Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
Odenton, MD
- Tweets 102,019
- Following 1,823
- Followers 150,628
- Likes 44,597
Pinned Tweet
Let's not mince words:
* If you don't support trans people, you're a bad human
* If you have to add caveats to your support (e.g. "as long as my kids don't see"), you're one of the worst kinds of human
* Trans deserve your *unconditional* support for their humanity
317
230
1,785
Jake Williams retweeted
Cisco Secure Firewall Management Center had an unauthenticated bug allowing root access. It's already being used to drop JSP shells, run Cyclops Blink, and detonate Qilin ransomware. Feds had until Sept 12 to patch. If you're still checking this off your list, you're not early.
#CyberSecurity #InfoSec #Cisco #ThreatIntel
1
1
2
778
In today's episode, I sit down with Ariful Huq from @exaforceAI and Patrick McKinney from @turingcom and talk about the AI-powered SOC. Patrick has been an Exaforce customer for years and brings real-world experience to the conversation.
1
6
17
3,811
We talk specifically about why having an underlying data model matters and why API alone won't cut it for many advanced detections. Jess will be back tomorrow for more security banter.
piped.video/8YwAdBow9eM
1
1,012
In this episode, me and Jess talk about an upcoming critical change to domains for M365 and Teams that are ironically going to disproportionately impact those with the best security the most. We conclude this is busy work that MSFT is causing. 1/3
2
5
9
5,763
Teams and Copilot (sadly somehow now M365) moving domains: computerworld.com/article/42…
1
1
702
We've re-recorded today's episode of Breach Please. Me and Jess talk about the newly extra relevant EU Cyber Resiliency Act (CRA) vulnerability reporting requirements. Even if you aren't an EU company, just like with GDPR, you may be covered. 1/2
1
2
10
4,201
The audio was garbage through a lot of it the original episode. I recorded on the Mac (an obvious mistake). Given the importance of this, we didn't want to sit on it. This is honestly a better episode. 2/2
Episode link: piped.video/0EFD2kDJUlo
4
935
Are you at @BlueTeamCon and working on something innovative you want the world to know about?
I'll be around today and tomorrow with my DJI and mics and would love to grab a few minutes with you for a future episode of Breach Please.
6
4,310
Sure does feel like OpenAI, a company that for obvious legal reasons needs to know about data provenance, would KNOW whether "de-identified data derived from their usage" was accessed.
OpenAI needs a much better explanation here.
OpenAI’s official statement regarding their interactions with Tristan and Levent:
“We recognize the priority of their work on forced Euler”
“no specific user data was accessed in order to solve this problem”
“we cannot rule out that de-identified data derived from their usage of our products helped improve our models”
5
4
40
5,234
We are nowhere near AGI.
I challenge ANYONE claiming such to connect their bank account and credit cards to whatever model they claim to have AGI and let me make some simple requests. With true AGI, you won't need human in the loop approval and it will act within your desires.
4
1
36
5,053
Jake Williams retweeted
On the topic of whether anyone in infosec could predict that an agent would break out of a sandbox and cause damage to external systems pre-OpenAI / Hugging Face:
20
17
160
11,579
In today's Breach Please, me and Jess revisit the idea of detecting threat actors hiding in network devices to evade detection. This was inspired by a report from @sygnia_labs.
Real talk: how do YOU validate your network devices are free of malware?
1
1
11
4,237
Episode posted here:
piped.video/PsOQaj3xFy8
@sygnia_labs report here:
sygnia.co/blog/fire-ant-a-de…
4
537