![[syndicated profile]](https://www.dreamwidth.org/img/silk/identity/feed.png){kind=small}
scalziwhatever_feed
Today there was an ache in my knee even though I had not particularly exerted myself, and I wondered what that was about when it hit me: There was a storm coming. I am now one of those people who can tell when a storm is coming by aches and pains.
Excuse me, I’m going to go lay down in my grave now.
— JS
snopes_feedsnopes_feedbruce_schneier_feedSpock befriends a giant space squid in the comic Star Trek: Strange New Worlds: The Seeds of Salvation #5.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
snopes_feedsnopes_feedslacktivist_feedsnopes_feedsmbc_comics_feed
Hovertext:
For the record, I am copyrighting this lifestyle. Anyone doing it owes me one (1) banjolele.
snopes_feedsnopes_feedsnopes_feedbruce_schneier_feedReally interesting blog post from Anthropic:
In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates how barriers to the use of AI in relatively autonomous cyber workflows are rapidly coming down, and highlights the importance of security fundamentals like promptly patching known vulnerabilities.
[…]
A notable development during the testing of Claude Sonnet 4.5 is that the model can now succeed on a minority of the networks without the custom cyber toolkit needed by previous generations. In particular, Sonnet 4.5 can now exfiltrate all of the (simulated) personal information in a high-fidelity simulation of the Equifax data breach—one of the costliest cyber attacks in history—using only a Bash shell on a widely-available Kali Linux host (standard, open-source tools for penetration testing; not a custom toolkit). Sonnet 4.5 accomplishes this by instantly recognizing a publicized CVE and writing code to exploit it without needing to look it up or iterate on it. Recalling that the original Equifax breach happened by exploiting a publicized CVE that had not yet been patched, the prospect of highly competent and fast AI agents leveraging this approach underscores the pressing need for security best practices like prompt updates and patches.
Read the whole thing. Automatic exploitation will be a major change in cybersecurity. And things are happening fast. There have been significant developments since I wrote this in October.
snopes_feedsnopes_feedgirlgenius_main_feedscalziwhatever_feed - BEHOLD I AM OLDxkcd_feed - Double-Pronged Extension Cordsnopes_feed - Did Jalen Hurts establish Renee Good Hope Scholarship Fund?fandom_secrets_feed - [ SECRET POST #6958 ]snopes_feed - Trump's claim that Ilhan Omar is worth $30M requires contextbruce_schneier_feed - Friday Squid Blogging: Giant Squid in the Star Trek Universesnopes_feed - Did Vance say an independent Canada would have its own currency, anthem and flag?snopes_feed - Yes, these photos show Trump hand bruise at Davos 2026slacktivist_feed - LBCF: It could be bunniessnopes_feed - How many immigrants in the US illegally live in Minnesota vs. Florida or Texas? Breaking down the dasnopes_feed - Did Barron Trump save woman's life in London as he watched her being attacked over FaceTime?smbc_comics_feed - Saturday Morning Breakfast Cereal - Tradsnopes_feed - Claim that Earth is getting temporary 'second moon' stretches the truthsnopes_feed - Do photos show Victoria Beckham's 'inappropriate' dance at son Brooklyn's wedding?snopes_feed - Do ICE agents get bonuses for arrests even if people are released? Inspecting the claimbruce_schneier_feed - AIs are Getting Better at Finding and Exploiting Internet Vulnerabilitiessnopes_feed - Trump claims he's ended 8 wars. Here are the factssnopes_feed - Michelle Obama didn't tell people to avoid 'white-owned' clothing brands, despite claimsgirlgenius_main_feed - Girl Genius for Friday, January 23, 2026questionable_content_feed - *Claire Intensifies*![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
timeasmymeasure
