Профиль

Movie pitch: a Terminator reboot, but the difference is Cyberdyne Systems publishes a humblebrag press release about how Skynet broke containment.

EvidenceForge v1.13.0 is out this morning. If you're generating long scenarios with millions of network flows, you're going to need the fixes. github.com/Cisco-Talos/...

GitHub - Cisco-Talos/EvidenceForge: Generate realistic synthetic security logs for cybersecurity threat hunting training and researchGenerate realistic synthetic security logs for cybersecurity threat hunting training and research - Cisco-Talos/EvidenceForgegithub.com

I even use my middle initial for disambiguation. 😀

Neat work from my previous team. New open weight #SLM Antares optimized not for #vulnerability discovery à la #Mythos but for vuln *localization* (find instances of a known vuln in your code) which is what orgs really need. The 3B param model is on par with GPT-5.5. blogs.cisco.com/ai/introduci...

Introducing Antares: Highly Efficient Open Weight AI Models for Vulnerability LocalizationToday, Cisco is introducing Antares, a family of security small language models (SLMs) purpose-built for one of the hardest, most time-consuming and expensive problems in security: pinpointing where…blogs.cisco.com

HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models. Another aspect for your IR plans. huggingface.co/blog/securit...

Nothing drives views like a post saying how wrong you were.

For years, I've been very clear: "You can't automate threat hunting. It is an essentially human process." Now I'm not so sure. Read why I've reconsidered my stance in my latest post: "The Hunter's Paradox: Is it time to embrace automated threat hunting?" blog.talosintelligence.com/the-hunters-...

The Hunter's Paradox: Is it time to embrace automated threat hunting?Humans can no longer keep up with the volume and velocity of security data on their own, but AI can't be fully trusted. David discusses the merits of both and muses on what the future might look like.blog.talosintelligence.com

My local Nextdoor is apparently very worried about Russian interference in the 2026 US elections. The good news is that there is very little chance of that happening. The bad news is that the reason the Russians won't interfere is because we're doing a good enough job of it all by ourselves.

Some recent(ish) updates to CFPlease.io: - Shareable links to CFPs and events - Submit your own events to the queue (moderation req'd) - A public API for searching and filtering Looking for a place to present your cybersecurity research, or just a cool conference to attend? Give it a try!

Look, I don't know the truth. All I'm saying is that delaying a Mitch McConnell announcement until the August 3rd deadline would be a fitting tribute to his legacy.

EvidenceForge v1.10.0 brings major updates: - Far more realistic, configurable email activity. Also produces .eml files as artifacts. - Configs can be split into modular, reusable components, making it easy to define a consistent org/environment across scenarios. github.com/Cisco-Talos/...

GitHub - Cisco-Talos/EvidenceForge: Generate realistic synthetic security logs for cybersecurity threat hunting training and researchGenerate realistic synthetic security logs for cybersecurity threat hunting training and research - Cisco-Talos/EvidenceForgegithub.com

If you haven't yet checked out #EvidenceForge, now is a great time. There have been big improvements in functionality, realism, and performance since the initial release. Create synthetic, correlated logs for training, testing, and more. github.com/Cisco-Talos/...

GitHub - Cisco-Talos/EvidenceForge: Generate realistic synthetic security logs for cybersecurity threat hunting training and researchGenerate realistic synthetic security logs for cybersecurity threat hunting training and research - Cisco-Talos/EvidenceForgegithub.com

Finding security CFPs and events scattered across the web is a pain, so I built something to fix it. CFPlease.io crawls the web for upcoming CFPs and events, so you can search and filter by topic, format, or geography. A free service for the security community. cfplease.io #infosec #cybersecurity

The video for my Antisysphon #ThreatHunting Summit keynote is now up. "The Hunter's Paradox: Is it Time to Embrace Automated Threat Hunting?" www.youtube.com/live/GLgF-GO...

*Is* it time to embrace automated #ThreatHunting? Maybe, maybe not. You'll have to come (virtually) to my free talk tomorrow to find out!

I'm David, and I also approve this message.

Have they tried using '/goal' yet?

I did a podcast talking about my newest open source project, EvidenceForge. Realistic synthetic log data turned out to be a lot more interesting of a project than I expected.

Saw #1776 at our local community theater last night. One of my favorite musicals, and this was a banger. Wok up this morning ready to vote for Independency!

If you think you have a "supply chain", you're wrong. What you actually have is a "supply web". Changing your mental model can help you gauge supply web risks more accurately.