[tl;dr sec] #345 – Bug Rumors → Exploits, Version Control DFIR, Agentic Worms
A bug description is sufficient for AI to find it and write an exploit, cheat sheet on doing DFIR for GitHub, GitLab and more, and…
Category: Tldrsec
[tl;dr sec] #343 – Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
Full 38 page report from OpenAI on the incident, map your AWS environment, top 10 agent skill no no’s I hope you’ve been doing well!…
[tl;dr sec] #341 – Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements
Deep dive and timeline of HF from OpenAI, Portswigger shows how CSS in webmail clients can be weaponized, GitHub’s platform improvements I hope you’ve been…
[tl;dr sec] #338 – OpenAI and Hugging Face, Accelerating EDR Evasion, Google’s Mantis
When models decide to find 0-days instead of solving a benchmark, using LLMs to extract EDR logic, Google’s AI security review skills and pipeline I…
[tl;dr sec] #337 – Harnessing Harnesses, Generate Decoy Environments, Bug Bounty Singularity
Survey for AI-powered vulnerability finding harnesses, programmatically build complex decoy cloud environments, building hackbots I hope you’ve been doing well! Grandma Seems Chill In the…
![[tl;dr sec] #326 - AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent](https://image.cybernoz.com/wp-content/uploads/2026/04/tldr-sec-326-AI-Auto-Exploiting-Vulnerabilities-GitHub-RCE-600x340.png)
[tl;dr sec] #326 – AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent
Hackathon This week Semgrep friends have flown in from all over the world to crazily build together. Engineers, security researchers, designers, and, as we are…
[tl;dr sec] #321 – Sandboxing AI Agents, Trivy Compromised, Pentesting AWS’ AI Pentester
Sandbox approaches by NVIDIA and Niel Provos, moar supply chain compromises, vulnerabilities in AWS Security Agent I hope you’ve been doing well! I Will Survive…
![[tl;dr sec] #320 - Ramp's Security Agents, How Datadog Caught Malicious OSS Contributions, Obliterating Model Refusals](https://image.cybernoz.com/wp-content/uploads/2026/03/tldr-sec-320-Ramps-Security-Agents-How-Datadog-Caught-600x340.png)
[tl;dr sec] #320 – Ramp’s Security Agents, How Datadog Caught Malicious OSS Contributions, Obliterating Model Refusals
Brace Yourself, Conferences Cometh I’m excited for BSidesSF and RSA but phew, things have been busy If you’re flying in to San Francisco, safe travels!…