T-3 days to @what-is-sos.bsky.social Volume II! 🆘 🚨🚨🚨 Still can't quite believe I've been selected among such a group of brilliant speakers 🙊 I'll be presenting on my current obsession: RedNovember/Storm-2077 🇨🇳 Agenda here (at least the non-redacted part... 😉): www.stateofstatecraft.com/agenda

Show Post

So glad someone is saying it. We've been seeing similar. LLMs are only useful for specific kinds of problems, and when applied to the wrong kind of problem, they produce garbage or waste your time. This fact doesn't change when applied to malware. www.darkreading.com/threat-intel...

Show Post

🚨 The CYBERWARCON 2026 lineup is here! 20 speakers on destructive and disruptive cyber threats, plus keynote Rob Joyce. Nov 20 in Arlington, VA, or join virtually. Huge thanks to our review board for picking a great lineup! www.cyberwarcon.com #CYBERWARCON

Show Post

I'll be giving a talk at this event on FROZEN RELIC and some interesting malware we saw them use between late 2025 and early 2026. Part of the campaign was already discussed publicly by CERT-UA but the earlier parts were not disclosed AFAIK. Looking forward to speaking and seeing old friends!

Show Post

The news that OpenAI is allowing phone number and email-based ad targeting of users, when read side by side with @citizenlab.ca’s research (unrelated to OpenAI) into targeted ads being used as vehicles for 0-click delivery of mercenary spyware, is… a nightmare scenario. citizenlab.ca/research/how...

Show Post