Ilya

Threat Hunter

[Anthropic @AnthropicAI]

We're publishing our most detailed threat intelligence report to date.

It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them.

We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies.

These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve.

We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop.

Read the report: https://t.co/0EJUnYEgfz

[Nick Aleks @Nick_Aleks]

Awesome Drone Hacking - A list of awesome drone hacking tools and resources.
https://t.co/sLM3h5tt3R

#awesomelists #drone #hacking #cybersecurity #infosec

[Trellix Advanced Research Center @TrellixARC]

When building defense strategies, our team contributes to 3️⃣ key areas — intelligence gathering, analysis, and innovation & continuous improvement. See how we work across teams from the research phase to implementing practical customer solutions. https://t.co/6fFQymDoJv

[Trellix Advanced Research Center @TrellixARC]

👆@Ilya_Kol, @lekz86, James Murphy, and @LeandroNVelasco share their insights.

[Ilya @ilya_kol]

@markbaseggio @MicrosoftTeams 😂

[Nick Aleks @Nick_Aleks]

Free Black Hat GraphQL book giveaway! Retweet for your chance to win! #hacking #book #blackhatgraphql #giveaway

[Dolev Farhi @dolevfarhi]

That moment when you see the outcome of my GraphQL hacking journey with @Nick_Aleks and @nostarch

[Michael Katchen @mkatchen]

Given the news of SVB, I want to offer some reassurance to our clients: Wealthsimple doesn't have deposits or liabilities with SVB. You can learn more about the coverage we offer to keep your money safe here: https://t.co/ajp8lve1UW

[Nick Aleks @Nick_Aleks]

Just received my copy of Black Hat GraphQL and I couldn't be more proud! 📚🚀 This has been a labor of love, and I'm so grateful to finally hold it in my hands. Thank you to everyone who supported @dolevfarhi and I along the way! #GraphQL #hacking #cybersecurity #author

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft researchers investigated an attack where threat actors deployed malicious OAuth applications on compromised cloud tenants and installed a malicious inbound connector to use Exchange servers for spreading spam. Get details and protection guidance: https://t.co/jVM7GBQMVO

[GitHub Security @GitHubSecurity]

GitHub is investigating the Tweet published Wed, Aug. 3, 2022:
* No repositories were compromised
* Malicious code was posted to cloned repositories, not the repositories themselves
* The clones were quarantined and there was no evident compromise of GitHub or maintainer accounts

[Dolev Farhi @dolevfarhi]

Black Hat GraphQL is now available on Kobo, Apple Books, Kindle and more. Use the code PREORDER for a 25% discount on the early access version at https://t.co/sIrViWPkeg #GraphQL #security

[Tines @tines_hq]

No-code automation is a critical skill for anyone looking to streamline their security operations, and we hope this new guide will help you achieve that goal.
https://t.co/7IV41sVHQQ

#devsecops #secops #soar #NoCode #automation #cybersecuritytips #infosec

[Nick Aleks @Nick_Aleks]

https://t.co/uKSpoiFYiu
Excited to announce the official Black Hat GraphQL book is available for early access and pre-order!

[Wealthsimple @Wealthsimple]

"That seems dumb" said everyone, at first.

#WealthsimpleCrypto

[Wealthsimple @Wealthsimple]

FUD 😑

[Wealthsimple @Wealthsimple]

Probably nothing

[briankrebs @briankrebs]

Antivirus giant Norton 360 has installed a cryptocurrency mining program on users PCs, but says the service that enables the miner is opt-in. Users report miner is hard to remove. Customer reactions range from unease/disbelief to "dude, where's my crypto?" https://t.co/RJKZMfInSW

[Wealthsimple @Wealthsimple]

⚠️ There is a recruitment-related phishing scam targeting Wealthsimple and potential candidates. Read 👇 for more details: https://t.co/0QpH8iA856

[radare @radareorg]

Wanna learn about reverse engineering? @mytechnotalent cooked up this amazing training with > 180 lessons covering x86, x64, arm, arm64 with practical exercises using gdb and r2! https://t.co/7AkP5alxGP