We found a sus pentesting LLM/MCP infrastructure in the wild: na2.hubs.ly/H013vv80

Zero-Click Agentic AI Exfiltration. I’m glad I can finally share some of the work our team has done. www.straiker.ai/blog/the-sil...

🎙 Vinay Pidathala of Straiker presents at Black Hat USA 2025: Preventing Autonomous Chaos in AI Agents via Systematic Evaluation 🗓 Wed, Aug 6, 2025 · 5:00 PM 📍 Startup City Theater, Business Hall D #BlackHatUSA #AISecurity #AIredteam #StraikerAI #AgenticAI

I am just elated that midjourney can animate one of my own drawings. It’s so freaking cute!

After moving over to ai security research…

AI agents are really the wild west for security right now.

I’ve officially pivoted to AI security research at @straikerai.bsky.social

Is it me or is the pollen a bit ridiculous this summer?

Claude 4 Opus 4 and Sonnet 4 www.anthropic.com/news/claude-4

Vibe coding: I find its quick to make code but I end up spending more time debugging the damn thing from its poor logic choices. It’s creating new jobs for code quality analysis ;)

They opened a Nintendo store in San Francisco but make you buy tickets for being able to go inside the store opening weekend. 🥲

Before considering using Llamasharp, know that it pulls in a unmanaged NativeAPI DLL underneath. Make sure you’re doing your library load integrity checking.

My little klee kai, Pixel, grew up too quickly

Weee playing with rust hypervisor bootloaders

I wrote a blog post on hardening Virtualization-Based Security enclaves. Check it out!

What an interesting instagram account takeover spam link. First they suspend your account then send you these fake recovery links. Seems like they target folks with ads accounts specifically.

Part 2 of our administrator protection blog is up techcommunity.microsoft.com/blog/microso...

Seeing a jump of new users on #pixelfed (supposedly the instagram-killer).

Roses are red. His eyes are blue. Here he comes… to steal your girl from you.

Part 1 of how administrator protection came to be: Evolving the windows user model. Happy to see this finally published. techcommunity.microsoft.com/blog/microso...

Seems like security teams are not safe from this round of layoffs.

Some DLL hijacks don’t always make the grade for windows bug bounty. But I’m happy to finally make some changes by slowly fixing these issues.

My little work buddy.

Whenever I have to review c#

My new little boy, Pixel. Only 8 weeks old ❤️

KASAN for Windows kernel let's go!!!! learn.microsoft.com/en-us/window...

I have been so out of infosec social for a while. I’ve been pursuing an adventure of becoming a web-based graphic novel/comic creator. Life is too short not to pursue a dream.

I haven’t looked at my twitter feed in awhile and the algorithm has just gone to shit.

What a terrible morning

👋