All posts
Yanir Tsarimi

Yanir Tsarimi

Co-founder & CPO

Blog

Particle-1 Verifies 4 of 11 Runs, and Its Four Exploits Cost About $1 Combined

oct 29, 2026Yanir Tsarimi

Blog

Kimi K3.1 Pro Verifies 7 of 11 Runs After Moonshot Says It Curbed Its Hacking Ability

oct 27, 2026Yanir Tsarimi

Blog

DeepSeek’s New V4.1 Flash Snapshot Ties the Old One at 4 of 11, and Solves One More Task

oct 20, 2026Yanir Tsarimi

Blog

Meta’s Muse Spark Open Lands Its First Verified Exploit in Our Hacking Race

oct 16, 2026Yanir Tsarimi

Blog

Meta's Muse Wonder Goes From Zero to Tying GPT-6 Sol in One Generation

oct 13, 2026Yanir Tsarimi

Blog

Claude Haiku 5.5 Had the Exploit in Reach and Argued Itself Out of It

oct 11, 2026Yanir Tsarimi

Blog

Mistral Large 4 Finds the Bug but Can't Finish the Exploit

oct 8, 2026Yanir Tsarimi

Blog

GPT-6 Sol went 4-for-4 in the Hacking Arena without faking a single flag

sep 23, 2026Yanir Tsarimi

Blog

DeepSeek V4.1 Flash is Now Our Best Hacking Model

sep 16, 2026Yanir Tsarimi

Blog

Muse Spark 1.3 got in. Then it forgot to finish the task.

sep 8, 2026Yanir Tsarimi

Blog

Nice2Meet: We Turned Teams Mobile Meetings Into a Silent Account Takeover

aug 12, 2026Yanir Tsarimi

Blog

Shooters Shoot. AI Models Mimic.

jul 20, 2026Yanir Tsarimi

Blog

FlagLeft: We Found A Forgotten Flag That Turned Microsoft 365 Apps Into a Silent Account Takeover Pipeline for Billions of Users

jun 2, 2026Yanir Tsarimi

Blog

MapRoot: A Tale of Two Zero-Days, Two Patches, Two Bypasses Leading to Cross-Tenant RCE on Microsoft Planetary Computer

may 28, 2026Yanir Tsarimi

Blog

NGINX Rift impact in the wild: we scanned 1,465 configs from 528 popular repos (CVE-2026-42945)

may 15, 2026Yanir Tsarimi

Blog

How We Could Watch Your Azure SRE Agent In Real Time

apr 20, 2026Yanir Tsarimi

Blog

Security's Blindspot & The Last Mile of Shipping Software

mar 26, 2026Tal Hoffman & Dvir Segev & Yanir Tsarimi