David J. Bianco
@davidjbianco
Threat Hunting, CTI, incident detection & response. SANS instructor. Special interest in helping newbies get started. Also happy to talk about other geeky topics. He/Him.
HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models. Another aspect for your IR plans. huggingface.co/blog/securit...
The video for my Antisysphon #ThreatHunting Summit keynote is now up. "The Hunter's Paradox: Is it Time to Embrace Automated Threat Hunting?" www.youtube.com/live/GLgF-GO...
"Threat hunting is human-driven" and "AI threats require AI speed". How do you fit both of those into your threat hunting program? Well, I have some thoughts. Join me as I kick off the @antisyphontraining.bsky.social Threat Hunting Summit, a free virtual event on June 17th!
I don't normally promote vendor talks, but this one will have some very practical ways to apply #AI to solve real #cybersecurity challenges, including my own agentic #ThreatHunting assistant. www.ciscolive.com/emea/learn/s...
This is really cool research by one of my new teammates: examining the internal state of an #LLM can not only tell you what type of information it's processing, but is really good at detecting malicious or unsafe prompt injections. It's like fMRI for LLMs. www.linkedin.com/pulse/how-bu...
Like the infamous time when hackers deep-faked the cast of Game of Thrones (S1) into that episode of Friends. That was classic!
The video for my talk last month at the #Honeynet Project Workshop is now available. "Hi Fidelity != Hi Effort: Meet DECEIVE, the AI-backed SSH Honeypot" Thanks to the workshop organizers for having me! www.youtube.com/watch?v=uxbz...
"We are not the Gestapo! This is AMERICA, and in AMERICA, we speak ENGLISH! We are the SECRET STATE POLICE, people!"
I read the bill's text. It doesn't actually stop sharks from eating fish. Instead, sharks must yell "You been SHARKED!" before eating, hoping to embarrass them into changing behavior.
I'm honored to share this SANS Difference Makers Award with my #PEAK #ThreatHunting framework co-authors Dr. Ryan Fetterman and @letswastetime.bsky.social. Thank you to everyone who voted for us and also to everyone using PEAK around the world!