Max Heinemeyer

Cyber Security & AI Enthusiast. Ethical Hacker. CPO @ Darktrace. Thoughts are my own. (he / him)

[Mobeen Tahir @MobeenTahirWT]

🎙️In this episode of 'The Next Big Thing' #podcast, Chris and I are joined by @shelldaemon, Chief Product Officer @Darktrace to discuss the intersection of #AI and #cybersecurity.

Spotify: https://t.co/Ab3AQRryyt

Apple: https://t.co/3RQmsyWWLX

https://t.co/hB5F9Rmyp2

[remy🐀 @_mattata]

RE: APEX / ALGS / EAC Remote Code Execution

👋 I wrote undectable cheats for online games for challenge and sport for many, many years. I know enough to know that no one has the answers, but I'd like to call out some things you may have glazed over, and put them in context. 🧵

[Ariel Herbert-Voss @adversariel]

Lots of LinkedIn poasting about this paper today but the real meat of it is right here https://t.co/mneuswYxZR

[Max Heinemeyer @shelldaemon]

@DefconHolland Hey! Are you planning any events for 2024 yet :)?

[Max Heinemeyer @shelldaemon]

A lot of organizations are getting hammered by QR-code based phishing. Many SOC teams seem to be struggling to find a good answer.

We've been seeing and stopping this since (before) July this year - using machine learning.

Real-life example & tech:
https://t.co/J8kxfEKpX1

[Max Heinemeyer @shelldaemon]

#EPSS & #KEV are great for #vulnerability management. What's usually still lacking is local organizational context though 🧐. Combining ML, graph theory & attack path modelling for vulnerability prioritization with local context 🙏: https://t.co/xg1ZHl4Mfa

[Jim Fan @DrJimFan]

The famed Stanford Smallville is officially open-source!

25 AI agents inhabit a digital Westworld, unaware that they are living in a simulation. They go to work, gossip, organize socials, make new friends, and even fall in love. Each has unique personality and backstory.

Smallville is among the most inspiring AI agent experiments in 2023. We often talk about a single LLM's emergent abilities, but multi-agent emergence could be way more complex and fascinating at scale. A population of AI can play out the evolution of an entire civilization.

Endless new possibilities ahead. Gaming will be the first to feel the impact.

Github: https://t.co/xUll7KaaTp
Paper: https://t.co/PMDQysrOz9
Authors: @joon_s_pk @joseph_c_obrien @carriejcai @merrierm @percyliang @msbernst

[Joe Muller @BosonJoe]

An interesting discussion in the #AutoGPT Discord on red-teaming the AGI we are playing with.

https://t.co/ZYaalbeWSS

[Hannes Munzinger @h_munzinger]

Watch out: today we will publish the #VulkanFiles - an international investigation into Russia's cyberwarfare. Stay tuned. @derspiegel @paper_trail_m @ZDFfrontal @derStandardat @tagesanzeiger @SZ @lemondefr @istories_media @DRNyheder @washingtonpost @guardian

[Mehmet Ergene @Cyb3rMonk]

Do you often use ChatGPT for cybersecurity? If so, what do you use it for? Be it for writing queries, scripts, etc. I've spent just a couple of minutes so far and couldn't find a use case for myself and probably I'm missing something or just dumb.

[Max Heinemeyer @shelldaemon]

[Private] [German] [Non-IT] My wife is releasing her new book on 14th Feb. Today is the cover reveal! Another amazing achievement for her :)

[Max Heinemeyer @shelldaemon]

@thegrugq @daveaitel there is very little data on size of teams, structure, setup, resource ($$) required for 'well tooled-up adverary teams' out there - @daveaitel 's q on that and the micro-discussion afterwards was good. many people think of 1000s of people when they hear 'APT'.

[Max Heinemeyer @shelldaemon]

@Cyb3rMonk I know you are not looking for a tool, but have you heard of @CadoSecurity? They have a bunch of good resources and have worked on that very topic quite cleverly for a while. If nothing else, possibly worth a chat.

[michelle huang @michellehuang42]

i trained an ai chatbot on my childhood journal entries - so that i could engage in real-time dialogue with my "inner child"

some reflections below:

[Max Heinemeyer @shelldaemon]

My threat research colleagues have translated last week's internal leaks of the #yanluowang #ransomware gang and analysed them. Interesting to see what impact these leaks have on the broader ransomware landscape. https://t.co/nUra9tbGTf

[Max Heinemeyer @shelldaemon]

@Ketumbra Ah I see where you are coming from - for getting initial access. Thanks for explaining.

[Max Heinemeyer @shelldaemon]

Image there was a ransomware variant that does not encrypt files, but change the content of files (words in docs, numbers in lists, ...) based on context, but just subtly so you won't notice and keep working with it. An attack against integrity, not availability in essence. (1/4)

[Greg Linares (Laughing Mantis) @Laughing_Mantis]

This will be a thread discussing a real world breach involving a drone delivered exploit system that occurred this summer

Some details I am not able to discuss, however for the blue teams & red teams out there I hope this provides a good measure of capability.

🧵🚁 🎮🖥️🦠