I think every zero day / bug bounty hunter should approach their hunting with no less then two models!
You need to learn rotating because you'll be surprised when you channel each models strengths into what's best for it
For example there's models that are excellent at overall source code review and agnetic tasks like Muse spark 1.3
But are awful in exploit scripting and debugging comparing to other models like GLM 5.3
DeepSeek 4.1 is excellent too in bug hunting but it's awful in other shit
I came to realize that soft launching your ai hunting journey with less popular models will make you a beast when you get your hands on tuff models
It's not about what type of model you use (as long as it's a decent one!)
as how much you are good at using it!!
The Dice keeps rolling that's the thing with cyber security
You CAN'T close your eyes for a second without having FOMO
STAY VIGILANT
Today we are in a security nightmare:
- Railway may have exposed customer environment variables and API keys
- SBI confirmed that customer records ended up on the dark web
- eMudhra's certificate keys were extremely weak (one was literally just the number 4)
- LiteLLM shipped a compromised version that steals credentials and includes a backdoor
- PHP released two critical remote code execution vulnerabilities (PHP2Shell)
- Node.js issued urgent security patches for a Brotli decoder remote code execution flaw, plus TLS and DNS issues and blocked the compromised eMudhra certificates
- Rajasthan gov systems were allegedly linked to the exposure of a large set of identity records
- OpenCode confirmed a breach that exposed AI provider API keys (OpenAI, Anthropic, Google) for a portion of Console users
- Plex Media Server vulnerabilities (Plex2Shell) are being actively exploited in the wild to install malware on unpatched servers
- GitLab fixed a critical CVSS 10.0 unauthenticated remote code execution flaw in its CI/CD regex compiler
ixtro z retweeted
What do you mean an Indian company fucked 50+% of the internet because their certificate key was “4”????
ixtro z retweeted
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
ixtro z retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
ixtro z retweeted
As if PHP2Shell wasn't enough for one day... now GitLab. 😅
🚨 CRITICAL GITLAB ALERT (CVSS 10.0)
CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers.
⚠️ Potentially affects 12 years of releases, dating back to 2014.
Patches available. Update immediately!
docs.gitlab.com/releases/pat…
#gitlab #cybersecurity
ixtro z retweeted
if this affects the default installation of PHP
We are fucked up
CVE-2026-109618
CVE-2026-109619
PHP RCEs with a CVSS score of 10.0 ☠️
news.ycombinator.com/item?id…
ixtro z retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
ixtro z retweeted
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors.
CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
ixtro z retweeted
🎓 Breaking into Google's GFile for $100k
Writeup: bughunters.google.com/blog/b…
Author: Arvin Shivram
ixtro z retweeted
⚠️ No login required. CVSS 10.0. Active exploitation.
Attackers are exploiting a Bricksforge WordPress flaw (CVE-2026-85097) that enables arbitrary PHP code execution through crafted file-upload metadata.
Patchstack observed attack activity from 63 IPs. Update to version 4.0.1.
Read - thehackernews.com/2026/10/at…
