Sameh Sabry

VP of Solutions Architecture, iMETA @HalcyonAI | Cybersecurity | Speaker | Seen on TV | Music, coffee, travel & food on loop.

[Sameh Sabry @samehysabry]

Explaining how @HalcyonAi effectively stops ransomware, prevents data exfiltration, and decrypts encrypted files.
https://t.co/b6dPlpbtsj
#ransomware #AI

[HalcyonAI @HalcyonAi]

Ransomware doesn’t start with encryption.

It starts quietly.

A login.
A remote session.
A tool you already trust.

By the time it’s obvious, it’s already in motion.

In March, we stopped 99.9% of attacks before impact

The latest ROC STAR Report breaks down how.

And more importantly — where it actually matters. https://t.co/sAnzqo25tc

[Sameh Sabry @samehysabry]

EDR is assumed. Ransomware operators plan around it. Modern attacks start with defense evasion, not encryption—sensors are impaired, telemetry is suppressed, and activity looks normal. By the time alerts fire, attackers are already inside and ready to encrypt. https://t.co/W8wCeuS8Sj

[Scuderia Ferrari HP @ScuderiaFerrari]

Lap 6/58: @Charles_Leclerc is showing good speed early on, he’s right on the tail of NOR for P3 👀

[HalcyonAI @HalcyonAi]

🚨 #Akira isn’t slowing down.

This #Ransomware group is exploiting edge devices, disabling EDR, and targeting backups to cripple recovery.

Manufacturing, finance, and education are in the crosshairs.

🔎 Read Halcyon’s Threat Actor Profile: https://t.co/XzalPBMtpy

[Two Seven One Three @TwoSevenOneT]

Some EDR/Antivirus have been successfully tested
Microsoft Windows Defender
Elastic Defend
Sophos Intercept X

[Two Seven One Three @TwoSevenOneT]

After testing with @Cameron21668376 EDR-Redir can run successfully with CrowdStrike Falcon 🔥
#PenTesting
GitHub: TwoSevenOneT/EDR-Redir

[Two Seven One Three @TwoSevenOneT]

EDR-Redir can successfully run with ESET. I will soon upgrade it to V2 with the ability to "redir" more types of EDRs. 💪

GitHub: TwoSevenOneT/EDR-Redir
#antimalware #CyberSecurity

[Dr Shawn Baker 🥩 @SBakerMD]

Not today Satan!!

[Sameh Sabry @samehysabry]

#NewProfilePic

[Sameh Sabry @samehysabry]

@SBakerMD I do ☝🏽

[Cyber Security Council @cscgovae]

على هامش #RSAC2025، التقى سعادة الدكتور محمد الكويتي بممثلي شركتي Halcyon وSpire Solutions، حيث ناقش الجانبان سبل التعاون في تطوير تقنيات متقدمة للدفاع ضد هجمات الفدية وتعزيز أطر المرونة السيبرانية. ويأتي هذا اللقاء ضمن جهود دولة الإمارات المستمرة لبناء شراكات استراتيجية وتعزيز قدراتها في مجال الأمن السيبراني والتعاون الإقليمي.#الأمن_السيبراني #الإمارات #RSAC2025 #Halcyon #SpireSolutions #الابتكار #المرونة_السيبرانية #الشراكات

On the sidelines of #RSAC2025, H.E. Dr. Mohamed Al-Kuwaiti met with representatives from Halcyon and Spire Solutions to explore joint efforts in advancing ransomware defense technologies and cyber resilience frameworks. The discussion reflected the UAE’s ongoing pursuit of strategic partnerships to strengthen its cybersecurity posture and regional cooperation.
#CyberSecurity #UAE #RSAC2025 #Halcyon #SpireSolutions #Innovation #Resilience #Partnerships

[Formula 1 @F1]

Triple overtake for Charles! 😵

Watch Leclerc climb from P19 to P3 (!) and all the best bits from the season finale 🎥

#F1 #AbuDhabiGP

[Scuderia Ferrari HP @ScuderiaFerrari]

This moment 🥹

#AbuDhabiGP🇦🇪 #F1

[Sameh Sabry @samehysabry]

@SBakerMD We would call him Dr. Shawn Baker

[Sameh Sabry @samehysabry]

to exploit employees’ trust in Teams messages. Over $15 million in damages have been reported across sectors including finance, technology, and government contracting. (3/3)

[Sameh Sabry @samehysabry]

They impersonate IT help desk staff to convince victims to install remote access tools like Quick Assist or AnyDesk, enabling malware deployment. This approach bypasses traditional email defenses, leveraging spam emails and fake Entra ID tenants (2/3)

[Sameh Sabry @samehysabry]

The Black Basta ransomware group has begun using Microsoft Teams for advanced social engineering attacks, targeting hundreds of organizations in October 2024. (1/3)

[Sameh Sabry @samehysabry]

This shift highlights the growing complexity and precision of ransomware attacks and the need for technologies built from the ground up around ransomware protection and recovery. (2/2)

[Sameh Sabry @samehysabry]

According to the Global Threat Landscape Report by @FortiGuardLabs , fewer organizations effectively detect ransomware attacks. Detection rates have fallen from 22% in previous years to just 13%. (1/2)

[Sameh Sabry @samehysabry]

Do you remember when you joined X? I do! #MyXAnniversary - after losing my first account!!