Zeyu (Zayne) Zhang

Vibe coding is upon us, but it works best when the codebase has strong affordances — a concept in design that describes the possible actions an actor (in this case, a coding agent) can take, in relation to an object (in this case, the codebase): Affordanc…

Anthropic published its Mythos Preview cybersecurity evaluation a few days ago, and a lot of people in cyber are spooked.

Offensive security seems to be getting its time in the sun again with the rise of AI-powered tools that promise fully autonomous penetration testing.

It seems like security folks never catch a break in December. 3 days ago, a critical remote code execution vulnerability in the React Server Components Flight Protocol was discovered and patched.

Can you execute arbitrary Python code from only a comment?

Someone asked me this question recently.

TL;DR In a few weeks, I'll be leaving Cambridge and working on Hacktron AI full-time.

Last Friday, I was getting off the bus in downtown Houston when I received a rather alarming message from a friend in Singapore.

I'll be honest — when I sat through my first-year Discrete Mathematics course, there were plenty of times when I wondered if I'd ever use any of it in the real world.

When I interview for internships nowadays, one question that recruiters often ask me is "why not cybersecurity?".