Cyber Security & AI Enthusiast. Ethical Hacker. CPO @ Darktrace. Thoughts are my own. (he / him)
Joined December 2013
- Tweets1.1K
- Following292
- Followers624
- Likes466
Max Heinemeyer retweeted
🎙️In this episode of 'The Next Big Thing' #podcast, Chris and I are joined by @shelldaemon, Chief Product Officer @Darktrace to discuss the intersection of #AI and #cybersecurity.
Spotify: open.spotify.com/episode/5tI…
Apple: podcasts.apple.com/us/podcas…
youtube.com/watch?v=Gi0BA7Vv…
Max Heinemeyer retweeted
RE: APEX / ALGS / EAC Remote Code Execution
👋 I wrote undectable cheats for online games for challenge and sport for many, many years. I know enough to know that no one has the answers, but I'd like to call out some things you may have glazed over, and put them in context. 🧵
Max Heinemeyer retweeted
Lots of LinkedIn poasting about this paper today but the real meat of it is right here xitter.cf/seanhn/status/17580122…
A lot of organizations are getting hammered by QR-code based phishing. Many SOC teams seem to be struggling to find a good answer.
We've been seeing and stopping this since (before) July this year - using machine learning.
Real-life example & tech:
darktrace.com/blog/phishing-…
#EPSS & #KEV are great for #vulnerability management. What's usually still lacking is local organizational context though 🧐. Combining ML, graph theory & attack path modelling for vulnerability prioritization with local context 🙏: darktrace.com/blog/leveragin…
Max Heinemeyer retweeted
The famed Stanford Smallville is officially open-source!
25 AI agents inhabit a digital Westworld, unaware that they are living in a simulation. They go to work, gossip, organize socials, make new friends, and even fall in love. Each has unique personality and backstory.
Smallville is among the most inspiring AI agent experiments in 2023. We often talk about a single LLM's emergent abilities, but multi-agent emergence could be way more complex and fascinating at scale. A population of AI can play out the evolution of an entire civilization.
Endless new possibilities ahead. Gaming will be the first to feel the impact.
Github: github.com/joonspk-research/…
Paper: arxiv.org/abs/2304.03442
Authors: @joon_s_pk @joseph_c_obrien @carriejcai @merrierm @percyliang @msbernst
Max Heinemeyer retweeted
An interesting discussion in the #AutoGPT Discord on red-teaming the AGI we are playing with.
github.com/Torantulino/Auto-…
Max Heinemeyer retweeted
Watch out: today we will publish the #VulkanFiles - an international investigation into Russia's cyberwarfare. Stay tuned. @derspiegel @paper_trail_m @ZDFfrontal @derStandardat @tagesanzeiger @SZ @lemondefr @istories_media @DRNyheder @washingtonpost @guardian
Max Heinemeyer retweeted
Do you often use ChatGPT for cybersecurity? If so, what do you use it for? Be it for writing queries, scripts, etc. I've spent just a couple of minutes so far and couldn't find a use case for myself and probably I'm missing something or just dumb.
[Private] [German] [Non-IT] My wife is releasing her new book on 14th Feb. Today is the cover reveal! Another amazing achievement for her :)
there is very little data on size of teams, structure, setup, resource ($$) required for 'well tooled-up adverary teams' out there - @daveaitel 's q on that and the micro-discussion afterwards was good. many people think of 1000s of people when they hear 'APT'.
The stream was insightful, your discussion and analysis on the report was great. More of this would be useful. Thanks!
I know you are not looking for a tool, but have you heard of @CadoSecurity? They have a bunch of good resources and have worked on that very topic quite cleverly for a while. If nothing else, possibly worth a chat.
Max Heinemeyer retweeted
i trained an ai chatbot on my childhood journal entries - so that i could engage in real-time dialogue with my "inner child"
some reflections below:
My threat research colleagues have translated last week's internal leaks of the #yanluowang #ransomware gang and analysed them. Interesting to see what impact these leaks have on the broader ransomware landscape. darktrace.com/blog/inside-th…
Yeah, the monetization / ransom is harder for sure. I think disruption would be the main goal with this type integrity-attack. Do you have a link to the Solar Winds reference :)? I wasnt aware they manipulated data / content subtly.
