m0z (@LooseSecurity) profile picture

The greatest trick the devil ever pulled, was convincing the world that cyber security existed.

Ireland
Joined December 2018
Pretty sure there's going to be a lot more UAFs found in PHP in the next few days...
7
435
#ECSC2026 was one of the best I’ve ever attended! Super proud of Team Ireland finishing in 8th place overall. Playing without AI was super nostalgic. Definitely got me excited about CTF again !!!
1
12
477
no, I don’t want to grab a coffee with you in San Francisco
4
4
819
I spend more on AI tokens than I spend on my children
3
6
713
I don't have kids but I'm still spending wayyy too much on AI 😢
1
169
🔥 🔥 🔥
Ireland will meet the ECSC community in Bochum. ecsc2026.de #ECSC2026
4
483
Stop biasing your agents. Let them keep their creative souls! 😢
1
407
It amazes me how many security professionals are still sleeping on AI. Like, it can already do a better job at pentesting than most of you. It's just coping at this stage (and yeah, it hurts for me to say that too but get with the times!) 😢
2
20
1,158
See if you can spot which speaker's picture is just AI generated slop 😂 And their bio claims are easily disproven to be lies. Oh well
88
Can hackerone have some way for hackers who promise to report without using AI to be matched with triagers who promise not to argue severity using AI? Such a soul destroying experience to put hours into developing a PoC and answering questions to get AI slop questions back again
2
19
1,160
Literally cooked 10 rce in parallel already this morning. What a wild world we live in now!
2
17
1,647
Total cost ~30k USD It is going down though. The previously most expensive stage is now the cheapest. 😊
2
303
What is the lowest CVSS rating on a CVE ever published?
725
Oh no, h1 triagers are now just copy pasting LLM output. 😢
1
4
1,372
When will Caido add Send Requests in Parallel?
1
3
598
If you wanna know why your bug bounty report takes weeks to get triaged, blame this guy. Spam reporting expired TLS certs as crits and even using AI to argue back against people in replies. 🤣
This Post is from a suspended account. Learn more
10
10
1
286
22,273
In a post-AI world the value of novel research is exponentially higher.
3
371
I think one of the big issues right now is prioritizing what bugs to fix first. The amount of effort going into patching Linux LPEs was interesting...
1
2
800
I just think in most cases LPE isn't very relevant. If someone has a low priv shell on your production machines you're probably already f***ed
3
594