tlansec

In the DC-area? You'd be hard-pressed to find a better use of your time than to attend #FTSCon on 🗓️ October 21 in Arlington VA. It's packed with info on the latest security tools 🔧 and 🎯 insights from incident response #threatintel #memoryforensics

.@Volexity recently released GoResolver v1.4, bringing significant updates to our #opensource tool for recovering symbol data from obfuscated Go binaries. This release is available on GitHub: github.com/volexity/GoRes… [1/8]

Marcus Aurelius wrote this over 1800 years ago: "the secret to peace is 10xing your productivity with AI agents and custom Claude skills. you must escape the permanent underclass. buy my course"

Quick update. I am now with @Volexity :) super excited! Last few months were not the easiest but thankfully I have great friends in the field and was able to stay afloat and find the right place. I got lucky in this current job market. Back to reversing malware and drifting :)

@AnthropicAI it’s only Claude if it’s distilled in the Silicon Valley region of California 😤

@sempersecurus What happened?

Goodbye Maltego. It's been nice knowing you

Last month, I was generating 15k LOC per day with Claude Code. Once I discovered the Ralph Wiggum loop, my productivity shot up 10x. This week I finally setup Gas Town and I’m generating 1M LOC per day. At this rate, I’m mere days away from completing my Minesweeper clone.

Hello, I am exploring new opportunities in the cybersecurity field. This past few years, I mostly tracked infrastructure (APT mostly, but sometime cybercrime). If you are looking for someone to help you make sens of the cybersecurity landscape, please reach out !

I'm happy to introduce the official YARA language server for Visual Studio Code. virustotal.github.io/yara-x/blog/in… Many thanks to Albert Tikaiev for putting the first stone in this initative (github.com/prosperritty)

UAC-0001 (aka #APT28 or #FancyBear) exploits CVE-2026-21509 to target Ukraine and EU with COVENANT framework. Details (UA only): cert.gov.ua/article/6287250

san francisco was just called san fran until 1991 when cisco systems paid the city 47 billion dollars to append cisco to its name. the inhabitants are very touchy about people using the original name now, for legal reasons. it's a violation of contract law

I'm the VP of AI at Apple. I've been here since 2011. I watched Siri launch. It was revolutionary. For about six months. Then Google Assistant came out. Then Alexa. Then ChatGPT. We kept saying we were "focused on privacy." Privacy is what you say when you're losing. Three years ago the board asked about our AI strategy. I showed them a slide that said "On-Device Intelligence." They nodded. They didn't know what it meant. Neither did I. But it had a picture of a neural network. Neural networks look impressive. Even when they don't work. Last year someone asked Siri to set a timer. It opened a Wikipedia article about timers. Tim saw the meme. He didn't laugh. He scheduled a "strategic offsite." Offsites are where we go to admit failure privately. I presented three options. Option 1: Build our own LLM. That would take four years. We don't have four years. Option 2: Buy a startup. We looked at twelve. They all wanted $40 billion. For teams of nine people. Who would leave after the acquisition. Option 3: Call Google. The room went quiet. Google is the enemy. We've spent fifteen years pretending we're better than Google. Our entire brand is "not Google." But Google has TPUs. We don't. Google has Gemini. We have Siri. Siri still can't reliably add items to a grocery list. I called Sundar. He picked up on the first ring. He'd been waiting. They all wait. Eventually everyone calls Google. I asked for TPU access. He said yes. I asked for Gemini integration. He said yes. I asked how much. He said one billion dollars. I said that's a lot. He said "per year." I paused. He said "you don't really have a choice." He was smiling. I could hear it. We announced it as a "strategic partnership." Partnership means we're paying them. The press release said we're "enhancing Siri's capabilities." Enhancing means replacing. We said the new Siri arrives "late 2026." Late 2026 means 2027. Maybe 2028. Definitely not 2026. A reporter asked if this means Apple lost the AI race. Our comms team said we're "thoughtfully deliberate." That's not an answer. But it has enough syllables to sound like one. Internally, we're calling it "Project Humble Pie." Someone suggested "Project Brain Transplant." HR flagged that as "not brand-aligned." The engineers are relieved. They've been trying to make Siri work for years. Now they can blame Google. Blame is a renewable resource. Tim did a podcast. He said AI is "a profound technology." He's never used ChatGPT. I showed him once. He asked why it was typing so slowly. I said that's how it works. He said "Siri should be faster." I said "Siri will be Google." He said "don't say that publicly." I won't. Publicly, we're "leveraging industry partnerships." Leveraging means surrendering. But with dignity. We still have the best hardware. We still have the ecosystem. We still have the brand. We just don't have AI. So we're renting it. From the company we've mocked for two decades. The one billion dollars is a licensing fee. The real cost is the narrative. We were the innovators. Now we're the integrators. But the stock is up 3%. Wall Street doesn't care about innovation. Wall Street cares about not falling behind. We're not falling behind anymore. We're being carried. By Google. For one billion dollars a year. I'll present this as a win at the next all-hands. Wins are whatever you frame them as. The graph will go up and to the right. It always does. As long as you pick the right metric.

If 21 Savage was your security engineering lecturer 😂

Fortinet CVE-2026-24858.. is this even real life anymore? ”An attacker’s valid FortiCloud session, tied to their own device, gets accepted as legitimate for other users’ devices.”

Today’s Russian papers on Greenland: “Europe’s at a total loss. It’s a pleasure to watch.” Government paper: “Europe doesn’t need the American greatness Trump is promoting…the Old World's keen to keep Greenland for itself, even at the risk of Nato’s collapse.” #ReadingRussia

🚨NEW: Microsoft is renaming all their products GitHub —> CopilotHub LinkedIn —> Copilot Unemployed Xbox —> XCopilot Teams —> CopilotSkype Azure —> CopilotCloud OneDrive —> CopilotDeleteurfiles Edge —> CopilotExplorer VSCode —> CopilotCursor Bing —> Copilot4cucks Defender —> CopilotNoViruses Intune —> CopilotMalware Windows —> CopilOS Authenticator —> CopiletMeIn Bethesda —> CopilotSkyrim Activision —> Copilot of Duty Task Manager —> CopilotDavePlummerWroteTaksManager Powershell —> CopilotNotBash Hyper-V —> Copilotrash WSL —> Copilubuntu Copilot —> CopilotCopilot

Microsoft is so fucking stupid. Microsoft renamed Microsoft Office to Microsoft 365 Copilot App I'm not joking

It's cooking ... - complete rewrite of Loki in Rust - uses yara-x instead of yara - uses YARA-Forge as signature set - improved UX

.@Volexity Volcano Server & Volcano One v25.12.18 adds 300+ YARA rules, full parsing of Windows prefetch and Linux cron jobs, inline syscall hooking detection, and 5-level page table support. [1/3]

This is not a real company

🚨#100DaysofYARA lives!! 2 time reigning champ @RustyNoob619 has kindly offered to take the helm for this community effort! Give the homie a follow 👊 Check the repo to contribute: github.com/100DaysofYARA And gear up for Jan 1 when #100DaysofYARA will kick off!