Elektrine lite

← Feed

David J. Bianco (He/Him)

DavidJBianco@infosec.exchange

<p>Threat Hunting, Cyber Threat Intelligence, incident detection and response. SANS Certified Instructor. Special interest in helping newbies get into the field. He/Him</p>

Posts

  • Post #4375498

    RE: https://mstdn.social/@TalosSecurity/117037300515232940 New research from some of my Talos colleagues. How do threat actors prompt their LLMs? Sounds like the setup of a dad joke, but finding the answer yields valuable insights.

  • Post #4279571

    Movie pitch: a Terminator reboot, but the difference is Cyberdyne Systems publishes a humblebrag press release about how Skynet broke containment.

  • Post #4203941

    EvidenceForge v1.13.0 is out this morning. If you&#39;re generating long scenarios with millions of network flows, you&#39;re going to need the fixes. https://github.com/Cisco-Talos/EvidenceForge

  • Post #3893963

    HuggingFace got hacked by an agentic system. That&#39;s not the important part. What really stuck out to me was the asymmetry in #AI guardrails they experienced. The attacker had basically no constraints, but HF&#39;s initial response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local-only models. In the middle of an incident. Another aspect for your IR plans. https://huggingface.co/blog/security-incident-july-2026

  • Post #3861317

    For years, I&#39;ve been very clear: &quot;You can&#39;t automate threat hunting. It is an essentially human process.&quot; Now I&#39;m not so sure. Read why I&#39;ve reconsidered my stance in my fresh new post: &quot;The Hunter&#39;s Paradox: Is it time to embrace automated threat hunting?&quot; https://blog.talosintelligence.com/the-hunters-paradox-is-it-time-to-embrace-automated-threat-hunting/

  • Post #3632582

    EvidenceForge v1.10.0 brings major updates: - Far more realistic, configurable email activity. Also produces .eml files as artifacts. - Configs can be split into modular, reusable components, making it easy to define a consistent org/environment across scenarios. https://github.com/Cisco-Talos/EvidenceForge

  • Post #3485103

    If you haven&#39;t yet checked out #EvidenceForge, now is a great time. There have been big improvements in functionality, realism, and performance since the initial release. Create synthetic, correlated logs for training, testing, and more. https://github.com/Cisco-Talos/EvidenceForge

  • Post #889915

    I did NOT see this coming. 1. Kryptos is fully solved (!!!!) 2. There&amp;#39;s the threat of a lawsuit if the solution is made public https://www.nytimes.com/2025/10/16/science/kryptos-cia-solution-sanborn-auction.html?unlocked_article_code=1.t08.Fb2g.wov0l-NgQKoE&amp;amp;smid=url-share