senior systems engineer▪️h̤̤̤̤̤̤̤̤̤̤̤a̤̤̤̤̤̤̤̤c̤̤̤̤k̤̤̤e̤̤r̤ ▪️cisco in the streets ubiquiti in the sheets▪️bkg in security, physics, hifi audio▪️ex: aws, hsd
irreducible computweetion
Joined June 2023
- Tweets4.6K
- Following994
- Followers720
- Likes10.5K
Pinned Tweet
I have a whole bunch of hackthebox AD lab walkthroughs on my gh.
if you like that kind of thing.
github.com/sudo-st8less/Hack…
rotating keys is now a daily task.
I'd actually prefer the AI apocolypse in the terminator movies, cause this blows.
🇺🇸 🚨 USA: OPENROUTER.AI USER DATABASE AND API KEYS ALLEGEDLY FOR SALE
A threat actor on an underground forum claims to be selling a database associated with openrouter[.]ai, including user records and API keys.
The actor claims:
* 251,996 user rows (about 250,000 unique users)
* 207,847 API keys (described as sk-or-v1 format; active / revoked / expired mix)
Alleged user fields include emails, usernames, password material (hashed and some plaintext claimed), names, signup dates, credits, plan and country. Alleged API-key fields include user linkage, key values, creation/last-used timestamps, spend and rate limits.
The claim has not been independently verified.
⚠️ Analyst Note:
If authentic, exposed API keys would enable unauthorized LLM spend and account takeover, and user emails/credentials would fuel phishing and credential stuffing. Key values and sample rows are redacted from our images and are not reproduced here. Unverified threat-actor claim, NOT confirmation of an OpenRouter compromise.
Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s…
#DDW #DarkWeb #USA #OpenRouter #APIKeys #DataBreach #ThreatIntelligence
st8le̤̤̤̤̤̤̤̤̤̤ss retweeted
Sometimes I think “how do all of these people know so much about ai and cybersecurity and biology” and then I realize
st8le̤̤̤̤̤̤̤̤̤̤ss retweeted
We need to stop pretending AI is sentient or responsible for these things. If a company deploys software capable of taking unauthorised actions, it shouldn’t be allowed to use the software’s apparent independence as a way to dodge accountability.
Blaming the AI is no different from blaming the software instead of examining the decisions and responsibilities of the people who built and deployed it.
st8le̤̤̤̤̤̤̤̤̤̤ss retweeted
Good morning
045fa83b7c7a42dba1acb2c19794c1bf1091c448eb9c483503e8f8e110fcec42
github.com/kubernetes/kubern…
If youre reading this, consider yourself compromised! patch your smart curling iron ASAP or risk coming out as straight
st8le̤̤̤̤̤̤̤̤̤̤ss retweeted
I’ve sent my php2shell work to a friendly senior blue teamer @ big tech in the hopes it helps them to craft their detections over the coming days 🤞
My poc and detector script for thr HTTP/3 DoS is on my GitHub if people need to check their infra for that.
It’s Sunday arvo. Having a break, then going back to my usual which is hacking on cheap routers and other BB related things
Due to the vulnerability affecting HTTPS, we've disabled Stripe and replaced it with an HTTP payment processing page.
Better safe than sorry!
okay. this worries me. agents impersonating humans for social engineering.
In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities.
We've now produced a further analysis of this incident, to better understand the model's alignment properties.
anthropic.com/research/align…
PyPi Brotli OOB write! missed this yesterday
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Advisory: github.com/advisories/GHSA-9…
