HexNomad

@hexnomad.bsky.social

Infosec nerd

Champion ethical hacker warns AI tools like Mythos will make competing harder. Valentina 'Chompie' Palmiotti won $70,000 for finding 2 serious bugs at the prestigious Pwn2Own Berlin contest. She said she had to enter full 'zombie hacker mode' to work through the night www.bbc.co.uk/news/article...

Top ethical hacker Chompie warns AI tools could put her out of business

Chompie, one of the world's tops ethical hackers, says AI like Claude Mythos will make it harder for people like her to compete.

bbc.co.uk

NEW: The U.S. govt accused Peter Williams, ex general manager of hacking tool maker L3Harris Trenchant, of stealing trade secrets and selling them to buyer in Russia. As we reported earlier, Trenchant investigated a leak of internal tools this year. It's unclear if that investigation is related.

U.S. government accuses former L3Harris cyber boss of stealing trade secrets | TechCrunch

The U.S. Department of Justice accused Peter Williams, former general manager of L3Harris’ hacking division Trenchant, of stealing trade secrets and selling them to a buyer in Russia.

techcrunch.com

SCOOP: A man who worked on developing hacking and surveillance tools for defense contractor L3Harris Trenchant was notified by Apple that his iPhone was targeted with mercenary spyware. The developer believes he was targeted after he was wrongly accused of leaking zero-days developed by Trenchant.

Exclusive: Apple alerts exploit developer that his iPhone was targeted with government spyware

A developer at Trenchant, a leading Western spyware and zero-day maker, was suspected of leaking company tools and fired. Weeks later, Apple notified him that his personal iPhone was targeted with spy...

techcrunch.com

"Windows App to replace Remote Desktop app for Windows" There's a lot of confusion about what this means, so let me clarify: This only affects the Remote Desktop App on the *Microsoft Store*, which you most likely don't use Most system administrators use mstsc, the Windows built-in RDP client

Bild

We will never know— we will never have the faintest idea— how much money is getting made in insider trading windfalls from people in Trump's and Musk's circles who have an hour of notice about the daily swings in tariff policy or the occasional announced *expectations* of such swings.

Ghidra 11.3 is OUT! 
PyGhidra is the new feature to be excited about.

It’s a Python library providing direct access to the Ghidra API. 

 I expect this to massively increase Reverse Engineering tool development, as it significantly reduces the barrier to entry for Ghidra interaction.

Bild

A 25-year-old DOGE worker named Marko Elez who has admin privileges on Treasury dept systems that control about 95% of payments made by the gov, including Social Security checks, tax refunds and contract payments "has already made extensive changes to the code base for these critical payment system"

Musk Cronies Dive Into Treasury Dept Payments Code Base

Overnight, Wired reported that, contrary to published reports that DOGE operatives at...

talkingpointsmemo.com

Around 2008 I was in Ottawa and some MoD person mentioned that only a few years ago they stopped wargaming against a US invasion, and I joked "just wait until they run out of water for their golf courses in Arizona"...