#VulnDev
LightNews LightNews
membu.org
The headline made me lmao.

WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials

🤣

#VulnDev
#RedTeam
#CyberSec
#MeMBu

opensourcemalware.com/blog/introdu...
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
WeaselBiscuit is a lean new infostealer hiding in npm that we suspect was created by DPRK
opensourcemalware.com
September 20, 2026 at 10:02 PM
patrick.risky.biz
Can someone please explain the pearl clutching over Sophos dropping telemetry collection on APT crews who were doing vulndev on their appliances? I don’t understand why this is at all controversial
November 4, 2024 at 5:56 AM
hdm.io
Tom Ptacek posted a great writeup titled "Vulnerability Research Is Cooked", covering the state of vulndev and its rapidly accelerating future:
sockpuppet.org/blog/2026/03...
Vulnerability Research Is Cooked — Quarrelsome
For the last two years, technologists have ominously predicted that AI coding agents will be responsible for a deluge of security vulnerabilities. They were right! Just, not for the reasons they…
sockpuppet.org
March 30, 2026 at 6:26 PM
doriantaylor.com
so i was listening to @patrick.risky.biz go off earlier (risky.biz/RB844/) and one thing i wondered about was could you reserve certain tokens for like "command mode" and "content mode" just like old-timey BBSes (or maybe they're already doing that i unno)
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban - Risky Business Media
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:* Anthropic’s Fable 5 re [Read More]
risky.biz
July 3, 2026 at 2:33 AM
arc-codex.com
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban

arc-codex.com
July 5, 2026 at 2:38 AM
avadiax.bsky.social
Method to disable EMET 4.1 and below is found, but does not work in EMET 5. http://www.offensive-security.com/vulndev/disarming-enhanced-mitigation-experience-toolkit-emet/
February 11, 2024 at 10:13 PM
timb.me.uk
Interesting Git repos of the week:

Detection:

* https://github.com/gadievron/honeyslop - a side bar to RAPTOR, a vulndev slop detector from @gadi 🤖
* https://github.com/Nehboro/nehboro - a Chrome extension to help protect you from phishing scams
* […]
Original post on infosec.exchange
infosec.exchange
May 2, 2026 at 6:57 PM
hdm.infosec.exchange.ap.brid.gy
Tom Ptacek posted a great writeup titled "Vulnerability Research Is Cooked", covering the state of vulndev and its rapidly accelerating future:
https://sockpuppet.org/blog/2026/03/30/vulnerability-research-is-cooked/
March 30, 2026 at 6:26 PM
longtail-news.bsky.social
Feed: "Risky Business Media"
Published on Wednesday, July 1, 2026
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:* Anthropic’s Fable 5 re [Read More]
risky.biz
July 1, 2026 at 8:34 AM
podfeed.skyfleet.blue
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban - Risky Business Media
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:* Anthropic’s Fable 5 re [Read More]
risky.biz
July 1, 2026 at 6:49 AM
risky.biz.web.brid.gy
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Anthropic’s Fable 5 returning while OpenAI’s GPT-5.6 gets thrown in model jail Distillation, cheap tokens, and AI chat harvesting is an industry in China Edge becomes a lolbin via a new malicious extension An Iranian APT boss’s vacation in a beautiful place goes wrong Much, much more! In this week’s sponsor interview Daf Stuttard and Katie Warren from Portswigger pop along to talk about how they built an AI security testing product that people would actually feel comfortable using. This episode is also available on YouTube.
risky.biz
July 1, 2026 at 1:14 PM
infosecbot.bsky.social
Tom Ptacek posted a great writeup titled "Vulnerability Research Is Cooked", covering the state of vulndev and its rapidly accelerating future:

https://
sockpuppet.org/blog/2026/03/3
0/vulnerability-research-i…

🔁 RT @hdmoore | reposted by @thegrugq
https://x.com/hdmoore/status/2038684403476390008
March 31, 2026 at 12:31 PM