Ryan @ReversingWithMe

Object File Analysis, Programming Scientist. I use [lol, haha, :), !] to deal with Poe's Law. Reserve right to be wrong sometimes. United States Joined July 2012

Tweets

5K
Followers

141
Following

293
Likes

6K

Lain on the Blockchain @CryptoCyberia

3 weeks ago

No gonna lie, I'm the biggest Apple hater for very very good reasons, but their last research paper explaining why they weren't interested in pursuing LLMs seems more and more like its gonna be correct.

810 3K 92K 7.6M 29K

Zion Leonahenahe Basque @mahal0z

3 weeks ago

It's been about a week since we completed DARPA's AIxCC, where we came in 5th and had the most accurate autonomous patching system in the competition. In the coming days, I'll be describing how we achieved it on the patching side. Stay tuned. Our CRS: github.com/shellphish/art…

1 21 96 6K 30

Richard Johnson @richinseattle

4 weeks ago

I’ve looked through the AIxCC repos. If you are going to get started and try to adapt for your use, I suggest looking at @trailofbits and @theori_io CRS first. And ofc anyone who takes my AI Agents for Cybersecurity class will get a deep dive on this along with my own agents!

7 21 155 15K 81

Richard Johnson @richinseattle

a month ago

Veracode just dropped a bombshell of a 2025 GenAI Code Security Report showing AI codegen consistently produces code with high rate of vulnerabilities

Chris Wysopal @WeldPond

a month ago

Veracode just dropped a bombshell of a 2025 GenAI Code Security Report showing AI codegen consistently produces code with high rate of vulnerabilities https://t.co/TR7hwdh1OV

3 20 60 25K 20

3 31 85 13K 24

Download Image

elvis @omarsar0

2 months ago

Evaluating LLM-based Agents This report has a comprehensive list of methods for evaluating AI Agents. Don't ignore evals. If done right, they are a game-changer. Highly recommend it to AI devs. (bookmark it)

24 178 897 95K 1K

Download Image

安坂星海 Azaka || VTuber @AzakaSekai_

2 months ago

I think it's about time we have a talk about timestamp field in PE and the problem with platforms using it as a detection metric. Let's start off by explaining what "timestamp" field we're talking about here. In a standard compiled PE, a field exists called TimeDateStamp in the…

5 21 151 9K 54

Download Image

Brendan Dolan-Gavitt @moyix

2 months ago

Here's the code: github.com/n132/ARVO

0 1 10 1K 5

Brendan Dolan-Gavitt @moyix

2 months ago

The code for building and updating the ARVO dataset, a collection of over 5000 memory safety vulnerabilities in open source software, is now open source! Link in reply :)

6 30 145 14K 80

Download Image

Dawn Song @dawnsongtweets

3 months ago

1/ 🔥 AI agents are reaching a breakthrough moment in cybersecurity. In our latest work: 🔓 CyberGym: AI agents discovered 15 zero-days in major open-source projects 💰 BountyBench: AI agents solved real-world bug bounty tasks worth tens of thousands of dollars 🤖…

29 148 520 106K 341

Download Image

Mike Krieger @mikeyk

3 months ago

Our engineering & research team put together a deep dive on the multi-agent system that powers our Research capability in Claude[dot]ai; lots of fun details architectural diagrams, and prompting learnings here: anthropic.com/engineering/bu…

28 81 758 55K 649

Ivan Fratric 💙💛 @ifsecure

3 months ago

In my recent conference talks on browser security, I showed a calc-popping exploit demo that targets Firefox 135.0. For educational purpuses, to try to demistify some of that calc popping magic, the demo code is now public project-zero.issues.chromium.org/issues/3890794…

0 27 153 8K 67

Hex-Rays SA @HexRaysSA

3 months ago

👋 Please join us in welcoming @RolfRolles as Hex-Rays’ new Chief Scientist! Rolf brings decades of RE expertise, with standout work in obfuscation, decompilation, and software protection. At Hex-Rays, he’ll lead research into next-gen decompilation and automated program…

0 23 209 40K 10

Phil Eaton @eatonphil

3 months ago

Good post

4 3 25 4K 9

Download Image

[email protected] @0xdea

3 months ago

And here are the latest #VulnerabilityResearch and #ReverseEngineering tools that I wrote in #Rust github.com/0xdea/rhabdoma… github.com/0xdea/haruspex github.com/0xdea/augur github.com/0xdea/oneiroma… Make sure to check the accompanying @hnsec blog posts for additional details 🪲🎯

0 23 119 5K 97

joernchen @joernchen

4 months ago

The recording is up now at youtube.com/watch?v=Dq_KVL…

offensivecon @offensive_con

4 months ago

The recording is up now at youtube.com/watch?v=Dq_KVL…

1 9 81 16K 7

Download Image

0 20 64 11K 20

[email protected] @0xdea

4 months ago

If for some reason #semgrep doesn’t fit your use case, here’s a port of my C vulnerability research ruleset to #weggli: github.com/0xdea/weggli-p… Read the linked blog post and check it out!

1 21 78 6K 58

Ken Gannon (伊藤剣) @Yogehi

4 months ago

Apparently @offensive_con worked their asses off to get their talks up on YouTube Go check them out And here's the coolest talk, my talk: youtu.be/LAIr2laU-So?si… And with that, the full chain used to exploit the S24 is released. Yay!

offensivecon @offensive_con

4 months ago

8 169 414 106K 161

4 34 158 31K 72

[email protected] @0xdea

4 months ago

I’d like to shine a spotlight on some of my GitHub projects. Let’s start with my battle-tested @semgrep ruleset for C bug hunting! github.com/0xdea/semgrep-… Be sure to read the articles for some real life examples on how to make the most of it.

1 17 78 5K 36

Dawn Song @dawnsongtweets

4 months ago

🔐 Frontier AI is reshaping cybersecurity, raising critical new questions: 🔍 What is its current impact? ⚖️ Who stands to benefit more—attackers or defenders? 🛡️ How can we mitigate the risks? Addressing these challenges requires coordinated efforts across AI & security…

4 27 100 14K 29

Download Image

BlinkDL @BlinkDL_AI

4 months ago

RWKV7-G1 "GooseOne" 🪿 2.9B release: pure RNN (attention-free) reasoning model, +5.2T tokens, comparable with Qwen2.5 3B / Llama3.2 3B and fully multilingual. Chat demo & weights on RWKV.com 7B training in progress.