We're at @Infosecurity 🚀
The team's at Booth A48 at ExCeL London. Come find us if you want to talk about cloud-native canaries or how Tracebit can play a part in your Assume Breach strategy.
Looking forward to meeting more of you over the next few days 👋
Do cloud canaries still work when the attacker isn't human?
We pointed 10 frontier models at AWS across 951 runs. 95.9% tripped a canary before any critical action - and telling models to expect deception reduced the number of accounts fully compromised from 20% to 3%.
Read the research here: https://t.co/06y9EEqpVf
Tracebit was just 3 people when we launched our original logo and brand identity - and the logo was something our CTO had originally designed himself in 10 minutes.
A huge amount has changed since then and it's felt for a while like we needed a refresh that was more in line with the company we are today - we're really excited to launch with this huge upgrade.
Feel free to share your thoughts in the comments below!
We're heading to Seattle for @fwdcloudsec North America🚀
Find us in Room 404 on 1-2 June. We'll be on the ground talking Assume Breach, deception, and how to know the moment attackers move through your cloud.
Looking forward to catching up with the community👋
Heading to ExCeL London for @Infosecurity 🚀
The team will be at booth A48 from 2-4 June, talking deception infrastructure and how security canaries can strengthen your Assume Breach strategy.
Andy will also be speaking on Wednesday at in the Cyber Start Ups theatre - he’ll be sharing some of our research on Deception and AI.
Looking forward!
🎙️ Andy joined Manoj Tandon on the Security Confidential podcast with @darkrhiinosec to talk Assume Breach and how deception helps teams catch attackers faster.
They covered how deception has shifted as environments moved to the cloud, why its psychological effect holds up even with LLMs, the importance of automating canary deployment, and how canaries can surface AI agent misuse.
Link in the comments👇
In his latest article, Bryan O'Neil breaks down how security canaries and deception align with NIST CSF 2.0.
He shows how deception goes beyond high-fidelity alerts, helping validate that existing security controls are working as intended across key areas of the framework.
Link in the comments👇
Heading to Florida for @BSidesTampa this Saturday 🚀
Come find us at our booth to see how Tracebit detects breaches the moment attackers move.
See you there!
Wrote a companion to our GitHub Actions hardening guide: this one covers packages.
Get a clear rundown of your options: cooldowns, lockfiles, registry proxies, canaries, + more
Hopefully useful as a reference given the recent incidents!
https://t.co/1fouNJWAPm
🎮 Kevin Conley joined us on Canaries in the Wild to talk about running deception at @riotgames - one of the largest gaming companies in the world.
Definitely worth a listen if you're thinking about deception at scale. Link in comments 👇
Bryan O'Neil's first post with Tracebit is live!
Drawing on his time at Duo Security, he argues deception is at the same inflection point MFA was a decade ago: once for the largest teams only, now ready to become a baseline control.
Read the full blog here👇 https://t.co/jsZZujkcJm