
Founder @pulsedive. Organizer @defcon908. Created @threatfeeds_io.
New Jersey, USA
Joined November 2011
- Tweets7.4K
- Following1.3K
- Followers1.5K
- Likes11.5K
Pinned Tweet
"We want to upload text files in any format, automatically parse out IOCs, enrich them, and then export them to STIX or CSV."
@pulsedive: ok pulsedive.com/analyze/
Dan Sherry retweeted
We recently wrote a guide for operationalizing ASN data for threat detection with @feedly TI Essentials.
Check out how, when, and why to track ASNs alongside IOCs here: feedly.com/ti-essentials/pos…
What's inside
- How to score ASNs with free tools
- Alerting vs. blocking
- Clustering to connect infrastructure
- Dive into Tycoon2FA
Dan Sherry retweeted
Thanks to everyone who joined us for Jeremy's "Droid Rage" presentation on Android application security!
We appreciate everyone who came out, asked questions, and contributed to a great discussion.
Part 2 will be on July 9th. More details coming soon!
#DEFCON908 #Cybersecurity
Dan Sherry retweeted
This month we've got Ben Smith and Robert McSulla simulating a live battle between AI attackers and defenders! We'll be hosting in the upstairs History room at Westfield Memorial Library on Apr. 23rd at 7pm! See you there! Link in bio for more! #Cybersecurity #AI
Dan Sherry retweeted
New and improved Pulsedive Docs now live!
We just released a dedicated documentation site with a complete API reference, live playgrounds, and MCP server support for AI-assisted development.
docs.pulsedive.com/
Dan Sherry retweeted
Hey Everyone! Next week on 3/19 we've got Rish deploying the Security Onion! It's got AI built into it, so let's see how it manages security threats! We'll be hosting at the Westfield Memorial Library at 7pm! Link in bio for more! #Cybersecurity
Dan Sherry retweeted
Hey Everyone! On Thursday Feb. 19th we'll be hosting another talk at the Westfield Memorial Library! This time we've got Dimi talking about modding a motorcycle with an Arduino to manage fuel injection! We hope to see you there! #DC908 #Cybersecurity #arduino #motorcycle
Dan Sherry retweeted
Newly Added Threat Page: PeckBirdy
- JScript-based C2 framework
- Used by threat actors aligned with China
- Since 2023
- New primary research from @trendaisecurity: trendmicro.com/en_us/researc…
Latest news, TTPs, IOCs available on Pulsedive's PeckBirdy Threat page: pulsedive.com/threat/PeckBir…
Dan Sherry retweeted
Join us for an engaging panel on Vulnerability Disclosure! We will be selecting panelists at the event. Panelist or not, feel free to bring your own questions to discuss! Westfield Memorial Library on Jan 22nd at 7pm! #cybersecurity #DEFCON908
2015: social engineering people and hacking computers
2035: social engineering computers and hacking people
People really out here acting like notepad++, winscp, SSH, and JavaScript stopped working.
Andrej Karpathy literally built the neural networks running inside coding assistants.
He taught the world deep learning at Stanford. He ran AI at Tesla.
If he feels “dramatically behind” as a programmer… that tells you everything about where we are.
The confession here is that raw intelligence and deep technical knowledge no longer guarantee mastery. The new stack isn’t about understanding transformers or writing elegant algorithms. It’s about orchestrating a zoo of stochastic systems that nobody fully controls.
Karpathy’s list is revealing: agents, subagents, prompts, contexts, memory, modes, permissions, tools, plugins, skills, hooks, MCP, LSP, slash commands, workflows, IDE integrations. That’s 15+ new primitives that didn’t exist 18 months ago. Each one evolving weekly.
The mental model problem is real. Traditional engineering gives you deterministic systems. You write code, it does exactly what you wrote. Now you’re managing entities that are “fundamentally stochastic, fallible, unintelligible and changing.”
His “alien tool with no manual” framing is exactly right. We’re all reverse-engineering capabilities in real-time. The documentation is always out of date. The best practices from 3 months ago are already wrong.
The magnitude 9 earthquake isn’t coming. It already hit. The aftershocks are the new normal.
Dan Sherry retweeted
Exploitation attempts for #React2Shell (CVE-2025-55182) have been widespread over the last week. Three resources that outline exploitation are:
greynoise.io/blog/cve-2025-5…
esentire.com/security-adviso…
huntress.com/blog/peerblight…
Recommendation: Deploy patches as soon as possible
Dan Sherry retweeted
Check us out on Oct. 23rd for a group talk on cybersecurity topics! Everything ranging from current events, different security realms or just ranting about the state of cybersecurity today! Link in bio for more details!
details on NPM supply chain compromise:
- targets crypto
- client-side (executes in browser)
- pushed to repos sept 8
- NPM account compromised through phishing email with domain npmjs[.]help
aikido.dev/blog/npm-debug-an…
Dan Sherry retweeted
Join DC 908 + 862 for a Hackers (1995) viewing + 862’s 2nd birthday bash:
🗓 Sept 5, 7–10 PM
📍Laptop Upcycle, Montclair, NJ
Cyber swag, DC33 stories, & hacker nostalgia await! RSVP: meetup.com/defcon862/events/…
#Hackers30 #DC908 #DC862 #HackThePlanet #Cyberpunk #MeetupParty
























