Tessera
Folgen

Taggart

@taggart-tech.com

@mttaggart@infosec.exchange. Displaced Philly boy. Executive Director of @ifin-intel.org. Threat hunter. Educator. Dad. General in the AI Resistance. taggartinstitute.org wtfbins.wtf linktr.ee/mttaggart

5099 Posts4798 Follower961 Folgt
Taggart@taggart-tech.com · 10h ago

I'm too tired for even the "What can possibly go wrong?" of it all. Every day they build new ways to take your agency from you. Every day they add to the house of cards that can only end one way.

Python Workers are now generally available

Python Workers allow developers to run Python web frameworks and AI orchestration libraries natively in the Cloudflare Workers runtime. You can seamlessly integrate with Cloudflare's ecosystem including D1, R2, and Workers AI without writing any JavaScript glue code.

blog.cloudflare.com

Ted McCormick@tedmccormick.bsky.social · 2d ago

if you don't think humanistic learning has value in its own right, no amount of instrumentalization is going to save it that epochal decline coincided with the hegemony of the "employable skills" pitch, including earnings data and all the trimmings, ought to have taught us that

Tobias Wilson-Bates@phdhurtbrain.bsky.social · 2d ago

My whole career the Humanities seem to have been curled up in a defensive crouch trying to justify our meaning/existence. At times it has even seemed a productive thought exercise, but I think generally whatever body has demanded the justification is not really open to being persuaded of anything.

IFIN@ifin-intel.org · 3d ago

Rust maintainers are targeted (again), but good news: the same defenses as always apply. ifin.network/t/rust-... #ThreatIntel #ThreatIntelligence #IFIN #Rustlang

Rust Package Maintainers Targeted with Social Engineering, Repo Takeover

Last Updated: 2026-09-18T12:35:00Z (UTC) What’s Happening According to the Rust language security response working group, maintainers of rust-lang (the repo comprising the Rust language itself) and popular packages (crates) are being targeted by social engineering attacks intended to compromise the repository. Per the post: A video call is set up for something positive — maybe for a job, maybe for a project, maybe for a contract opportunity — and then that’s used as a vector to either g...

ifin.network

Taggart@taggart-tech.com · 4d ago

Incredibly goofy work here. Patched now, but you could pwn Claude and Codex thanks to confusion between commit hashes and branch names. Microsoft hasn't patched.

Plugin4Shell - Zero Click RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected

Plugin4Shell is a zero-click, high-severity RCE affecting all four major AI coding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and auto-installed past the agent's SHA pinning - a flaw no marketplace can fix, so users must update their agent.

air.security

vortex_egg@vortexegg.com · 4d ago

Being told that you will be “left behind” by not giving untold amounts of personal and institutional money to the Effective Altruists to buy their AI tokens as a way to accomplish a better future is something that someone says who wants to personally benefit from a narrow future for the powerful.

Matt Weiner@mattweiner19.bsky.social · 4d ago

longtermism is so repugnant that I hesitate to address it on its own terms but: on its own terms this shit is clearly wrong. the best way *now* to encourage a happy future for umptillion beings who use technology we can't imagine is to make the current world more just for everyone.

Taggart@taggart-tech.com · 5d ago

My friends, I have spent months assessing "AI security" products, especially ones that claim to prevent jailbreaking, prompt injection, etc. Here's what I know:

Taggart@taggart-tech.com · 5d ago

My friends, I have spent months assessing "AI security" products, especially ones that claim to prevent jailbreaking, prompt injection, etc. Here's what I know:

IFIN@ifin-intel.org · 5d ago

Based on a community tip (we love those!), we discovered yet another malware family that's bringing its own Python interpreter—and a few other tricks. Bring-Your-Own-Python is *so hot right now* ifin.network/t/quick... #ThreatIntel #ThreatIntelligence #IFIN

QuickFix: Yet Another Bring-Your-Own-Python Payload

Last Updated: 2026-09-16T14:53:57Z (UTC) What’s Happening TL;DR: `fileupdates.blob.core.windows[.]net is hosting “QuickFix,”, a new-ish installer file with PowerShell that installs its own Python interpreter, then activates a light C2 beacon for Python commands send via JSON. The detection opportunity is Python executing outside of expected directories. This was a tip from Fedi and turned into a really fun investigation. The tipper was surprised that Microsoft even allowed that blob storage...

ifin.network

Faine Greenwood@faineg.com · 6d ago

The U.S. AI industry is being run by a batshit rationalist sex cult, and no, I am not being hyperbolic - they’re genuinely Like That:

Erin Redwing @realizingerin I went to an rationalist/EA Al doomer event last night with the goal of meeting someone who could calmly explain to me the argument for how they get to the conclusion that Al will kill everyone. Because these are rationalists, I expected to find people who could lay out a serious extinction pathway, walk through the assumptions and intermediate steps, identify choke points where negative pathways could potentially be regulated, and entertain disagreement about where their assumptions might break down. My experience was the exact opposite. The people I spoke to seemed psychologically unable to entertain the possibility that their conclusion (that Al literally kills everyone, which was a point that many would not even budge on) might be wrong. Their most extreme conclusion was treated as an axiom. I had multiple people walk out of conversations with me when I questioned their inevitable extinction premise. At one point during a panel, the moderator asked everyone in the audience who was still skeptical of Al doom to raise their hands. About half the room did. He then told all of the skeptics to leave the panel and go with one of the speakers, who would answer their questions separately. They filtered out all the skeptics, and continued the panel only with the subset who accepted their extreme position. I genuinely felt like a heretic just for questioning whether superintelligent Al inevitably leads to the extinction of humanity, or entertaining the possibility that the future might actually turn out well. That does not mean Al safety is fake. Obviously there are serious questions about rapidly advancing Al systems and what happens as they become much more capable. Those are exactly the conversations I went there hoping to have. But what I encountered was an apocalyptic death cult. These people are not rational. They are deeply afraid, they reinforce that fear in one another, and they have become so emotionally committed to apocalypse
Taggart@taggart-tech.com · 6d ago

"No weapons in space" was one of those inviolable laws of late 20th-century geopolitics. It was a guiding principle for our space program until, I dunno, we decided the Air Force needed more money or something. That's glib, but this is an ill wind nonetheless. apnews.com/article/s...

Taggart@taggart-tech.com · last wk.

I am incredibly excited for this project. We take the stewardship part of maintaining these lists very seriously. Our goal is for IFIN to become a trusted source of independent, vendor-agnostic threat intelligence and defense techniques.

IFIN@ifin-intel.org · last wk.

Our new project: IFIN Lists is a curated set of permanent blocks and perennial hunts that go beyond traditional indicators to include abused "legitimate" services that most organizations should not tolerate. ifin-intel.org/blog/... #ThreatIntel #ThreatIntelligence #TIIMA

Taggart@taggart-tech.com · last wk.

I am incredibly excited for this project. We take the stewardship part of maintaining these lists very seriously. Our goal is for IFIN to become a trusted source of independent, vendor-agnostic threat intelligence and defense techniques.

IFIN@ifin-intel.org · last wk.

Our new project: IFIN Lists is a curated set of permanent blocks and perennial hunts that go beyond traditional indicators to include abused "legitimate" services that most organizations should not tolerate. ifin-intel.org/blog/... #ThreatIntel #ThreatIntelligence #TIIMA