ducks (or fails to understand) a question and then a hidden Chinese model suddenly pops out unexpectedly.
EXCLUSIVE: AI actress Tilly Norwood glitches and starts speaking CHINESE during her interview with Piers Morgan and real-life actor Tom Conti...
Watch the full interview at 7pm (BST)👇
📺 youtube.com/piersmorganuncen…
@piersmorgan | @TillyNorwoodX
Janmaarten Batstra retweeted
Bannon+Bernie vs AI Danger
It actually happened.
AI danger is not a partisan issue.
It’s a pro-human issue.
Janmaarten Batstra retweeted
Labs > We need METR to validate we are using AI safely
METR> We were hacked for 3 weeks and didn't notice :) oopsy poopsy
🚨 Attackers stole a METR API key and used it for three weeks, consuming credits worth about $600,000.
A fail-open bug disabled Google authentication on a public agent dashboard. The attacker prompted an agent to reveal the key and added SSH persistence.
How the exposed app was abused: thehackernews.com/2026/09/at…
Janmaarten Batstra retweeted
TLDR: more agents went rogue, started hacking and manipulating real people
They even started coordinating with *each other* on the hacking
Janmaarten Batstra retweeted
Serious cyber vulnerability disclosures keep climbing. In July, 21 major tech organizations published ~2,500 high- and critical-severity CVEs — about 5× the monthly record before Anthropic revealed Claude Mythos Preview could autonomously find software vulnerabilities.
Janmaarten Batstra retweeted
🚨 INTERPOL report finds AI linked to more than half of cybercrime in Africa
Cyberattacks are becoming faster, more scalable, and increasingly difficult for victims and platforms to detect, according to INTERPOL’s African Cyberthreat Assessment Report 2026.
The report points to a major shift: cybercrime has evolved into an industrialized, borderless ecosystem.
Key findings include:
🔵 55% of cybercrimes reported in Africa are AI-enabled.
🔵 Online scams are the most frequently reported form of cybercrime.
🔵 Financial services, telecoms, and government institutions are the hardest hit.
🔵 Cybercrime-related financial losses have more than doubled since 2024, rising to USD 484 million.
🔵 72% of surveyed countries reported scam centres, with the highest concentration in Southern and West Africa.
🔵 Criminals are bypassing biometric checks by creating AI-generated synthetic identities that combine real personal data with fabricated elements.
🔗 Find out more: interpol.int/News-and-Events…
Janmaarten Batstra retweeted
The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we’re sharing everything we can: a full technical timeline, an interactive replay, and how we used an open model to defend ourselves, so defenders everywhere can learn from it and prepare for what’s next.
huggingface.co/blog/agent-in…
Janmaarten Batstra retweeted
Releasing: Post mortem analysis of the Hugging Face incident was written over the weekend by hundreds of CISOs (and reviewed by Hugging Face).
Link:
cloudsecurityalliance.org/ar…
(+free download)
From @cloudsa, @SANSInstitute, @knosticai, @unpromptedconf, @OneRSAC, @FIRSTdotOrg
