PandaRE 🐼 🇺🇦

Threat Researcher | Founder @MalbearLabs | Malware Addict

[Threat Hunting Labs @ThruntingLabs]

DEATHCon 2026 is just around the corner, and we're excited to be part of it!

Threat Hunting Labs will be the provider of the DEATHCon 2026 CTF for this year, alongside the CTF challenges run by workshop leaders.

Looking forward to seeing everyone put their threat hunting and detection skills to the test on November 13–14!

Tickets are still available and the workshops are fantastic!! Grab your ticket, learn a ton and support this amazing community effort -> https://t.co/OwQ8tu3OzA

[PandaRE 🐼 🇺🇦 @PandaRE__]

Happy Veterans Day!

Some of the best defenders I've worked with learned the job in uniform first, thank you for all of it! 🇺🇸

[PandaRE 🐼 🇺🇦 @PandaRE__]

@clergyguider same, CheMax back in the days

[PandaRE 🐼 🇺🇦 @PandaRE__]

It’s been 16 years since I last played AoE 😩😩😩

[PandaRE 🐼 🇺🇦 @PandaRE__]

@banthisguy9349 you never told me!

[PandaRE 🐼 🇺🇦 @PandaRE__]

My feed is full of Nvidia CEO affair with a spy. I thought it was a joke?

[PandaRE 🐼 🇺🇦 @PandaRE__]

@clergyguider

[PandaRE 🐼 🇺🇦 @PandaRE__]

Thinking to get a PS5 just for GTA 6. Yes or no?

[PandaRE 🐼 🇺🇦 @PandaRE__]

@TechMacGyver941 😂😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

One of the best Duo features that I can actually put to use

[PandaRE 🐼 🇺🇦 @PandaRE__]

@CE2Wells let's see

[PandaRE 🐼 🇺🇦 @PandaRE__]

@mbur82 I don't :c

[PandaRE 🐼 🇺🇦 @PandaRE__]

@IceSolst

[PandaRE 🐼 🇺🇦 @PandaRE__]

@UrbanF0X @dozercat31 ok, maybe not a Pro 😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

@sky31337 Ohhhhh, thank you so much 💕🥹

[PandaRE 🐼 🇺🇦 @PandaRE__]

@Kostastsale You have an incredible talent 😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

@OliviaGalluccii @netflix Congratulations!!! 💕

[PandaRE 🐼 🇺🇦 @PandaRE__]

someone texted me this morning: good morning!
me: 80% asleep: боброе утро
them: ???
me waking up: oh no, that was russian. oops :c I wished them a beaver 🦫 morning

Why is my brain on auto-russian in the morning 💀

[PandaRE 🐼 🇺🇦 @PandaRE__]

@matthew_d_green Yeah, labs are probably not going to put "better at evading EDR" on a benchmark, I think they care more about the CVE finding headlines

[PandaRE 🐼 🇺🇦 @PandaRE__]

I keep seeing AI-assisted attacks. It's nothing novel or crazy, just noisy.

A human operator runs a recon command once and moves on. An AI will try anything possible, even if that means running the same recon command 400 times. You also start seeing the patterns, like echo markers wrapped around commands so the agent can parse its own output.

Good news for defenders: the basics still catch it, volume and behavior give it away.

I'm saying it for the 100th time: AI isn't making attackers smarter. It's making them louder and maybe a bit faster.

[PandaRE 🐼 🇺🇦 @PandaRE__]

@matthew_d_green If they are building AI that does intrusion work, stealth and evasion should already be part of it. An agent that finds a vuln but gets caught exploiting it isn't that useful, I think

[PandaRE 🐼 🇺🇦 @PandaRE__]

@peritumAI I know that Trend Micro detections went off but I don’t know if they were aware of the intrusion, considering it was two weeks… maybe not?

[PandaRE 🐼 🇺🇦 @PandaRE__]

New blog drop! 😊

Operation Snowball 🇨🇳

While sweeping open directories on @etugenio, I found a workspace of an autonomous AI intrusion harness. The TA used a jailbroken DeepSeek agent and ran two weeks of attacks against a European telecom provider:

https://t.co/rL7DcyPVu0

[PandaRE 🐼 🇺🇦 @PandaRE__]

@NetAskari Thank youuuu 🤗