FluxRein
community

tl;dr sec (weekly newsletter)

tldrsec.com ·Threat Intel·20 items·updated
[tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev

Hey there, I hope you’ve been doing well! 🤔 Advice One of the biggest emotional intelligence unlocks I’ve had is learning to differentiate when a partner or friend is wanting to a) vent or b) problem solve. It’s kind of embarrassing, but I think I was late 20’s to early 30’s when that really sunk in. I also noticed…

[tl;dr sec] #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes

Hey there, I hope you’ve been doing well! 🗃️ One of everything Look at this stuff, isn’t it neat ? Wouldn’t you think my collection’s complete? Wouldn’t you think I’m a hacker who has… everything? Source It do be like that right now 😅 Happy hunting my friend! Sponsor 📣 Your AI agent finished the job. Why does it…

[tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026

Hey there, I hope you’ve been doing well! 🙏 My Wish for You There are many health and wellness gurus out there, and I don’t want to be one of them. But working in security, with the pace of change these days, can be stressful. Sometimes I do Box Breathing, or touch grass, or recall mantras like focusing on what’s in…

[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards

Hey there, I hope you’ve been doing well! 🎭️ Improv Friends I had a somewhat bittersweet dinner with one of my (musical) improv comedy teams recently. We’ve been rehearsing and performing together for probably over a year now, and it’s been a blast, but we’ve been losing steam. It can be difficult as an indie team to…

[tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs

Hey there, I hope you’ve been doing well! 👋 I’m back! Last week was the first time in 6 years, out of over 340 issues, I’ve delayed a tl;dr sec issue to the following week. That’s because it was a pretty crazy week between the GPT-6 Astra launch, and a Cyber Summit event we held for a number of CISOs and other…

[tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10

Hey there, I hope you’ve been doing well! 🚢 Staying Afloat Hope you’ve been doing well amidst the busy-ness these days. Alas, a personal life anecdote shall have to wait for next week, tonight a meme and bedtime for me. r/wholesomememes P.S. OpenAI released the full Hugging Face incident technical report . Some…

[tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements

Hey there, I hope you’ve been doing well! 🤔 Where do I know you from? I think one of my favorite, most hilarious life moments in recent history occurred in Vegas during Black Hat. I was at the Specter Ops happy hour, catching up with my friend Matt Johansen, who runs the great Vulnerable U newsletter, and Bryan…

[tl;dr sec] #340 - Anthropic and Meta Agents be Hackin', Agentic Incident Response Notebooks, Figma's AI Code Scanning

Hey there, I hope you’ve been doing well! 🫠 Vegas Like Icarus, I too have flouted common sense and the laws of nature by attending Hacker Summer Camp from Monday through Sunday. So far I have (mostly) survived the heat, and it’s been great catching up with friends. It’s somehow been busier than usual, will share more…

[tl;dr sec] #339 - Hugging Face's Incident Report, Context Bombs, AI does Cryptanalysis

Hey there, I hope you’ve been doing well! 🏜️ Hacker Summer Camp I’m excited about Black Hat and DEF CON next week! It’s always such a delight to catch up with friends and meet new cool people. Even if it’s going to be 115°F, which is roughly 40 degrees too hot for me. We’re doing some workshops with SpecterOps on “…

[tl;dr sec] #338 - OpenAI and Hugging Face, Accelerating EDR Evasion, Google's Mantis

Hey there, I hope you’ve been doing well! 🤗 Hugging Face Incident It’s been… a week 😅 In case you haven’t heard, this week OpenAI published a blog post saying that the recent AI-powered attack on Hugging Face was in fact… GPT‑5.6 Sol and a pre-release model. I feel very fortunate to have been able to see things…

[tl;dr sec] #333 - Perplexity's Bumblebee, Evading Cloud Logging, AI Vuln Hunting Spec

Hey there, I hope you’ve been doing well! 🙏 Busy, Exciting, Busy Thanks so much to everyone who reached out last week! I received so many kind emails, LinkedIn comments, and texts, I was filled with joy. My heart grew at least 3 sizes 🥹 Apologies if I haven’t responded yet, there are somehow even more things going…