EdgeWalker @BitAndro
Security and Malware dev stuff Joined February 2020-
Tweets82
-
Followers26
-
Following577
-
Likes263
Stealth browser extensions are underrated. Nobody ever finds them. Especially not EDRs. If you hang around in the browser long enough, you collect almost everything you need 95% of the time
@Cyb3rMonk There is no mature behavioral detection system in Linux. No EDR is mature enough, yet. Please check both behaviors and exploits.
@techspence For SOC, Detection Enginering > Automation
It’s also not about the value of the certification itself; The problem is if you’re the type of person who RELIES on a cert for getting anywhere “What cert should I get” if that is the first question you’re asking, you’re not even close to being on track
Certifications that don’t teach you anything and are an expensive way to add more useless words to your CV
Relay attacks are underrated in red team assessments. You don't need to clone the card. You don't need to crack the crypto. You just need to be close enough to the target and have a partner near the reader. Real-time signal relay. The door thinks the card is right there. No cloning. No cracking. Just physics. Most access control systems have zero defence against this. #RFID #RelayAttack #RedTeam #PhysicalPentest #AccessControl
Some people at frontier AI labs told me they believe startups are over. OpenAI, Anthropic, Google, xAI will absorb every industry as AGI nears. Coding today, science, medicine, and finance next. Then everything else. If they’re right, that’s a pretty boring end of the world.
@techspence And hard for defenders to be strict on security of developers endpoints if the company is a SaaS - Plus, EDR protection on Linux systems is much, much more immature than in Windows.
From an internal threat perspective, developer machines are as good as getting Domain Admin, and many times even more "lucrative" from an attack pov They have the keys and typically much less oversight. youtube.com/clip/UgkxqDZUp…
By breaking the typical chain of Suspicious Activity -> 2nd Suspicious Activity -> Yet Another Suspicious Activity with Suspicious Activity -> Normal User Behavior -> Another normal behavior -> Suspicious Activity you can reset model analysis and lower your threat profile
There's a common assumption in AI right now that if one language model can do a task reasonably well, having several of them collaborate — splitting up the work, checking each other's outputs, debating answers — should do it better. This paper puts that assumption under a controlled experiment across 180 configurations and finds that the reality is messier and more interesting: multi-agent setups improved performance by up to 81% on some tasks and made things worse by up to 70% on others, with the difference coming down to whether the task can be broken into parallel pieces or whether each step depends on the previous one. In a financial analysis, one agent can look at regulatory filings while another reads market news and a third examines earnings data — none of them need to wait for the others. In a Minecraft crafting puzzle, on the other hand, each action changes the inventory that the next action depends on, so the steps have to happen in order and splitting them across agents just adds overhead without any benefit. The paper fits an equation that predicts which architecture will work best for a new task 87% of the time. For anyone building or thinking about building systems where multiple AI models work together, this replaces a lot of hand-waving with something concrete. Read with an AI tutor: chapterpal.com/s/5c02af66/tow… Download the PDF: arxiv.org/pdf/2512.08296
I want to share a quick thought for people in cyber security. This will be my longest tweet ever. I’ve spoken to many lately who are having an existential crisis from the constant posts about “the end of cybersecurity jobs.” Yes, things are changing quickly. This is a significant moment for the tech industry. Change can be uncomfortable. But we’ve seen cycles like this before. • When GitHub and open source took off, people said software engineers would disappear because code was free. • When AWS and cloud computing emerged, people said infrastructure jobs would vanish. • When fuzzing and SAST tools improved, people said vulnerability research would disappear. • Virtualization would eliminate infrastructure jobs. • Mobile computing was going to end desktop dev. • Exploit mitigations would end exploitability. It didn't. Each time automation improved, the amount of software grew faster than the automation. It does feel "different" this time as it's explosive. Some roles will shrink: • repetitive pentesting • basic vulnerability scanning • tier-1 SOC monitoring But other areas are expanding rapidly: • AI system security • supply chain security • identity architecture • autonomous agent security • critical infrastructure protection Historically, every time we eliminate one class of bugs, new classes emerge. Right now people are vibe-coding entire systems, giving AI access to their machines, crossing trust boundaries, and deploying autonomous agents with excessive permissions. The legal and regulatory world is nowhere close to ready. There will absolutely be new failure modes. Humans are amazing and always adapt, finding new ways to do things. The worst thing you can do right now is fall into a doom loop. ...and I’ll be honest, I too have felt the "psychological paralysis" a few times thinking, “Is this time different?” It's especially impactful when it comes from someone I respect in the community. There are certainly unknowns, in an industry where we've become accustomed to predictability. But... the majority of those reactions are usually driven by social media, not reality. Platforms like X reward engagement, and sensational doom posts spread faster than measured thinking. If you see something like: “Holy #$%^! Opus 66.6 just found every bug in Chrome and replaced 50 startups!” …mute it and move on. Instead: Stay curious. Learn the new technology. Adapt your skillsets. Build things. We’ll get through this transition the same way we always have. If I'm wrong then Sam Altman better be right about UBI! :) I'm sure that if this tweet gets any engagement that I'll get some heat for it, but a good friend of mine reminds me often to focus on what you have control over. I'll revisit this tweet at DEF CON 40!
Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳
Blog post: On the Coming Industrialisation of Exploit Generation with LLMs sean.heelan.io/2026/01/18/on-… TL;DR: I ran an experiment with GPT-5.2 and Opus 4.5 based agents to generate exploits for a zeroday QuickJS bug. They're pretty good at it. Code: github.com/SeanHeelan/ana…
To restate the argument in more obvious terms. The eventual end state of labor under automation has been understood by smart men (ie not shallow libshits) for ≈160 years since Darwin Among the Machines. The timeline to full automation was unclear. Technocrats and some Marxists expected it in the 20th century. The last 14 years in AI (since connectionism won the hardware lottery as evidenced by AlexNet) match models that predict post-labor economy by 2035-2045. Vinge, Legg, Kurzweil, Moravec and others were unclear on details but it's obvious that if you showed them the present snapshot in say 1999, they'd have said «wow, yep, this is the endgame, almost all HARD puzzle pieces are placed». The current technological stack is almost certainly not the final one. That doesn't matter. It will clearly suffice to build everything needed for a rapid transition to the next one – data, software, hardware, and it looks extremely dubious that the final human-made stack will be paradigmatically much more complex than what we've done in these 14 years. Post-labor economy = post-consumer market = permanent underclass for virtually everyone and state-oligarchic power centralization by default. As an aside: «AI takeover» as an alternative scenario is cope for nihilists and red herring for autistic quokkas. Optimizing for compliance will be easier and ultimately more incentivized than optimizing for novel cognitive work. There will be a decidedly simian ruling class, though it may choose to *become* something else. But that's not our business anon. We won't have much business at all. The serious business will be about the technocapital deepening and gradually expanding beyond Earth. Frantic attempts to «escape the permanent underclass» in this community are not so much about getting rich as about converting wealth into some equity, a permanent stake in the ballooning posthuman economy, large enough that you'd at least be treading water on dividends, in the best case – large enough that it can sustain a thin, disciplined bloodline in perpetuity. Current datacenter buildup effects and PC hardware prices are suggestive of where it's going. Consumers are getting priced out of everything valuable for industrial production, starting from the top (microchips) and the bottom (raw inputs like copper and electricity). The two shockwaves will be traveling closer to the middle. This is not so much a "supercycle" as a secular trend. American resource frenzy and disregard for diplomacy can be interpreted as a state-level reaction to this understanding. There certainly are other factors, hedges for longer timelines, institutional inertia and disagreement between actors that prevents truly desperate focus on the new paradigm. But the smart people near the levers of power in the US do think in these terms. Speaking purely of the political instinct, I think the quality of US elite is very high, and they're ahead of the curve, thus there are even different American cliques who have coherent positions on the issue. Other global elites, including the Chinese one, are slower on the uptake. But this state of affairs isn't as permanent as the underclass will be. For people who are not BOTH extremely smart and agentic – myself included – I don't have a solution that doesn't sound hopelessly romantic and naive.
Certifications that don’t teach you anything and are an expensive way to add more useless words to your CV
Most of the wealthy and the super-rich did not make their money via stocks, nor do they hold a lot of stocks (even when they are rich). The people who are obsessed with stock picking or macro investing are most likely not going to get rich from it. You're playing the wrong game if you're after the big bucks. So if stock picking (Buffett style), or running a macro hedge fund (Druckenmiller style), is not the way to go, what is the proven strategy? This is not my opinion, but the data itself. Overwhelming evidence (not only from this chart) shows that you need to solve a problem for society by starting your own business. Most of the wealth, and I mean real wealth above — say $10 million and decently early on (not when you're 78 😂) — is made via entrepreneurship.
It’s the wildest thing these LLM pentesting frameworks blindly trust output from systems their testing sent directly back to the LLM supervisor agent.
pizza planet @0x251e
152 Followers 640 Following
2B @2B9975657120850
19 Followers 2K Following
Darius Houle (darbonz... @dariushoule
236 Followers 570 Following Hacker, builder, appsec practitioner, security researcher. Probable world championship player of the creative masterpiece: Lemmings (1991)
Sophia @Rakshaydas
14 Followers 120 Following Everyone wears different shoes, destined to walk different paths
timlake @timlake252160
1 Followers 2K Following
Ajlaaa0906 @ajlaaa090666861
0 Followers 23 Following
nanjin002 @nanjin00272827
12 Followers 4K Following
CA$H @RobJTejas
303 Followers 3K Following Electrical Engineer turned Digital Forensicator. Thinker, tinkerer, inventor, artist, home chef, gamer, home brewer. Socially aware, spiritually awoke.
Joe @ProtectionJoe
953 Followers 2K Following Cybersecurity evangelist since 2011. Promoting and sharing cybersecurity information for all of humankind.
crawler_cookie_0 @crawler_cookie0
21 Followers 4K Following
Al Millar @milldawgydawgy
41 Followers 442 Following Former Royal Marines Commando Red Team Operator Maldev Cat dad Motorcyclist
Rorchach_Sec @RorchachSeC
10 Followers 435 Following
GeekyPanda @geekypanda411
894 Followers 3K Following DFIR, Malware Analyst, Threat Intelligence, All Views are personal! #cybersecurity #infosec #linux
Lic. Marco Antonio @ia13000
35 Followers 2K Following Soy licenciado en informática administrativa, me gustan los perros y gatos, ver tv, la tecnología, el derecho y volar drones. ❤️✝️💻
Dmitry Vostokov 🇮�... @DumpAnalysis
8K Followers 6K Following Diagnostician. Author of Diagnomicon. Gang of One. Software Surgeon. Machine Learning and AI for Software Diagnostics and Observability. Generative Debugging.
Malicious.Life @MaliciousLife
21K Followers 9K Following The wildest cybersecurity stories you can imagine, told by experts & hackers. Lock your door, wipe your drive, and listen to a history you never knew existed.
chum1ng0/security res... @chum1ng0
9K Followers 4K Following #Chile-🇨🇱, Investigador Independiente cubro hacktivismo y filtraciones de datos en #LATAM y puedes encontrar mis noticias en:@_newschu & https://t.co/2nxsX7K3cE
rivitna @rivitna2
5K Followers 2K Following Chief #malware analyst, reverse engineer, #APT and #ransomware researcher, programmer. Tweets represent my personal views.
Ignacio D. Favro @idfavro
291 Followers 1K Following !oh los que entráis!, dejad toda esperanza (Dante)
T.X. St Visconti @txspectre
2K Followers 5K Following Goth Hacker Space BarbieTM. 🧛♀️💻🌌🛰️🤖🎀👱 Tech Sorceress & Polymath👩💻 AI /Cybersec / Research/ Writing / Art / Electronics/ Sci / Math / Aerospace.
Today in History @TodayinHistory
445K Followers 4K Following Sharing events that happened today in the past 🏛️ Join me in keeping history alive for everyone on X!
Eleonora Sayaka Chial... @EleonoraSayaka
30K Followers 106 Following influencer listed by AGCOM Retrocomputer & Vintage Console Enthusiast🕹 Politecnico of Turin📚 https://t.co/20sQYNAxKW
Kevin → Plant Daddy @KevinEspiritu
52K Followers 2K Following I like growing plants, businesses, and the thing I call my self | founder / ceo @epicgardening, seeds @botanicalseeds, artist @rampfade
Josie Kins @Josikinz
17K Followers 566 Following Researcher @mindstatedesign, Subjective Effect Documentation expert, founder of various projects, glitchybrained-intersex-technoshaman, etc. views=mine
Socket @SocketSecurity
21K Followers 5K Following Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware
CISA Cyber @CISACyber
298K Followers 73 Following Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
Tony @TJ_Null
23K Followers 489 Following Blue Teamer in Disguise. Blog at https://t.co/spa33ybIVL. SANS Netwars Champion. Former community manager and founder of the Offsec community for @offsectraining
tuckner @tuckner
3K Followers 853 Following Finding bad software extensions at @SocketSecurity (acquired @secureannex). #️⃣ https://t.co/KGANHVF6BP
JFrog Security @JFrogSecurity
5K Followers 305 Following The JFrog Security Research Team empowers developers and companies to excel by identifying, prioritizing, and mitigating software risks.
Rob Seamans @robseamans
7K Followers 3K Following Professor @NYUStern; Director @NYUSternCFM; former Obama CEA Senior Economist for tech & innovation; research on AI, robots, entrepreneurship, strategy
Joshua Gans @joshgans
20K Followers 750 Following Professor at the Rotman School of Management, University of Toronto. Chief Economist of Creative Destruction Lab https://t.co/a9ZbnBauCF
Daniel Rock @danielrock
6K Followers 2K Following Asst. Prof. in OID @Wharton @Penn. Cofounder @workhelix. Everyone can just do stuff and that's {good, bad}. I study the economics of AI.
Alex Imas @alexolegimas
32K Followers 2K Following Director of AGI Economics @GoogleDeepMind. Professor at @ChicagoBooth. (on leave) Essays: https://t.co/9qSiQxvdja Opinions are my own.
Philippe Aghion @Ph_Aghion
26K Followers 136 Following Professor at College de France, INSEAD and LSE. 2025 Nobel Prize in Economics. Account managed by my students at @cdf1530 to share news, not opinions.
Erik Brynjolfsson @erikbryn
232K Followers 5K Following Director @DigEconLab Co-founder, @Workhelix @StanfordHAI @SIEPR @Stanford https://t.co/D2bPyxoFEf
David Autor @davidautor
36K Followers 222 Following
Andrew McAfee 🇺�... @amcafee
80K Followers 825 Following Author of "The Geek Way" and "More from Less;" coauthor of "The Second Machine Age;" proponent of human and planetary flourishing.
Daron Acemoglu @DAcemogluMIT
366K Followers 329 Following Institute Professor @MIT, @MITEcon. Co-Director of @MITShapingWork. Author of Why Nations Fail, The Narrow Corridor, and Power & Progress.
Craig Rowland - Agent... @CraigHRowland
11K Followers 321 Following Agentless Linux security. No endpoint agents and no drama. Linux malware, forensics, intrusion detection, and hacking. Founder @SandflySecurity.
Elastic Security Labs @elasticseclabs
5K Followers 729 Following Elastic Security Labs is democratizing security by sharing knowledge and capabilities necessary to prepare for threats. Spiritually serving humanity since 2019.
Giuseppe `N3mes1s` @N3mes1s
13K Followers 328 Following windows, macos, linux, android && lowlevel && ring-1 lover; EDR chef; malware hunter; purple team💜
Invictus Incident Res... @InvictusIR
2K Followers 32 Following Helping organizations respond to cyber incidents in the cloud | 🆘 24/7 support https://t.co/zfF62gimvm | 📚 Academy https://t.co/GH0u8tmjXJ
DefSecSentinel @DefSecSentinel
2K Followers 1K Following 179CPT Cyber Operations Technician 170A @MOARNG
John Hammond @_JohnHammond
320K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyiEk && https://t.co/narO3syzIy
Feross @feross
41K Followers 2K Following ⚡️ Founder + CEO @SocketSecurity (https://t.co/7g1opA7Tr8) • 🌲 Visiting lecturer @Stanford (https://t.co/yw9prxLiLe) • ❤️ Open source @WebTorrentApp + @StandardJS
s1r1us (mohan) @S1r1u5_
13K Followers 2K Following aham nityaṃ śiṣyaḥ, jagat mama guruḥ. {~hacker~} {founder @ElectrovoltSec, @HacktronAI}
Rami McCarthy @ramimacisabird
5K Followers 903 Following security, for the internet, at @wiz_io! opinionated about security. 🇺🇸 in 🇸🇪 (he/him)
conduct|r @conductr_
20K Followers 980 Following Unleash your limitless potential. Join the free Telegram channel: https://t.co/27pDIqjuyT
LiteLLM (YC W23) @LiteLLM
5K Followers 180 Following Call every LLM API like it's OpenAI 👉 https://t.co/UV2PpapQo7
Luke Stephens (hakluk... @hakluke
100K Followers 2K Following Hacker, marketer. I manage socials and marketing for cybersecurity orgs. Founder of @hacker_content and @haksecio
Yet another commodity... @tleilax___
51K Followers 3K Following Commodity Portfolio Manager - Systematic mid-frequency futures & options - Switzerland - Options - Quantitative trading - Data driven
Chris Sanders 🔎 �... @chrissanders88
35K Followers 487 Following Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
Official Layoff @LayoffAI
50K Followers 8 Following Tracking Layoffs in real time. We are here for you.
IRL Loading Screens @IRLoadingScreen
69K Followers 123 Following IRL Loading Screens. Loading screens for real life offering tips, lore, and insight into the game world.
solst/ICE of Astarte @IceSolst
31K Followers 2K Following Voidweaver @AstarteSecurity - Pentester turned seceng turned meeting canceller - meetup https://t.co/E4rlINC0U6 - conf tracker https://t.co/tReNhuhANF
Jason Lang @curi0usJack
16K Followers 203 Following @TrustedSec Red Team lead | Hi-Fidelity trolling | Liberty/Privacy Enthusiast | Linux | Putting the "no" in nano | Avatar: https://t.co/3XHmKR8nCk
OSINTtechnical @Osinttechnical
1.6M Followers 921 Following PAI enjoyer, OSINT guy @hntrbrkmedia, my views/freezing cold takes are my own. For full disclosures, visit https://t.co/JOtQx4pI3e.
NatSec Matters Podcas... @NatSecMatters
17K Followers 0 Following Podcast featuring interviews with national security leaders | Hosted by BGS Managing Directors Michael Allen, Jeremy Bash, and Andrew Shapiro.
EFF @EFF
472K Followers 1K Following We're the Electronic Frontier Foundation. This account is no longer active or monitored. Find EFF's active social media at https://t.co/dIWsCr4uCF.
templar @tplr_ai
13K Followers 4 Following incentivised internet-wide training - an order of @covenant_ai
Peter McCrory @PeterMcCrory
45K Followers 433 Following Head of Economics at Anthropic. Views are my own.
JS0N Haddix @Jhaddix
176K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
























