Researcher @0xLupin claims a big-company CEO invited an attack and that he has already found multiple backdoor routes overnight, still hunting a 'giga crit' -- read as unverified red-team chatter, not a disclosed bug.
The CEO of a pretty big company challenged me to hack them and right now pulling an all nighter hacking. Already found different ways to backdoor them but I won't stop until there is a giga crit. Will report back. It's fun coming back to some old school hacking <3
Off-topic tweet (Miessler) about workplace-policy politics and firing rationale; no vulnerability class, exploit primitive or RF/security takeaway to extract.
I’m surprised decent people keep making these “rich men gunna do rich men things” arguments. Let’s explore what this would actually mean. Jensen seems to have been fired because it is against company policy to sleep with employees who are under your influence. This is an extremely common policy across most companies today, and it’s a rule that applies to everyone. Or at least it’s supposed to. The proposal here, if you think about it for just a minute, is to let successful men break rules in accordance with how successful they are. Cool. So HR will have a new system with rule violations on one side, and company value milestones on the other side of the board. So if you’re some mid-level manager at a paper distribution company then you probably shouldn’t sleep with your direct reports because that’s super unethical. …… unless you land that big office supply deal with Walmart this quarter....
Pointer to Dawn Song's team work on turning a patch diff into a working exploit -- patch-to-exploit automation is the takeaway, no CVE or code drop in the excerpt.
Takeaway: the shift isn't novel vulns but lowered skill floor, citing FBI reporting on attackers using Artex to run intrusion tooling; mass-accessibility, not mass-0day.
This is what I’ve been saying would be the problem all along. It’s not about new vulns. It’s about making attacks easy, so a lot more people/groups can do them well enough. https://cybersecuritynews.com/fbi-reveals-hackers-artex-ai-usage/
The CEO of a pretty big company challenged me to hack them and right now pulling an all nighter hacking. Already found different ways to bac...
[ notes ] Researcher @0xLupin claims a big-company CEO invited an attack and that he has already found multiple backdoor routes overnight, still hunting a 'giga crit' -- read as unverified red-team chatter, not a disclosed bug.
[ source excerpt ] The CEO of a pretty big company challenged me to hack them and right now pulling an all nighter hacking. Already found different ways to backdoor them but I won't stop until there is a giga crit. Will report back. It's fun coming back to some old school hacking <3
I’m surprised decent people keep making these “rich men gunna do rich men things” arguments. Let’s explore what this would actually mean. Je...
source: Daniel Miessler (@DanielMiessler) | role: Guest | published: 2026-11-14 17:23 UTC
[ notes ] Off-topic tweet (Miessler) about workplace-policy politics and firing rationale; no vulnerability class, exploit primitive or RF/security takeaway to extract.
[ source excerpt ] I’m surprised decent people keep making these “rich men gunna do rich men things” arguments. Let’s explore what this would actually mean. Jensen seems to have been fired because it is against company policy to sleep with employees who are under your influence. This is an extremely common policy across most companies today, and it’s a rule that applies to everyone. Or at least it’s supposed to. The proposal here, if you think about it for just a minute, is to let successful men break rules in accordance with how successful they are. Cool. So HR will have a new system with rule violations on one side, and company value milestones on the other side of the board. So if you’re some mid-level manager at a paper distribution company then you probably shouldn’t sleep with your direct reports because that’s super unethical. …… unless you land that big office supply deal with Walmart this quarter....
Really cool work by @dawnsongtweets and team about going from a patch to an exploit.
source: Daniel Miessler (@DanielMiessler) | role: Guest | published: 2026-11-14 16:29 UTC
[ notes ] Pointer to Dawn Song's team work on turning a patch diff into a working exploit -- patch-to-exploit automation is the takeaway, no CVE or code drop in the excerpt.
[ source excerpt ] Really cool work by @dawnsongtweets and team about going from a patch to an exploit.
This is what I’ve been saying would be the problem all along. It’s not about new vulns. It’s about making attacks easy, so a lot more people...
source: Daniel Miessler (@DanielMiessler) | role: Guest | published: 2026-11-14 16:26 UTC
[ notes ] Takeaway: the shift isn't novel vulns but lowered skill floor, citing FBI reporting on attackers using Artex to run intrusion tooling; mass-accessibility, not mass-0day.
[ source excerpt ] This is what I’ve been saying would be the problem all along. It’s not about new vulns. It’s about making attacks easy, so a lot more people/groups can do them well enough. https://cybersecuritynews.com/fbi-reveals-hackers-artex-ai-usage/