Three guys with Claude and Codex subscriptions chained 6 vulns into an advanced attack
xennygrimmato_ · x · 2026-09-18
What looked like work from an advanced hacker team turned out to be three self-described "guys with Claude and Codex subscriptions." JordanNanos argues the dismissiveness misses the point: security is asymmetric — attackers only need one vuln, and this small team chained six impressive ones. Small teams with AI coding tools can now pull off "advanced" operations that once required professional crews.
More from coding & agent
- ty to ship full support for recursive implicit type aliases, built on mu types — charliermarsh · 2026-09-19
- Converting video to 120fps with a single prompt via Runway MCP — tlakomy · 2026-09-19
- Experimental Jev-powered RLS linter catches Supabase policy bugs rule-based lint can't — SeanOliver · 2026-09-19
- Virtual green screen from a RealSense D436: depth-based RGB filtering, no backdrop needed — chrismatthieu · 2026-09-19
- Runway MCP turns video to 120fps with a single prompt — tlakomy · 2026-09-19
- Cost breakdown: 100 LLM calls in 8.5 seconds for roughly a quarter of a cent — narphorium · 2026-09-19