PPaul

Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next. cfl.re/49BRUqW

Interesting paper. Can SOC analysts explain why they are triaging alerts the way they do? arxiv.org/abs/2604.22001 Make sure to look at References for other links you may find useful.

On Anthropic's Mythos Preview and Project Glasswing schneier.com/blog/archives/…

In 2021 I put together this slide deck on Detection Engineering and Detection & Response roles I re-read it today and honestly, it still holds up pretty well. I haven’t checked yet if it needs small updates, but the core ideas are still relevant. What changed since then: Detection Engineering is much more widely understood as an actual role now (finally). And I think most teams also learned that proprietary, opaque detection content won’t get you very far. Open and transparent rules win. #YARA #Sigma Elastic has been pushing this in a very good way, and Splunk has also moved a lot in the right direction with more transparency and open standards around detections. Slides (PDF): github.com/Neo23x0/Talks/… Related post on turning detection ideas into rules: cyb3rops.medium.com/capturing-dete…

AI Found Twelve New Vulnerabilities in OpenSSL schneier.com/blog/archives/…

🚨🚨🚨🇨🇳 Actors leveraging BRICKSTORM🚨🚨🚨 cloud.google.com/blog/topics/th…

I created the first draft of a website for the EDR telemetry project to help people quickly compare vendor telemetry visibility. What do you think about it? Are there any specific features you want to see for the website? Built with ChatGPT 4o with canvas (wanted to test it out😂) EDR Telemetry project 🔗: github.com/tsale/EDR-Tele…

Want to take back your feed on Twitter and start with a good-enough mute list? Give it a try to mute.life/?ref=levels.io courtesy of @levelsio

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n

Today we're excited to introduce Devin, the first AI software engineer. Devin is the new state-of-the-art on the SWE-Bench coding benchmark, has successfully passed practical engineering interviews from leading AI companies, and has even completed real jobs on Upwork. Devin is an autonomous agent that solves engineering tasks through the use of its own shell, code editor, and web browser. When evaluated on the SWE-Bench benchmark, which asks an AI to resolve GitHub issues found in real-world open-source projects, Devin correctly resolves 13.86% of the issues unassisted, far exceeding the previous state-of-the-art model performance of 1.96% unassisted and 4.80% assisted. Check out what Devin can do in the thread below.

New PRNG

I felt this one...

Amazon has an incredible writing culture. Here are 7 writing tips that anyone can use: 1. Use less words 2. Replace adjectives with data 3. Eliminate weasel words 4. "So what" 5. 4 answers More in thread 👇

Hello GPT-4

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:

Mistakes were made

Nearly 1,000 Burp Collaborator servers listed on @shodanhq 🗺️ My advice: do NOT expose the polling ports

CVE-2022-42889 detection: try to search your code for any of the strings: StringLookupFactory interpolatorStringLookup createInterpolator StringSubstitutor

TIL Windows can expand it's main partition live, while the OS is running. Very helpful for VMs, and a learning point for app devs that underlying partition size is not a constant

Big fan of Mandiant FlareVM for a great collection of tools for malware analysis and incident response - github.com/mandiant/flare…