Ryan Reeves

Grokking

[Ryan Reeves @reevesrs24]

@blackorbird Agenticmorphism

[Ryan Reeves @reevesrs24]

We have gone from Oligomorphic, to Polymorphic, to Metamorphic... and now to Agenticmorphic malware.

[Ryan Reeves @reevesrs24]

@techspence On and off now for about 6 months. Still a lot of issues to iron out

[Ryan Reeves @reevesrs24]

@C2IRIS @C2IRIS you going to Districtcon?

[Ryan Reeves @reevesrs24]

@C2IRIS High-confidence threat actor attribution will largely dismiss these static artifacts though. TTPs, code/infra reuse, working time zones and cui bono are higher fidelity than metadata and typos.

[Ryan Reeves @reevesrs24]

@C2IRIS The bar for developing critical 0-days is continually being raised. I would rather have foreign adversaries exploit n-days than 0-days. Technology has become more resilient because of security researchers. Would be interesting study to see where KEV list CVEs originated from

[Ryan Reeves @reevesrs24]

@C2IRIS Simply recompiling from x32 to x64 can be pretty effective in some cases

[Ryan Reeves @reevesrs24]

@polyfactual This works only if the implied probabilities are mispriced. If the 80-90 contract truly reflects the base rate, it is EV neutral. You still need informational or modeling edge.

[Ryan Reeves @reevesrs24]

Applies Leiden clustering with the Constant Potts Model (CPM) to detect communities of threat actors within noisy IOC networks

[Ryan Reeves @reevesrs24]

I've been developing an experimental platform for clustering IOCs to reduce fragmentation in threat actor naming conventions combining OPRF cryptographic primitives, roaring bitmaps and Leiden clustering

[Ryan Reeves @reevesrs24]

Weighted Tversky similarity for assigning edge weights between submitted IOC clusters

[Ryan Reeves @reevesrs24]

@nickvangilder Greater incentive to hack large companies coupled with larger attack surface

[Ryan Reeves @reevesrs24]

@ShitSecure Which fuzzer did you use?

[Ryan Reeves @reevesrs24]

@whokilleddb I think Outflank had a blog on this
https://t.co/h4MkJZabxS

[Ryan Reeves @reevesrs24]

@willcb New data is likely to be higher quality and more original now that LLMs can address most user queries, which will reduce the need for people to rehash existing information.

[Ryan Reeves @reevesrs24]

"Life imitates ChatGPT far more than ChatGPT imitates life" - Oscar Wilde, 2025