JC Praud

CISSP, CCSP, TAISE, Senior Information Security Consultant.
#InfoSec #RiskManagement #CyberSecurity
Mastodon link below

[JC Praud @jcpraud]

@DataChaz Consult a lawyer, first.
Your account will probably be credited at first, then the operation will be rolled back. Then legal hell begins.

[JC Praud @jcpraud]

@NousResearch @aijoey But! I updated all my instances 30 minutes ago!
Maybe I should create cronjobs running every 5 minutes so they can update themselves autonomously? 😁

[JC Praud @jcpraud]

@D4b1d4b @nashtags C'est faux : hier, j'ai vu des gens se baigner dans le Lac. C'est pas étonnant que même Guillaume 2 et le adolf n'aient pas osé envahir la Suisse ! 😅

[JC Praud @jcpraud]

@__phiphou__ Vivement les prochaines versions de modèles d'IA qui auront ces réponses dans leur corpus d'apprentissage 😁

[Philippe LACOUR @__phiphou__]

Ça n'est pas mon idée mais l'ayant vu passer ici, j'ai voulu vérifier.

Dans l'ordre : GPT 5.2, Gemini 3 Flash, Copilot et Le Chat.

[JC Praud @jcpraud]

@kaggle Boulder Dash.
These days, it's my benchmark to evaluate coding agents: make them build a Boulder Dash clone. Many of them fail miserably, sometimes in a really creative manner :)
(must find time to publish all this on my Github space)

[JC Praud @jcpraud]

@the_yellow_fall Wondering if this tag will be used by human authors to prevent their content to be used for AI training...

[Gray Hats @the_yellow_fall]

Google proposes the ai-disclosure tag in Jan 2026. Discover how this new Chrome standard will label AI-generated text across the web.

#AItransparency #GoogleChrome #EUAIAct #GenerativeAI #WebStandard #InfoSec2026 #SyntheticContent #AIDisclosure #TechNews
https://t.co/aJNaxlTQ6t

[Thomas Roccia 🤘 @fr0gger_]

From a strict malware analysis perspective, it does not matter! You still reverse it, understand what it does, and write detections wether it is AI or not.

However from a threat intelligence perspective, it does matter.

Threat actors deploy malware faster, coding style or code DNA becomes harder to identify between groups and variants can shipped quickly. It is also interesting to see how the operating methods evolve and what will be the consequences; shorter lived tooling, new or never seen obfuscation mechanisms, faster iteration loops, more automation in compromised env....

In that situation the scale, the TTPs and the weakening of attribution and clustering are the most important aspect to understand and to be aware of.

It is not really about AI generated code, it is more about how attackers take advantage of it and how we can adapt and prepare for the next.

BTW, more variants also mean faster detection turnover and higher maintenance for defenders 🙃

[ANSSI @ANSSI_FR]

🤖 L’ANSSI et le @BSI_Bund publient leurs recommandations de sécurité sur les assistants de programmation basés sur l’#IA.

S'ils présentent des avantages, ces produits peuvent aussi induire des risques.

🔗 https://t.co/MCUSiN1RrQ

[Black Hills Information Security @BHinfoSecurity]

Day 279 of 366 Days of Cyber!

Learn OWASTP top 10 with Antisyphon and Secure Ideas -- https://t.co/rLDHbBGEcE

If you'd like more helpful educational content, check out the Infosec Survival Guide: Second Volume -- https://t.co/eK8zlhe0ch

[ThreatMon @MonThreat]

🕵‍Top 10 X Accounts for Dark Web Information 🕵‍

Stay ahead of the latest dark web trends and threats by following these top X accounts! Whether you're a cybersecurity professional or just interested in the dark web, these accounts provide invaluable insights and updates.

@vxunderground: The largest collection of malware source codes, samples, and papers.
@Gi7w0rm: Detailed threat intelligence and dark web findings.
@MonThreat: Updates and analyses of dark web threats and vulnerabilities.
@DailyDarkWeb: Daily updates on dark web activities, leaks, and breaches.
@campuscodi: Comprehensive coverage of dark web threats and cybercrime news.
@TheDFIRReport: In-depth reports on digital forensics and incident response.
@DarkWebInformer: Monitoring and reporting on dark web activities and trends.
@GossiTheDog: Timely updates on cybersecurity issues, including dark web threats.
@demonslay335: Detailed information on malware and ransomware from the dark web.
@TMRansomMonitor: Tracks ransomware activities and dark web interactions.

Follow these accounts to keep your #cybersecurity knowledge sharp and stay informed about the dark web!

#DarkWeb #InfoSec #Ransomware #HackerNews #Malware #DarkNet #DeepWeb #DataBreach #ThreatIntelligence #ThreatMon

[JC Praud @jcpraud]

@HaboubiAnis Il va faire feu de tout bois avant de se faire dessouder par ses "confrères"...
LockbitSupp en ce moment :
(#Art by Olly Jeavons)

[JC Praud @jcpraud]

I guess #LockbitSupp will be targeted by his competitors and affiliates, now.

Death sentence by proxy.

https://t.co/Qcvin6QcgN

"#Khoroshev got in touch with law enforcement—but was trying to “stifle his competition.”

"[g]ive me the names of my enemies"

[JC Praud @jcpraud]

Bon, ben je sais pas pour vous, mais moi je vais reprendre deux fois des moules ce soir !
Bravo à notre Gendarmerie Nationale et à nos alliés ! 🙏
And thanks for all the trolling 🤣
#cronos #lockbit

[JC Praud @jcpraud]

@basaranalper @LiveOverflow "If by any chance you saw this CVE listed on my LinkedIn profile, please know my account was hacked. Everything is in order, now." 🤣

[LiveOverflow 🔴 @LiveOverflow]

The world just became a little bit safer 🥰
thanks to all the hackers and researchers reporting vulnerabilities
https://t.co/cysmKl1gn0

[JC Praud @jcpraud]

CCSP ✅ 🙂

[Thomas Roccia 🤘 @fr0gger_]

If you missed (like me) @Botconf! The talks are available on the Youtube channel 🤩 #Botconf #cybersecurity #infosec #ThreatIntelligence

https://t.co/qIaRQ4CCSp

[JC Praud @jcpraud]

@ANSSI_FR Hmmm... L'ANSSI utilise Discord ? What could possibly go wrong?