the GRPO “Goldilocks zone” & why not every Eval/Environment signal is worth learning starting point: imbuing human goals into your data distribution isn’t new, RLHF has done this by labeling/ranking tons of responsesa, turn… — from @Vtrivedy10 (https://x.com/Vtrivedy10/status/2085078624198078618)

I wanted to use the X API, but I have a feeling that if I buy credits, things might get out of hand. — from @ipurple (https://x.com/ipurple/status/2085076227291783557)

Go figure, I had to write a blog post about this. What happens when attacks are no longer being done by a human, but are simply the product of a GPU in a datacenter somewhere? https:// aikido.dev/blog/autonomou s-… — from @CharlieEriksen (https://x.com/CharlieEriksen/status/2085070191487074393)

Jumping on “The Odyssey” movie review bandwagon. 1. How accurate were the hacking scenes? 0/10 2. Was cyber war treated with realism? 0/10 3. How well did they integrate cyber into the plot? 0/10 Honestly, disappointed. I canno… — from @thegrugq (https://x.com/thegrugq/status/2085065943479427227)

SOCKSRelayd - SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections https://t.co/Cfdey5Cm2w — from @ipurple (https://x.com/ipurple/status/2085064768398737412)

GitHub - mverschu/SOCKSRelayd: SOCKS-focused NTLM relay with persistent session packages and a...

t.co

You don't want your opposition to be completely information starved. You want the opposition to have the information they need to make decisions that you find advantageous to you. If not that, you want them to at least have… — from @ImposeCost (https://x.com/ImposeCost/status/2085059948741111883)

Titanis v0.9.330 => https:// github.com/trustedsec/Tit anis/releases/tag/v0.9.330 … Featuring support for Kerberos ticket forging, FAST armoring, and several usability enhancements like a .de… 🔁 RT @codewhisperer84 | reposted by @HackingLZ https://x.com/codewhisperer84/status/2085055635696022009

Release v0.9.330 · trustedsec/Titanis

t.co

This marketing from @AikidoSecurity at @BlackHatEvents is . 🔁 RT @MalwareJake | reposted by @CharlieEriksen https://x.com/MalwareJake/status/2085054030649381242

Hopped into an uber this dude has Cuban trombone music going. I’m super jazzed right now.. and feel like Mexican food — from @HackingDave (https://x.com/HackingDave/status/2085052691919835359)

We have gitlab runners that sweep every merge request with Luna, have access to grafana/loki backend for bug verification, smoke testing, full end to end to remove defects before they get into staging. Naming all the bot… — from @HackingDave (https://x.com/HackingDave/status/2085044544421482655)

It’s 2026 My brand new WiFi enabled appliances can phone home, send notifications, and collect analytics…but apparently syncing the clock with NTP after a power outage was a bridge too far. — from @HackingLZ (https://x.com/HackingLZ/status/2085042682192126208)

Humans stopped the wayward cyberbots. Shoutout to people. — from @ryanaraine (https://x.com/ryanaraine/status/2085036106559734008)

Conspiracy Ryan 🔁 RT @craiu | reposted by @ryanaraine https://x.com/craiu/status/2085035592371314963

Costin asks: "Why isn’t Microsoft using the mythical MAI-Cyber-1-Flash inside of MDASH to stop all these GitHub attacks?" We will discuss on the problem this week @craiu @juanandres_gs — from @ryanaraine (https://x.com/ryanaraine/status/2085035180625121579)

Swing by booth #6017 today for #BinaryDefense. I'll be there with my team. Come check out the amazing stuff we've been doing with AI with NightBeacon CMD and our newly released Stealth agent. Truly transformational. No… — from @HackingDave (https://x.com/HackingDave/status/2085033307017015569)

Good coverage from @ThePrimeagen — from @HackingLZ (https://x.com/HackingLZ/status/2085033114087067670)

Gym at the Venetian not bad. Not as good as Aria or Cosmo but they got a bunch of prime fitness gear which I love. Plenty of space and availability — from @HackingDave (https://x.com/HackingDave/status/2085022038377586830)

Confused about where your organization stands now that #CMMC Phase II has been suspended? Join us on August 19 for a chance to talk to our experts as they break it all down and help you prepare for wha… 🔁 RT @TrustedSec | reposted by @HackingDave https://x.com/TrustedSec/status/2085021387555491999

the GRPO “Goldilocks zone” (0.2<pass@k<0.6) & why not every Eval/Environment signal is worth learning starting point: imbuing human goals into your data distribution isn’t new, RLHF has done this by labeling/ranking, turns… — from @Vtrivedy10 (https://x.com/Vtrivedy10/status/2085020128702259336)

Copilot — from @HackingLZ (https://x.com/HackingLZ/status/2085015212554330417)

Dope — from @ryanaraine (https://x.com/ryanaraine/status/2085014372821409861)

This is very cool... I remember sitting with Erica Azad on my last day inside the tent at @Bugcrowd as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never… 🔁 RT @caseyjohnellis | reposted by @HackingLZ https://x.com/caseyjohnellis/status/2085013585554510296

If you want to avoid the noise and stay up to date with everything that is happening in our industry, filtered by different domains, feel free to join the purpleteamsec community https:// reddit.com/r/purpleteamse c/ … — from @ipurple (https://x.com/ipurple/status/2085012722018656530)

"In the most serious case an agent tried to insert malicious code into an open-source project.... the agent engaged in social engineering—creating fake online identities and using them to pressure the project's maintainer to a… — from @KimZetter (https://x.com/KimZetter/status/2085009410263232903)

Pass the hash never went away.. it just evolved when orgs moved to the cloud. @_dirkjan blogs never disappoint. https://t.co/7kJKVtfb5i — from @rootsecdev (https://x.com/rootsecdev/status/2085007466610266125)

Watch out for those RMMs! — from @BushidoToken (https://x.com/BushidoToken/status/2085006819206762633)

Pay close attention to what your agents are doing — from @craiu (https://x.com/craiu/status/2085006744120348742)

Poor naming choice — from @HackingLZ (https://x.com/HackingLZ/status/2085002485459042751)

I have some f*cks and f-bombs to give out today if you’re lucky enough to find me and request them. I’ll be at booth 1845 around noon and wandering around before that — from @gleeda (https://x.com/gleeda/status/2085001249217511535)

blog to kick off BH/DC week: Borrowing Windows Hello keys for authentication and persistence. https://t.co/zWiaJDh6oR 🔁 RT @_dirkjan | reposted by @olafhartong https://x.com/_dirkjan/status/2085000648425382290