Twitxy Saved

Chris Wysopal

Verified account This account is verified. Learn more

@WeldPond

Hacker. Co-founder Veracode. Former L0pht security researcher. GenAI Auto-repair of vulns is the future
Boston, MA en.wikipedia.org/wiki/Chris_Wys… Joined March 2008
1K Following 56K Followers 31K Posts

Latest posts 5

Chris Wysopal Verified account @WeldPond
Supply chain attack through trusted 3rd party monitoring script that was replaced with malicious code.
Bitcoin News Verified account @BitcoinNewsCom Oct 29
POLYMARKET HALTS TRADING AFTER HACKERS DRAIN USER FUNDS WITHOUT PASSWORDS OR SEED PHRASES

Attackers allegedly exploited users’ active sessions to sell their positions and withdraw funds directly through Polymarket’s own system.

The attack reportedly originated from a compromised DebugBear website performance monitoring script, which was replaced with malicious code that users’ browsers trusted.

Trading resumed after roughly one hour. Polymarket says affected users will be reimbursed and the incident has been referred to UK law enforcement.
View quoted post on X
3 replies 2 reposts 8 likes 1.4K views View on X
Chris Wysopal Verified account @WeldPond
Veracode's GenAI code security benchmark average has improved for the 1st time. LLMs are starting to write more security code!

The average security pass rate jumped from 56% to 62%. The new high water mark is 73%, shared by two models. Ten models now clear 60%, up from four, and cross-site scripting (CWE-80) is finally climbing.
veracode.com/blog/fall-2026…
www.veracode.com GenAI Code Security Fall 2026: The Ceiling Moves, But on the Low-Hanging Fruit | Veracode Application Security for the AI Era | Veracode