People sometimes ask me how to build a malware analysis VM/lab. I cover it in my book Evasive Malware - grab this 40+ page chapter for free here (hosted on my personal blog):

evasivemalware.com/EvasiveMalwa...

Thanks to @nostarchpress.bsky.social & @nostarch.bsky.social for letting me share it! 🤓

lol, lmao www.crowdstrike.com/en-us/blog/c...

(I actually think this is a good idea and have complained about actor naming for years but both these companies are #1 in “attribution is marketing” so it is very funny to see)

We've received so many excellent workshop CFP responses for DEATHCon 2025, and we'll be sending acceptance messages by tomorrow, June 1st! After workshop leaders confirm acceptance, we'll be listing the workshops on deathcon.io/workshops.html over the next few weeks. Thanks all!

Thanks to all the organizers of #Botconf for an amazing conference this year! I got to see many old friends and meet a lot of new ones 😀

And thanks to everyone who attended my talk and workshop on malware evasion techniques 🤓

Until next year!

🤓 I will be teaching my training at BlackHat USA on Practical GenAI for CTI.

This is a heavy hands-on training where you will learn advanced techniques to build your own AI CTI arsenal for real-world use cases, not theory!

Check the quick overview of the modules 👇

1️⃣ - Intro & Setup
Get your […]

It's hard to imagine that the audience for "Evasive Malware" is big enough to earn out its advance, but it's much better than I expected.

Last week, after reading a paragraph, I doodled in the margin "What about <x>..." and then looked into it.

22yo vulnerability now reported to MSRC.