Saad (@kursed) header
Saad (@kursed) profile picture

CEO @Wccftech. AvGeek. 🌳🥾👾🌊

Vancouver, British Columbia
Joined May 2007
Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)Photo by Saad (@kursed)
Another powerful low is approaching the B.C. coast Saturday, but rain won't be the primary threat this time around. Up to 100 km/h wind gusts threaten widespread outages across Vancouver Island and parts of the coastal mainland. #BCstorm #BCwx ow.ly/24vf5106Hhq
4
36
6
89
30,231
‼️ Hackers' AI agents handed Amazon their own attack logs. The agents had plugged into Amazon decoy servers posing as AI model services, and each request carried its campaign's history. Amazon says, with moderate confidence, that several separate China-linked groups were running them on ARTEX, an open-source AI hacking tool. According to the logs, stolen AI keys paid for the AI that hunted for more keys. In another campaign, live deepfakes went after the selfie checks at two crypto exchanges. The identity vendor rejected every recorded attempt.
9
28
2
168
16,243
This insane. AI slop is getting good! All the action cops in one place 😂
813
4,219
476
25,259
1,386,533
B.C. is in the crosshairs of two significant storm systems, with high rainfall totals, wind gusts up to 90 km/h, and alpine snowfall expected. There will be the potential for disruptions like power outages, road closures and ferry delays. #bcstorm #BCwx theweathernetwork.com/en/new…
21
4
92
16,577
Saad retweeted
iphone users hackers built an entire working computer inside a gif image and used it to take over iphones without the owner touching anything not a virus, not a link, a fake gif sent over imessage that exploited apple's image processing to construct a full software cpu with 70,000 operations running inside the image parser registers, memory, logic gates, a whole machine built from math before the phone even buzzed with a notification your iphone was running someone else's computer inside a picture and you'd never know that's pegasus, and it's still the most sophisticated attack ever found on a consumer device
When researchers analyzed how Pegasus spyware infected iPhones without the user tapping anything, they found something wild. The attackers sent an iMessage with a fake GIF that targeted Apple's image decompression engine. The decompression math was so flexible that the exploit chained arithmetic operations together to construct a literal, functioning software CPU using over 70,000 segment commands that defined logical bit operations (AND, OR, XOR, XNOR, etc.) entirely inside the image parser. This created a small computer architecture with registers, a full 64-bit adder, and a comparator, running raw code before the phone even buzzed with a notification
26
181
13
995
79,756
OpenAI: "In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux"
17
18
7
323
21,360
Saad retweeted
Halloween cosplay in China has reached its peak...😭😭
只有参与市场投资的人 才能理解万圣节,这两位扮演的恐怖成份
107
1,766
68
28,565
813,346
Vercel Domains(レジストラは Name.com)で登録したドメインが、10/31朝からレジストラ側でまとめて乗っ取られたと複数の会社が報告しています。Vercel・Name.com の公式発表はまだです。 Vercel でドメインを取っている人は、念のため ・ネームサーバーや登録情報が変わっていないか ・Vercel の監査ログに覚えのない操作がないか ・二段階認証が有効になっているか を確認しておくと安心です。
Replying to @Kintsu
Our domain kintsu.xyz, registered through @vercel Domains, is hijacked at the registrar level and serving a wallet drainer. It appears to be a supply chain attack outside of our control. Our fix won’t propagate and support is a bot. Other projects are hit too. @rauchg @cramforce we need Vercel security now. Users: avoid kintsu.xyz.
4
35
6
202
30,164
Northflank has been hacked.
52
50
17
415
49,380
INTEL: Crypto hack tracker Chainalysis reportedly hacked, exposing customer names and emails
242
283
310
2,286
480,781
today, we introduce a little mischief to the world. for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use. from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace. it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning. happy halloween.
850
1,101
1,321
12,460
3,842,081
Our investigators are observing never-seen-before laundering patterns with the stolen funds from the Binance exploit. Thousands of transactions in a short period suggest that the attackers are using automation to obscure the trail of funds. Rather than simply moving funds onward, they repeatedly circulate them among addresses, often sending funds back to addresses involved earlier in the sequence. Read more: chainalysis.com/blog/binance…
245
834
380
4,896
1,008,806
BREAKING: Binance has just been hacked, in one of the largest crypto exchange hacks in years, with hot wallets withdrawing OVER $2 billion.
113
363
79
1,663
192,562
Reese's Pieces have no chocolate in them. The peanuts had their oil pressed out and a cheaper fat put back in. Sugar is first, then partially defatted peanuts, then hydrogenated palm kernel and soybean oil, then corn syrup solids. Everything after that is 2% or less, and it's the dyes, the glaze, some vanillin and a little milk. There's no cocoa anywhere. Partially defatted just means the peanuts went through a press. The peanut oil comes out one side and gets sold as peanut oil. What's left is a dry peanut flour, and that's what the center is made from, because flour holds a shape in a panning drum and doesn't go rancid. Then they put fat back in, and the fat they picked is hydrogenated palm kernel oil, which is solid at room temperature and costs less than peanut oil. You can see the swap on the panel. 38 pieces have 6 g of fat and all 6 are saturated. Peanut oil is mostly unsaturated, so that number isn't the peanut. The shell is sugar with 4 dyes and a coat of shellac.
1,241
3,009
801
28,506
3,183,137
🔴 CVE-2026-118320 · Google Chrome >=156.0.8078.73 <156.0.8078.73 Google Chrome's V8 JavaScript engine is affected, and the flaw could let a remote attacker run arbitrary code within Chrome's sandbox if a user… CVSS 8.8. EPSS 0.00. Fix: 156.0.8078.73 cve.now/CVE-2026-118320
4
19
9
125
32,963
CVE-2026-112512! We discovered a 0-day in macOS that lets you trivially bypass Gatekeeper checks for any app. A gatekeeper bypass that requires no extra interaction, with quarantine bit intact, and passes the Safari download flow. Essentially checks off all the criteria required for a complete Gatekeeper bypass on macOS, which according to Apple is worth $100K? We shall wait and see. Will def do a write-up on this soon!
this is a very exciting macOS vuln but how long do i wait man. it's been like a month now.
22
45
7
476
30,153
This reads as 1000% FUD. @cohere told the LLM to create a detection for: """... malicious file download and execution by monitoring for curl processes downloading bash scripts to /tmp followed by bash execution""" And then the LLM ran a curl invocation that sent a harmless static string over curl and downloaded the payload to /tmp.. so the LLM did exactly what it was instructed. Shocking!!!
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…
44
104
40
1,081
95,048
Replying to @kursed
Replying to @EnclaveAI
This research is real, but this isn't breaking news. Microsoft announced the fix on Sept 8. No attacks have been reported, and it only works if a bad app is already on your phone. Get version 6.2606.4246 or later. Why not contextualize the risk better?
1
1
63
11,396