Elasticsearch misconfiguration to blame once again
Twitter suspends @TeamTrump for “posting private information”
While building “Husky AI” I started working a lot with Microsoft’s VS Code Python extension. It is a super convinient way to edit Jupyter Notebooks. I just use VS Code’s Remote SSH feature to get to my Linux host and work on modeling and testing there.
When threat modeling “Husky AI” I identified ba...
Alleged QQAAZZ members indicted for laundering millions of dollars for high-level cyber-criminals
Barnes & Noble suffers cyber-attack the day after solving its Nook outage issue
During my summer internship at Trail of Bits I worked on osquery, the massively popular open-source endpoint monitoring agent used for intrusion detection, threat hunting, operational monitoring, and many other functions. Available for Windows, macOS, Linux, and FreeBSD, osquery exposes an operating...
Better collaboration can aid state and local US government departments
Tehran wants access to cutting-edge research
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out We talked about creating a...
Stronger security for calls from next week
ITRC reveals number of victims has also fallen year-on-year
Excited to announce that I will be presenting at Grayhat - Red Team Village on October 31st 2020. The presentation is about my machine learning journey and how to build and break a machine learning system.
If you follow my blog, you can guess that there will be lots of discussion around “Husky AI”....
Corporation reveals passenger data from three different cruise lines was accessed during cyber-attack
A British man caught using malware to secretly film people in the privacy of their homes has avoided prison
Iterator invalidation is a common and subtle class of C++ bugs that often leads to exploitable vulnerabilities. During my Trail of Bits internship this summer, I developed Itergator, a set of CodeQL classes and queries for analyzing and discovering iterator invalidation. Results are easily interpret...
Twitter’s inadequate cybersecurity prompts New York State to recommend regulation of social media companies
Ransomware victims spend less time on threat prevention and more on response
If you work on deep learning systems, check out our new tool, PrivacyRaven—it’s a Python library that equips engineers and researchers with a comprehensive testing suite for simulating privacy attacks on deep learning systems. Because deep learning enables software to perform tasks without explicit...
Puls brings strong track record of fueling growth through a customer-centric approach to the IT management and security firm
Apricorn FOI request points to data lapses