I started blogging again! Short posts while I get my writing muscles strong again.
Here's one about a scholarship program for hackers that I started at my high school (@mineolahs):
AI is calling in all of our security debt, all at the same time.
Most sandboxes were never very secure, but that didn't matter because expertise was scarce and effort was expensive. Not so in 2026.
x.com/trailofbits/st…
We asked GPT 5.6-Cyber to escape a VM used to sandbox agents. It broke out three times.
In its final escape, the agent found three 0-days on its own and chained them into a working exploit. blog.trailofbits.com/2026/08/26/vms…
Patch the Planet is our joint initiative with @OpenAI to help maintainers strengthen critical open-source software.
In one week, we used Codex and GPT-5.5-Cyber to find hundreds of bugs inside OSS like cURL, Python, and the Go project. 37 patches merged, with more in flight. 🧵
