Reposted by Mll
Just saw an extended version
November 20, 2025 at 11:26 PM
Just saw an extended version
Reposted by Mll
There's a "new operational model that's neither traditional cyber attack nor conventional warfare," @Amazon Chief Security Officer Steve Schmidt told me via @theregister.com. "The targeting data collected through cyber means flows directly into kinetic decision making."
Countries use cyber targeting to plan strikes: Amazon CSO
interview: And companies are getting caught in the crossfire
www.theregister.com
November 19, 2025 at 7:10 PM
There's a "new operational model that's neither traditional cyber attack nor conventional warfare," @Amazon Chief Security Officer Steve Schmidt told me via @theregister.com. "The targeting data collected through cyber means flows directly into kinetic decision making."
Reposted by Mll
On the heels of @dlshad.net and @davidmagnotti.bsky.social’s presentation at #CYBERWARCON, happy to share the associated AWS Security blog post (with IOCs) aws.amazon.com/blogs/securi...
New Amazon Threat Intelligence findings: Nation-state actors bridging cyber and kinetic warfare | Amazon Web Services
The new threat landscape The line between cyber warfare and traditional kinetic operations is rapidly blurring. Recent investigations by Amazon threat intelligence teams have uncovered a new trend tha...
aws.amazon.com
November 19, 2025 at 7:17 PM
On the heels of @dlshad.net and @davidmagnotti.bsky.social’s presentation at #CYBERWARCON, happy to share the associated AWS Security blog post (with IOCs) aws.amazon.com/blogs/securi...
Reposted by Mll
AWS dug through its honeypot data and confirmed that CVE-2025-5777 (Cisco ISE RCE) and CVE-2025-5777 (memory leak in Citrix NetScaler) were exploited as zero-days before their patches.
Nothing new here except the confirmation that an APT was behind the attacks
aws.amazon.com/blogs/securi...
Nothing new here except the confirmation that an APT was behind the attacks
aws.amazon.com/blogs/securi...
Amazon discovers APT exploiting Cisco and Citrix zero-days | Amazon Web Services
The Amazon threat intelligence team has identified an advanced threat actor exploiting previously undisclosed zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix systems. The ca...
aws.amazon.com
November 13, 2025 at 10:13 AM
AWS dug through its honeypot data and confirmed that CVE-2025-5777 (Cisco ISE RCE) and CVE-2025-5777 (memory leak in Citrix NetScaler) were exploited as zero-days before their patches.
Nothing new here except the confirmation that an APT was behind the attacks
aws.amazon.com/blogs/securi...
Nothing new here except the confirmation that an APT was behind the attacks
aws.amazon.com/blogs/securi...
Reposted by Mll
Meet our speaker David Magnotti!
He leads development of cyber threat intel. systems helping protect AWS customers from malware + more. He will be joining Dlshad Othman in their talk, "Ping First, Boom Second", to discuss Iranian cyber-threats Imperial Kitten and Muddy Water.
www.cyberwarcon.com
He leads development of cyber threat intel. systems helping protect AWS customers from malware + more. He will be joining Dlshad Othman in their talk, "Ping First, Boom Second", to discuss Iranian cyber-threats Imperial Kitten and Muddy Water.
www.cyberwarcon.com
October 24, 2025 at 12:52 PM
Meet our speaker David Magnotti!
He leads development of cyber threat intel. systems helping protect AWS customers from malware + more. He will be joining Dlshad Othman in their talk, "Ping First, Boom Second", to discuss Iranian cyber-threats Imperial Kitten and Muddy Water.
www.cyberwarcon.com
He leads development of cyber threat intel. systems helping protect AWS customers from malware + more. He will be joining Dlshad Othman in their talk, "Ping First, Boom Second", to discuss Iranian cyber-threats Imperial Kitten and Muddy Water.
www.cyberwarcon.com
Reposted by Mll
Interesting research from Hidden Layer on a novel way to bypass AI LLM’s security guardrails.
Looks similar to other security bypasses we’ve seen in the past, but much more comprehensive.
Looks similar to other security bypasses we’ve seen in the past, but much more comprehensive.
Novel Universal Bypass for All Major LLMs
HiddenLayer’s latest research uncovers a universal prompt injection bypass impacting GPT-4, Claude, Gemini, and more, exposing major LLM security gaps.
hiddenlayer.com
April 27, 2025 at 11:47 AM
Interesting research from Hidden Layer on a novel way to bypass AI LLM’s security guardrails.
Looks similar to other security bypasses we’ve seen in the past, but much more comprehensive.
Looks similar to other security bypasses we’ve seen in the past, but much more comprehensive.
Reposted by Mll
Yall are beyond not ready about the shit we're cooking up with @censys.bsky.social and @greynoise.io powers combined
censys.com/blog/hunting...
censys.com/blog/hunting...
Hunting Botnets With CursorAI, GreyNoise, Censys, and Censeye
Threat hunting is made easier and simpler by combining the power of Censys, GreyNoise, CursorAI, and Censeye.
censys.com
April 21, 2025 at 7:12 PM
Yall are beyond not ready about the shit we're cooking up with @censys.bsky.social and @greynoise.io powers combined
censys.com/blog/hunting...
censys.com/blog/hunting...
Reposted by Mll
Only a week to go before we welcome the legendary Troy Hunt to speak at the @blavatnikschool.bsky.social in the Uni of Oxford!
The world’s leading authority on data breaches
The sign up is here for in person (with drinks & nibbles afterwards) or online (byob 😂)
www.bsg.ox.ac.uk/events/lesso...
The world’s leading authority on data breaches
The sign up is here for in person (with drinks & nibbles afterwards) or online (byob 😂)
www.bsg.ox.ac.uk/events/lesso...
March 19, 2025 at 5:29 PM
Only a week to go before we welcome the legendary Troy Hunt to speak at the @blavatnikschool.bsky.social in the Uni of Oxford!
The world’s leading authority on data breaches
The sign up is here for in person (with drinks & nibbles afterwards) or online (byob 😂)
www.bsg.ox.ac.uk/events/lesso...
The world’s leading authority on data breaches
The sign up is here for in person (with drinks & nibbles afterwards) or online (byob 😂)
www.bsg.ox.ac.uk/events/lesso...
Reposted by Mll
This is the most relevant article to NIH and research cuts I’ve seen.
Imagine if this was today , how many people would be saying “Why are we studying Gila Monsters and their impact on diabetes ? That’s wasted money !”
globalnews.ca/news/9793403...
Imagine if this was today , how many people would be saying “Why are we studying Gila Monsters and their impact on diabetes ? That’s wasted money !”
globalnews.ca/news/9793403...
How a Canadian scientist and a venomous lizard helped pave the way for Ozempic - National | Globalnews.ca
In 1984, Dr. Daniel Drucker, an endocrinologist from the University of Toronto, discovered a hormone that helped pave the way for popular diabetes drugs such as Ozempic.
globalnews.ca
February 9, 2025 at 9:58 PM
This is the most relevant article to NIH and research cuts I’ve seen.
Imagine if this was today , how many people would be saying “Why are we studying Gila Monsters and their impact on diabetes ? That’s wasted money !”
globalnews.ca/news/9793403...
Imagine if this was today , how many people would be saying “Why are we studying Gila Monsters and their impact on diabetes ? That’s wasted money !”
globalnews.ca/news/9793403...
Reposted by Mll
I’ve created a Starter Pack around cyber threat intelligence to make it easier to find that community here on Bluesky. Let me know of folks I missed, as I’m sure there are many! go.bsky.app/TxQYHap
November 9, 2024 at 11:08 PM
I’ve created a Starter Pack around cyber threat intelligence to make it easier to find that community here on Bluesky. Let me know of folks I missed, as I’m sure there are many! go.bsky.app/TxQYHap
Reposted by Mll
@xbow.com has been busy in the first few weeks of 2025 – our agent has autonomously found 106 vulnerabilities in OSS projects, and we've reported 72 so far! Amazing work by @nicowaisman.bsky.social and the security team triaging these and getting them into the disclosure->fix pipeline!
February 6, 2025 at 6:55 PM
@xbow.com has been busy in the first few weeks of 2025 – our agent has autonomously found 106 vulnerabilities in OSS projects, and we've reported 72 so far! Amazing work by @nicowaisman.bsky.social and the security team triaging these and getting them into the disclosure->fix pipeline!
Reposted by Mll
We sat down with Nicholas Carlini and talked about his work attacking the mathematical underpinnings of LLMs, including remote oracle attacks that extract weights from closed foundation models. Crypto-type exploits that are not about cryptography:
securitycryptographywhatever.com/2025/01/28/c...
securitycryptographywhatever.com/2025/01/28/c...
Cryptanalyzing LLMs with Nicholas Carlini
‘Let us model our large language model as a hash function—’ Sold. Our special guest Nicholas Carlini joins us to discuss differential cryptanalysis on LLMs...
securitycryptographywhatever.com
January 28, 2025 at 6:34 PM
We sat down with Nicholas Carlini and talked about his work attacking the mathematical underpinnings of LLMs, including remote oracle attacks that extract weights from closed foundation models. Crypto-type exploits that are not about cryptography:
securitycryptographywhatever.com/2025/01/28/c...
securitycryptographywhatever.com/2025/01/28/c...
Reposted by Mll
For the #threatintel crowd, I’m hiring two cyber threat intel engineers for AWS Threat Intelligence! US-based, full-time from offices in the DC area, Austin, and Seattle. All backgrounds encouraged to apply. Can’t beat the scope or impact of the work. Let me know if you have questions! 👇
Security Intelligence Engineer, AWS Threat Intelligence
We are open to hiring candidates to work out of one of the following locations:Annapolis Junction, MD, USA | Arlington, VA, USA | Austin, TX, USA | Herndon, VA, USA | New York, NY, USA | Seattle, WA, ...
amazon.jobs
January 7, 2025 at 1:56 AM
For the #threatintel crowd, I’m hiring two cyber threat intel engineers for AWS Threat Intelligence! US-based, full-time from offices in the DC area, Austin, and Seattle. All backgrounds encouraged to apply. Can’t beat the scope or impact of the work. Let me know if you have questions! 👇