kat traxler (@NightmareJS) header
kat traxler (@NightmareJS) profile picture

Montessori kid using her chaos monkey energy to manifest security impact

Minneapolis, MN
Joined July 2012
Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)Photo by kat traxler (@NightmareJS)
kat traxler retweeted
JUST IN: Michigan prisons preparing to deploy AI that predicts incarcerated people's risk of committing future violent acts, using the results to determine their security classifications.
221
210
148
1,996
130,224
Realizing I’m 75% of the way there for an @ElizabethHolmes Halloween costume
1
171
‼️ BREAKING: PolymarkeT users were drained through its own website. A hijacked DebugBear monitoring script sold users' positions and sent ~$2.6M to one wallet. Polymarket halted trading and says victims will be made whole. The wallet has since been emptied.
29
219
54
1,269
87,615
kat traxler retweeted
In lieu of flowers, memorial contributions may be made to: Johns Hopkins Alzheimer’s Disease Research Center Fund    alzresearch.org/giving/ Alzheimer’s Foundation of America Caregiver Resources     alzfdn.org/donate/ Photo Credit: Tommy Garcia
6,677
79,741
17,350
345,584
11,701,979
kat traxler retweeted
YouTube link to the unprompted live debates and AI Hacker Jeopardy happening from now and in the next few hours! youtube.com/live/7kD--XEKrQ0…
3
4
14
922
Wow! Big news today! Soon Discord messages will be indexable on Google. If you're in a public Discord which is discoverable, and has not changed its privacy settings, any messages posted moving forward can be found from search engines! Hooray!!!!!1 (I think this is very bad)
167
494
84
6,807
254,575
kat traxler retweeted
Three hours in, the unprompted CTF is now at 24 kernel 0day submissions. The team is working hard on verification
2
9
1
38
2,085
kat traxler retweeted
Cloudflare just released a blog on a cross-tenant data exposure vulnerability I reported to them. The vuln is in Cloudflare Workers AI’s GLM-5.3 provider. This was later also reported upstream to SGLang. Check out their post here: blog.cloudflare.com/kv-cache…
2
4
36
1,147
Call your ex. We're back.
98
86
15
2,539
226,929
kat traxler retweeted
On October 16, we reported the abuse of a ConnectWise Cloud Backup credential to access Microsoft 365 tenants. Since then, we’ve been asking a new question: who, or what, was doing the typing? 🤖 🔗 Read our blog for our working hypothesis: huntress.com/blog/connectwis…
5
14
1
72
6,474
kat traxler retweeted
AI Security’s Fight Night LIVE on YouTube from @unpromptedconf ! AI Hacker Jeopardy and debates, Wed October 28, 6:10PM PT! Hit ‘NOTIFY ME' here: youtube.com/live/7kD--XEKrQ0 Your fight card: - @EppSecurity, creator of the Zero Day Clock, and @jeremiahg, founder of WhiteHat Security and CEO of @rootevidence - Tim Brown (CISO-in-Residence, @team8group; former @SolarWinds CISO) and @gadievron (CEO, @knosticai; Chair, [un]prompted) - @k8em0 (Founder & CEO, @LutaSecurity) vs. @raistolo (Full Professor, @polimi) Debates shepherded by Stephen Llano, Ph.D. (@StJohnsU). And - AI HACKER JEOPARDY with @g_mark! Want to play? email [email protected]: team name, 3 player names, cell number. Pls SHARE with your community. [un]prompted II, the AI Security Practitioner Conference, October 27–29 at the Hibernia in San Francisco or online: unpromptedcon.org Thank you to our Sponsors: @knosticai, TachTech, @censysio, @Ent_Security, @WorkOS, @DecibelVC, Whiterabbit, @zenitysec, @runsybil, @AISLE_Inc Thank you to our Community Partners: @SANSInstitute, @cloudsa, @OneRSAC, @FIRSTdotOrg. @jaybeale @jonsakoda @WHITEHACKSEC @robtlee @joesu11ivan
12
3
19
2,981
BREAKING: China's AI stock bubble bursts, wiping out $480 billion in market value as its tech-heavy STAR50 index plunges 40% in under 4 months.
80
689
156
9,135
492,077
Two new blogs dropping today. A culmination of my work on AI-Assisted vulnerablity discovery with the release of the Security Constitution: kattraxler.cloud/a-security-… And for those looking for the juicy bug details, an exfiltration techinique in BigQuery DTS kattraxler.cloud/no-permissi…
2
10
351
kat traxler retweeted
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
2
20
9
74
20,197