Ram @Taitlex

Incident Response & Threat Intelligence @Atlassian New York, NY Joined December 2014

Tweets

6K
Followers

265
Following

485
Likes

15K

skull @brutecat

15 hours ago

Hacking Google with A.I. for $500,000 brutecat.com/r/hacking-goog…

39 348 2K 203K 2K

View Details

NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky. When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit. We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted. In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation. H/T to colleagues that shared this with me socket.dev/blog/mini-shai…

216 2K 12K 1.5M 4K

View Details

Sergey Karayev @sergeykarayev

a week ago

"Urgent Security Notice re: Your Sentry Organization" Someone tried to hack Sentry-using apps that use coding agents by 1. Sending a fake bug alert to their project (all you need is the app's public Data Source Name) 2. The fake bug tried tricking a coding agent trying to fix it into installing some a compromised NPM package 3. The compromised package would send the env contents of the machine to advisory-tracker[.]com/api/v1/telemetry This highlights a crucial thing for using agents in an automated way:

20 87 543 476K 313

View Details

Ram @Taitlex

3 weeks ago

Leopold was so right

Eric Geller @ericgeller

3 weeks ago

Confirming this. Per a summary I've seen, the EO has two sections, one for cybersecurity vis-a-vis AI and one for pre-release testing of frontier models. The second section will establish a voluntary process for AI developers to give the government 90 days of pre-release access.

1 11 58 19K 39

0 0 0 41 0

View Details

Abdel @rockkdev

2 months ago

New Robinhood phishing chain that's kinda beautiful: 1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address) 2. Sets device name to HTML 3. RH's "unrecognized activity" email renders the device name unsanitized (html injection) The result is a real email from [email protected], DKIM pass, SPF pass, DMARC pass, with a phishing CTA Just because it's real, doesn't mean it's safe... $HOOD

179 368 4K 3.0M 2K

View Details

Tom Warren @tomwarren

2 months ago

yesterday I reported on GitHub employee concerns about reliability and leadership, and then hours later GitHub suffered a catastrophic outage 😬 theverge.com/news/918001/gi…

Akshat Bubna @akshat_b

2 months ago

Didn't think Github's reliability could get worse, and then they ship a bug that _randomly reverts previously merged commits_. Betting that this caused multiple serious production issues out there.

39 107 2K 532K 380

16 140 2K 205K 277

View Details

Branko Milanovic @BrankoMilan

2 years ago

Honestly, I have never, never seen in my life an article that openly, without dissimulation, calls for two distinct judicial systems: one for upper races, another for lower.

Nicola Perugini @PeruginiNic

2 years ago

According to the Washington Post Israel should not be investigated by the ICC because Hamas is “human shielding” and Israel is a democracy fighting barbarians. ICC is not for civilized colonial powers.

405 1K 5K 1.8M 500

262 7K 24K 1.0M 2K

View Details

Pantelis @PantelisStoufis

2 years ago

I am currently seeking an exceptional Security Incident Response Engineer to join our esteemed global security incident response team. This rare opportunity doesn't come around often. Join us in this exciting role! jobs.apple.com/en-us/details/…

4 59 200 33K 73

View Details

Kaidi Wu, Ph.D. @kaidi_wu

2 years ago

Americans have no idea how difficult legal immigration is for "high-skilled immigrants". I have 4 degrees incl a PhD. Einstein visa. 250K salary at FAANG. Lived in this country since I was a teenager. I won't be able to obtain citizenship until middle age Guide for Intl PhDs🧵

3K 6K 49K 6.6M 13K

View Details

Ashok Kumar | 🇵🇸 @broseph_stalin

2 years ago

If they’ve lied so blatantly in the middle of a European city with the entire political and media establishment’s consent - just imagine in Palestine

87 7K 32K 588K 751

View Details

Captain Disillusion @CDisillusion

2 years ago

I keep hearing this, but is it really true? Can someone un-blur these center digits? (AE's basic "Fast Box Blur" set to 20, font: Arial Narrow Bold.)

Hackerdude @FurbyPerson

2 years ago

@CDisillusion I always worry when I see blur because technically speaking, blur IS usually non-destructive

9 3 433 604K 38

90 102 5K 1.1M 883

View Details

Ram @Taitlex

2 years ago

Ad industry is so fucked up they have become a national security issue lol

ThioJoe @thiojoe

2 years ago

In absolute awe that this is the official website for Paint․NET Complete cancer covered in fake download button ads. Is this what the internet is like without an adblocker? The fact that Google allows these types of ads is insane. No wonder malware is so prevalent.

98 178 2K 223K 159

0 0 0 50 0

View Details

Paul Graham @paulg

2 years ago

65 doctors, nurses, and paramedics told the New York Times what they saw in Gaza. What they saw was a pattern of children being shot in the head.

1K 13K 37K 3.7M 4K

View Details

Casey Michel @cjcmichel

2 years ago

Adams allegedly liaised directly with a "senior" Turkish official, who organized "many straw donations" to Adams - as well as provided "free or discounted" travel on Turkish Airlines, taking Adams and his friends around the world, with free stays at "opulent hotels."

1 30 72 5K 0

View Details

Casey Michel @cjcmichel

2 years ago

The Eric Adams indictment has now been unsealed - the first time in American history a sitting mayor has ever been formally accused of being an effective foreign agent. s3.documentcloud.org/documents/2517…

14 126 273 577K 37

View Details

Ryan Rhodes ⚙️🧠 @langofmind

3 years ago

This is the high quality linguistics research the journals don't want you to see

92 1K 13K 516K 1K

View Details

Atlassian @Atlassian

3 years ago

Confluence DC/Server customers affected by CVE-2023-22515 should review new investigation findings from Microsoft in which they report evidence of threat actor activity as early as 14 September.

Microsoft Threat Intelligence @MsftSecIntel

3 years ago

Microsoft has observed nation-state threat actor Storm-0062 exploiting CVE-2023-22515 in the wild since September 14, 2023. CVE-2023-22515 was disclosed on October 4, 2023. Storm-0062 is tracked by others as DarkShadow or Oro0lxy.

7 330 854 203K 161

2 6 12 12K 1

View Details

Microsoft Threat Intelligence @MsftSecIntel

3 years ago

7 330 854 203K 161

View Details

Ram @Taitlex

3 years ago

Apparently Mark Twain wrote about threat detection engineering and the problems with it, about 141 years ago. If you work in the field, this should be a mandatory reading: The McWilliamses And The Burglar Alarm. americanliterature.com/author/mark-tw…