Drew

malware detection and analysis, hunting and gathering, threat research.
Views are my own.

[Josh Stroschein | The Cyber Yeti @jstrosch]

🎙️ Next Behind the Binary episode is now live!

In this episode, I'm joined by @__sethJenkins from @Google's Project Zero to discuss a recent zero-click exploit chain in the Pixel 9—groundbreaking research he co-authored with @natashenka.

We also dive into how AI features are rapidly changing the modern mobile attack surface.

🎧 https://t.co/Q5Fn7CM0EY

[Drew @bugfireIO]

@wbmmfq Interesting choice

[Drew @bugfireIO]

@j2k3k 100%

[Drew @bugfireIO]

@sec_hub93028 Wait so you’re saying there’s a switch that can be turned off? I need to look for that.

[Drew @bugfireIO]

@InvokeReversing Thanks!

[Drew @bugfireIO]

@HackingDave I think there will be a natural ebb and flow for all the models in the short-term especially that we just need to factor in

[Jai Minton @CyberRaiju]

Threat actors are impersonating real recruiters and sending bulk, tailored phishing emails by using ChatGPT, your public LinkedIn profiles, and a tool known as blinq.

More details: https://t.co/XdnxMB1bFq

[Stephen Sims @Steph3nSims]

I asked ChatGPT to create a graphic depicting Adversarial AI. 😂

[Drew @bugfireIO]

@Steph3nSims That is so unbelievably awesome....

[Drew @bugfireIO]

@sec_hub93028 More tokens! I can learn more using Claude than taking expensive training.

[Odyssey @odysseyml]

Meet our new friend, Starchild-1 ❤️

Starchild-1 is the first ever real-time multimodal world model.

A world model understands and simulates the world. Starchild-1 has learned to generate not just the visuals of the world, but the sounds of it too!

[Drew @bugfireIO]

@bbaskin @sublime_sec Hey I’m not verified so can I get a follow from you and then I’ll be able to DM you, thanks!

[Drew @bugfireIO]

@bbaskin @sublime_sec Thanks!

[Drew @bugfireIO]

@bbaskin @sublime_sec Thanks, Brian, understand. If there's any chance of providing a sanitized version later it would be outstanding! BTW - very good webinar you had earlier this week. Nice work over there!

[Josh Stroschein | The Cyber Yeti @jstrosch]

🤔 Can you truly dismantle what you don't know how to build...?

In my upcoming @BlackHatEvents 2-day training, we’re using modern LLVM pipelines to write the same obfuscation passes used by nation-states.

Once you see the "why" behind the transform, the "how" of the reversal becomes more apparent. Learn how compilers work effectively so you can too 😉

⏳ Early bird pricing ends May 22. Join me in Vegas:
🔗 https://t.co/FK0iAPdj1H

[Drew @bugfireIO]

@HackingDave @Binary_Defense I’m very impressed with the buildout and ingenuity here. With FP % declining, I’m curious what the false negatives in general are looking like now as well.

[Drew @bugfireIO]

This is an excellent and comprehensive deep dive into EDRs and how they work 👇

[DbgMan ^_^ @0XDbgMan]

Hi, a new blog (It’ll be the last)
https://t.co/3daHTUfN9O

[Drew @bugfireIO]

@Pir00t @cyb3rops planning was so 2025