
CEO @Wccftech. AvGeek. 🌳🥾👾🌊
Vancouver, British Columbia
Joined May 2007
- Tweets26K
- Following1.5K
- Followers16.7K
- Likes26.9K
Saad retweeted
Another powerful low is approaching the B.C. coast Saturday, but rain won't be the primary threat this time around. Up to 100 km/h wind gusts threaten widespread outages across Vancouver Island and parts of the coastal mainland. #BCstorm #BCwx
ow.ly/24vf5106Hhq
Saad retweeted
Singapore Denies The Wall Street Journal’s Probing Claims About Alice Huang Over Ties To Jensen Huang And Chinese Intelligence, “There Were No Such Investigations” wccftech.com/singapore-denie…
wccftech.com/singapore-denie…
Saad retweeted
‼️ Hackers' AI agents handed Amazon their own attack logs. The agents had plugged into Amazon decoy servers posing as AI model services, and each request carried its campaign's history.
Amazon says, with moderate confidence, that several separate China-linked groups were running them on ARTEX, an open-source AI hacking tool.
According to the logs, stolen AI keys paid for the AI that hunted for more keys.
In another campaign, live deepfakes went after the selfie checks at two crypto exchanges. The identity vendor rejected every recorded attempt.
Saad retweeted
B.C. is in the crosshairs of two significant storm systems, with high rainfall totals, wind gusts up to 90 km/h, and alpine snowfall expected. There will be the potential for disruptions like power outages, road closures and ferry delays. #bcstorm #BCwx theweathernetwork.com/en/new…
iphone users
hackers built an entire working computer inside a gif image and used it to take over iphones without the owner touching anything
not a virus, not a link, a fake gif sent over imessage that exploited apple's image processing to construct a full software cpu with 70,000 operations running inside the image parser
registers, memory, logic gates, a whole machine built from math before the phone even buzzed with a notification
your iphone was running someone else's computer inside a picture and you'd never know
that's pegasus, and it's still the most sophisticated attack ever found on a consumer device
When researchers analyzed how Pegasus spyware infected iPhones without the user tapping anything, they found something wild. The attackers sent an iMessage with a fake GIF that targeted Apple's image decompression engine. The decompression math was so flexible that the exploit chained arithmetic operations together to construct a literal, functioning software CPU using over 70,000 segment commands that defined logical bit operations (AND, OR, XOR, XNOR, etc.) entirely inside the image parser. This created a small computer architecture with registers, a full 64-bit adder, and a comparator, running raw code before the phone even buzzed with a notification
Saad retweeted
OpenAI: "In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux"
Saad retweeted
Vercel Domains(レジストラは Name.com)で登録したドメインが、10/31朝からレジストラ側でまとめて乗っ取られたと複数の会社が報告しています。Vercel・Name.com の公式発表はまだです。
Vercel でドメインを取っている人は、念のため
・ネームサーバーや登録情報が変わっていないか
・Vercel の監査ログに覚えのない操作がないか
・二段階認証が有効になっているか
を確認しておくと安心です。
Replying to @Kintsu
Our domain kintsu.xyz, registered through @vercel Domains, is hijacked at the registrar level and serving a wallet drainer. It appears to be a supply chain attack outside of our control. Our fix won’t propagate and support is a bot. Other projects are hit too. @rauchg @cramforce we need Vercel security now. Users: avoid kintsu.xyz.
Saad retweeted
INTEL: Crypto hack tracker Chainalysis reportedly hacked, exposing customer names and emails
Saad retweeted
today, we introduce a little mischief to the world.
for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use.
from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace.
it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning.
happy halloween.
Saad retweeted
Our investigators are observing never-seen-before laundering patterns with the stolen funds from the Binance exploit. Thousands of transactions in a short period suggest that the attackers are using automation to obscure the trail of funds. Rather than simply moving funds onward, they repeatedly circulate them among addresses, often sending funds back to addresses involved earlier in the sequence.
Read more: chainalysis.com/blog/binance…
Saad retweeted
BREAKING: Binance has just been hacked, in one of the largest crypto exchange hacks in years, with hot wallets withdrawing OVER $2 billion.
Saad retweeted
Reese's Pieces have no chocolate in them. The peanuts had their oil pressed out and a cheaper fat put back in.
Sugar is first, then partially defatted peanuts, then hydrogenated palm kernel and soybean oil, then corn syrup solids. Everything after that is 2% or less, and it's the dyes, the glaze, some vanillin and a little milk. There's no cocoa anywhere.
Partially defatted just means the peanuts went through a press. The peanut oil comes out one side and gets sold as peanut oil. What's left is a dry peanut flour, and that's what the center is made from, because flour holds a shape in a panning drum and doesn't go rancid. Then they put fat back in, and the fat they picked is hydrogenated palm kernel oil, which is solid at room temperature and costs less than peanut oil. You can see the swap on the panel. 38 pieces have 6 g of fat and all 6 are saturated. Peanut oil is mostly unsaturated, so that number isn't the peanut.
The shell is sugar with 4 dyes and a coat of shellac.
Saad retweeted
🔴 CVE-2026-118320 · Google Chrome >=156.0.8078.73 <156.0.8078.73
Google Chrome's V8 JavaScript engine is affected, and the flaw could let a remote attacker run arbitrary code within Chrome's sandbox if a user… CVSS 8.8. EPSS 0.00.
Fix: 156.0.8078.73
cve.now/CVE-2026-118320
CVE-2026-112512!
We discovered a 0-day in macOS that lets you trivially bypass Gatekeeper checks for any app.
A gatekeeper bypass that requires no extra interaction, with quarantine bit intact, and passes the Safari download flow.
Essentially checks off all the criteria required for a complete Gatekeeper bypass on macOS, which according to Apple is worth $100K? We shall wait and see.
Will def do a write-up on this soon!
Saad retweeted
Meta Doubles Down On NVIDIA Vera Rubin And Vera CPU Racks For Its Muse AI Models, While NVIDIA Puts $3 Billion Into Meta's Equity Offering wccftech.com/meta-doubles-do…
wccftech.com/meta-doubles-do…
Saad retweeted
This reads as 1000% FUD. @cohere told the LLM to create a detection for:
"""... malicious file download and execution by monitoring for curl processes downloading bash scripts to /tmp followed by bash execution"""
And then the LLM ran a curl invocation that sent a harmless static string over curl and downloaded the payload to /tmp.. so the LLM did exactly what it was instructed. Shocking!!!
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Saad retweeted
Replying to @kursed
Replying to @EnclaveAI
This research is real, but this isn't breaking news. Microsoft announced the fix on Sept 8. No attacks have been reported, and it only works if a bad app is already on your phone. Get version 6.2606.4246 or later. Why not contextualize the risk better?






































