An unreleased Claude research model wrote five attack chains after initial prompting: Chrome, Safari, Android, Windows and Linux. All since addressed. Advice from @anthropic.com 's Frontier Red Team: scan your own code. www.anthropic.com/research/dis...

Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the world’s most widely used software, such as browsers and operating systems. I...

anthropic.com

OpenSSH 10.6 gated roughly a fifth of what an unauthenticated client could reach in a default build, mostly off-by-default ML-DSA code. Found by Anthropic's Frontier Red Team with Claude. www.anthropic.com/research/att...

Using Claude to reduce the attack surface of code

Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term. In this post, we preview data we’ve collected from applying attack surface ...

anthropic.com

Yesterday I started at @anthropic.com as a Member of Technical Staff. I've spent 28 years securing critical infrastructure and the open source the world runs on. As Dario wrote, "we need hope as well." Sky's the limit. Let's go!

Friday 10/9 was my last day at LinkedIn (Yes, I announced it on LinkedIn too 🤣) Thank you to my InfoSec and core infra teams for everything. Stay tuned for what's next...

Sabrina and I started the @skscholarship.com to help underrepresented people get a fair shot. This Fall, Lingjing and Abdon join 36 other recipients in pursuing their M.Sc. in Cybersecurity. A scholarship does not change the coursework. It changes who can finish.

If you haven’t watched this BlackHat talk about the OpenAI / huggingface incident, give it a watch. I can’t wait to see the full post mortem. youtu.be/87DyyMV0kCY

Black Hat USA 2026: The 'Breaking' News: The OpenAI–Hugging Face Incident

YouTube video by Black Hat

youtu.be

Wanna secure AI for 30K employees and over a billion members? Come work with us in LinkedIn InfoSec! www.linkedin.com/jobs/view/44... FAQ: * If you'd like to know if you’re a good fit, apply. * If I’ve worked with you before, I’m happy to refer you, DM me. * This role is located in Sunnyvale, CA

My feed is awash with “innovative” “thought leadership” pieces about the impact of Fable/Mythos being restricted. Doing security research and are looking for a portable skill that you can use to discover new vulnerabilities? Check out Vulnerability Validation skill: github.com/omkhar/vulne...

Last night's MVPs: 1. Wu-Tang 2. Brunson 3. Anunoby Knicks in 5

Mythos/Fable is out... Before the thought leaders start publish whitepapers, or hosting "CISO dinners" etc, I'll offer some boring/sobering advice: 1. Make sure you know where all your stuff is - ya even that 3rd party software that the person in accounting bought on a credit card in 2016.

Are you a privacy engineer or work with privacy engineers? Would you like to learn more about probably engineering? Boy do I have a conference for you! PEPR, the conference on privacy engineering, practice, and respect, is happening June 1-2 in Santa Clara, CA. www.usenix.org/conference/p...

PEPR '26

The 2026 USENIX Conference on Privacy Engineering Practice and Respect (PEPR '26) will take place on June 1–2, 2026. PEPR is focused on designing and building products and systems with privacy and res...

usenix.org

Vulns are getting packed up github.com/ImageMagick/... #iykyk #cybersecurity #opensourcesoftware

Mee-thos? Meye-thos? Mi-thos? A month in, I still couldn't tell you. The loudest opinions on AI vulnerability research almost never come from the people actually using it or contributing to making the world more secure.

“I went from negative to positive.” - Biggie Smalls, BedStuy Motivational Speaker That came up near the end of my conversation with Cameron on The Defender’s Journal, and it probably says more about my career than any title ever has.

Me right now while doing vuln research

"Do you know the ledge?" Rakim - Long Island 0-day Researcher The last 10 days, everyone's had an opinion on Mythos and GPT 5.4-Cyber.

Most security tools slow you down. Most fast tools ignore security. We wanted both. So we built Workcell. It started with a few co-conspirators asking: "How do we vibe code at yolo speed and not get owned?"

Happy tax day to all those who observe :lolsob:

Coding agents are powerful. They’re also one bad boundary away from self-compromising your machine. I wanted the speed of “YOLO mode” without giving up isolation, so I built Workcell. With a lot of help from Codex, Claude, Gemini, and Rick, it’s now out: github.com/omkhar/workc...

GitHub - omkhar/workcell: Bounded local runtime and policy boundary for coding agents

Bounded local runtime and policy boundary for coding agents - omkhar/workcell

github.com

A few years ago, when I was working at @openssf.org , we partnered with @darpa.mil on the AI Cyber Challenge. Yesterday's news from @anthropic.com about Mythos and Glasswing both highlight the opportunity that we saw, and the primary reason we were so focused on securing open source software.

"Code Rules Everything Around Me, CREAM" - Method Man, Chief AI Scientist, Wu-Tang Clan Code got cheaper. Engineering didn’t.

AI coding agents : Claude Code, Codex, Copilot and their kin are changing how software gets built. Faster. Smarter. More autonomous. And that's exactly what keeps me up at night.

Check out www.skscholarship.com for more information about the S&K Scholarship, as well as to read about the impact that the scholarship has had on recipients. #cybersecurity #scholarship

Maryam. Shaunda. Fulgence. Nikoloz. 🎉 Sabrina and I started the @skscholarship.com because this field needs more people like you. So proud. Go build something the world needs. More here: www.linkedin.com/posts/nyutan...

#nyutandonmade | NYU Tandon School of Engineering

Innovation and opportunity are at the heart of the future of cybersecurity. We’re honored to introduce the Spring 2026 S&K Scholarship recipients, a group of brilliant students ready to make their mar...

linkedin.com

Cybersecurity loves talking about pipeline problems. Scholarships are what fixing one looks like. Sabrina and I started the @skscholarship.com to help underrepresented people get a fair shot. Spring 2026 scholars are up next. #IWD2026 #GiveToGain

We've also assisted through anonymous contributions benefiting underserved communities pursuing STEM education. How are you serving your community? #mlkday

"Life's most persistent and urgent question is, 'What are you doing for others?'" -- Dr. Martin Luther King Jr. The @skscholarship.com has supported 30 students in achieving their goals at NYU over the last five years.

"Life's most persistent and urgent question is, 'What are you doing for others?" -- Dr. Martin Luther King Jr.