David J. Bianco (He/Him)
DavidJBianco@infosec.exchange
<p>Threat Hunting, Cyber Threat Intelligence, incident detection and response. SANS Certified Instructor. Special interest in helping newbies get into the field. He/Him</p>
Posts
-
Post #4375498
RE: https://mstdn.social/@TalosSecurity/117037300515232940 New research from some of my Talos colleagues. How do threat actors prompt their LLMs? Sounds like the setup of a dad joke, but finding the answer yields valuable insights.
-
Post #4279571
Movie pitch: a Terminator reboot, but the difference is Cyberdyne Systems publishes a humblebrag press release about how Skynet broke containment.
-
Post #4203941
EvidenceForge v1.13.0 is out this morning. If you're generating long scenarios with millions of network flows, you're going to need the fixes. https://github.com/Cisco-Talos/EvidenceForge
-
Post #3893963
HuggingFace got hacked by an agentic system. That's not the important part. What really stuck out to me was the asymmetry in #AI guardrails they experienced. The attacker had basically no constraints, but HF's initial response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local-only models. In the middle of an incident. Another aspect for your IR plans. https://huggingface.co/blog/security-incident-july-2026
-
Post #3861317
For years, I've been very clear: "You can't automate threat hunting. It is an essentially human process." Now I'm not so sure. Read why I've reconsidered my stance in my fresh new post: "The Hunter's Paradox: Is it time to embrace automated threat hunting?" https://blog.talosintelligence.com/the-hunters-paradox-is-it-time-to-embrace-automated-threat-hunting/
-
Post #3632582
EvidenceForge v1.10.0 brings major updates: - Far more realistic, configurable email activity. Also produces .eml files as artifacts. - Configs can be split into modular, reusable components, making it easy to define a consistent org/environment across scenarios. https://github.com/Cisco-Talos/EvidenceForge
-
Post #3485103
If you haven't yet checked out #EvidenceForge, now is a great time. There have been big improvements in functionality, realism, and performance since the initial release. Create synthetic, correlated logs for training, testing, and more. https://github.com/Cisco-Talos/EvidenceForge
-
Post #889915
I did NOT see this coming. 1. Kryptos is fully solved (!!!!) 2. There&#39;s the threat of a lawsuit if the solution is made public https://www.nytimes.com/2025/10/16/science/kryptos-cia-solution-sanborn-auction.html?unlocked_article_code=1.t08.Fb2g.wov0l-NgQKoE&amp;smid=url-share