@tracebit_com

The Assume Breach platform that detects intrusions in seconds. Also on https://xitter.cf/t.co/T4VNPGjS2O

 London, United Kingdom
tracebit.com
Joined November 2023
  • Tweets267
  • Following4.7K
  • Followers371
138Media
Tracebit retweeted
Gadi Evron@gadievronJul 27
Releasing: Post mortem analysis of the Hugging Face incident was written over the weekend by hundreds of CISOs (and reviewed by Hugging Face). Link: cloudsecurityalliance.org/ar… (+free download) From @cloudsa, @SANSInstitute, @knosticai, @unpromptedconf, @OneRSAC, @FIRSTdotOrg

Hugging Face Incident Initial Post Mortem I CSA

AI Security Alliance's initial post-mortem on the Hugging Face incident, the first documented autonomous AI attack, with CISO guidance on detecting, responding to, and governing agentic AI risk.

cloudsecurityalliance.org
8
59
7
204
58,350
Tracebit retweeted
WIRED
@WIREDJul 18
“Context bombing” tricks malicious AI agents into shutting down before they can do harm. wired.com/story/prompt-injec…

Prompt Injection Attacks Are Thwarting AI Hacking Agents

“Context bombing” tricks malicious AI agents into shutting down before they can do harm.

wired.com
10
8
26
24,241
Tracebit retweeted
NCSC UK
@NCSCJul 11
Cyber deception as a defensive strategy 'is both a viable tool and a valuable tool when used in the right way to disrupt adversaries.' NCSC CTO Ollie Whitehouse on how deception can be used for threat intelligence and threat detection. To learn more⬇️ ncsc.gov.uk/blog-post/cyber-…

Cyber deception trials: what we’ve learned so far

An update on the NCSC's trials to test the real-world efficacy of cyber deception solutions.

ncsc.gov.uk
Tracebit
@tracebit_comJul 9
🎙️Episode 5 of Canaries in the Wild is now live with Ollie Whitehouse, CTO of the UK's @NCSC. Ollie has spent 23 years in and around deception – from running personal honeypots in 2002, to catching state adversaries and a criminal zero-day at a previous employer, to now leading NCSC's national-scale cyber deception programme. In this episode, Ollie makes the case for deception as one of the very few asymmetric tools available to defenders, walks through the why and what of NCSC's national programme, and shares his view on how AI is changing the picture for both attackers and defenders. Watch the full episode linked in the comments!👇
3
13
26
6,443
Meet the 33 trailblazing startups joining the second Gemini Startup Forum: Cybersecurity. 🔒💻 This September, these global startup teams will take part in a unique two-day, in-person event in London that offers them a chance to engage in forward-thinking dialogue with AI experts from @Google. Participants will collaborate directly with experts from across @GoogleDeepMind and @GoogleCloud to explore how AI will redefine the cybersecurity landscape. Founders will leave not just with insights, but with a tangible, actionable AI roadmap for their cybersecurity startup. Learn more about the cohort in our blog: goo.gle/4vfbEc5
3
5
3
39
4,307
Wrote a companion to our GitHub Actions hardening guide: this one covers packages. Get a clear rundown of your options: cooldowns, lockfiles, registry proxies, canaries, + more Hopefully useful as a reference given the recent incidents! wiz.io/blog/practical-packag…

Practical Package Security: The Unofficial Guide | Wiz Blog

Get actionable best practices to shrink your attack surface, protect execution environments, control package ingestion, and catch compromises early.

wiz.io
3
14
89
7,826
Tracebit retweeted
Tracebit
@tracebit_comApr 7
We're heading to Singapore for @BlackHatEvents Asia! Come find us at Booth 223 - we'll be showing how security canaries detect breaches the moment attackers move. See you there 🚀
6
1
9
3,309
Definitely a subscriber to the notion that we need to "assume breach" + that canaries are a great way to do that. @tracebit_com's community edition is completely free, forever btw. link in comments. also cc @HacktronAI
1
1
8
588
If you're attending Black Hat EU, BSides London, or are around town, make sure to swing by our London Happy Hour co-sponsored with our friends at @tracebit_com! 📆 Date: Friday, December 12th ⏰ Time: 7:00pm-10:30pm GMT 📍 Location: Shoreditch Come for chill networking with fellow security practitioners, fun games, and good food and drinks 😃 luma.com/nees25e2

London Happy Hour with Tracebit and RunReveal · Luma

Calling all security practitioners in London! Whether you're coming from Black Hat EU or BSides London, join us for drinks and good times at Platform…

luma.com
2
6
251
Tracebit retweeted
BleepingComputer
@BleepinComputer28 Jul 2025
Flaw in Gemini CLI AI coding assistant allowed stealthy code execution - @billtoulas bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Flaw in Gemini CLI AI coding assistant allowed stealthy code execution

A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs.

bleepingcomputer.com
2
21
49
7,189
@BSidesNYC welcomes @tracebit_com as a Megabit sponsor for our conference on Oct 18, 2025. bsidesnyc.org/ Tracebit deploys and maintains tailored security canaries, proactively detecting intrusions across your organization. tracebit.com/
1
1
257
Meet our first Gold Sponsor: @tracebit_com! Tracebit helps leading tech companies like Riot Games and Docker 'assume breach' at scale. Their platform automates security canary deployments across cloud and enterprise, producing highly actionable, accurate intrusion detections.
1
2
1
5
489
Why Tracebit is written in C# by @tracebit_com tracebit.com/blog/why-traceb… #dotnet

Why Tracebit is written in C# | Tracebit

A retro on some of the reasons we chose to build Tracebit in C#.

tracebit.com
8
49
2
260
27,798
Tracebit retweeted
Tracebit
@tracebit_com4 Dec 2024
We are at B-Sides London on Saturday the 14th December! Be sure to come say hello! We're also in the lucky position of having some tickets to give away - we'll randomly pick 5 lucky winners who retweet this post! #BSidesLDN2024
9
1
8
2,102
📖 CloudSecList Issue 265 just got released, w/ content from @iann0036 @trailofbits @PushSecurity @tenablesecurity @tracebit_com @SentinelOne and more! cloudseclist.com/issues/issu…

📖 [The CloudSecList] Issue 265

Issue 265 of CloudSecList

cloudseclist.com
2
1
5
1,679
We're going to have two fun and challenging CTFs at DEATHcon this year: @TheDFIRReport is hosting one of their signature hunting competitions, and @tracebit_com has a cool challenge trying to avoid tripping detection canaries while achieving red team objectives in cloud assets 🔥
1
12
1
30
4,932
I've developed a lot of opinions on Security Canaries in working with @tracebit_com! When building a security program, I always lean on maturity models for benchmarking and to inform my roadmap So, I figured I'd close that gap for canaries: tracebit.com/blog/the-securi…

The Security Canary Maturity Model | Tracebit

We lay out the different levels of maturity your organization may be at in their Security Canary Maturity, as well as discussing the value in maturity models themselves.

tracebit.com
1
6
22
1,532
🪿 Excited to work again with @tracebit_com - this time on real world attacks and the role canaries could play in their detection! ft. Scattered Spider (@permisosecurity), Muddled Libra, and a ransomware event shared @fwdcloudsec tracebit.com/blog/canary-inf… Diagrams in thread...

Canary Infrastructure vs. Real World TTPs | Tracebit

We investigate three recent AWS security incidents and discuss how canaries could help you detect these early, and throughout the attack lifecycle.

tracebit.com
1
12
37
1,859
🔎 A hard look at GuardDuty shortcomings @ramimacisabird examines its performance & threat detection capabilities 6 Stratus Red Team techniques triggered 0 findings 15 min median detection latency 100-2500GB S3 data can be exfiltrated before 1st alert tracebit.com/blog/a-hard-loo…

A hard look at GuardDuty shortcomings | Tracebit

Is GuardDuty all you need for AWS threat detection? We’ve asked our friend Rami McCarthy to dive into GuardDuty’s performance and consider the potential place for Canary Infrastructure.

tracebit.com
12
27
2,165
"Discover the AWS Account ID of any S3 bucket" by Sam Cox. Every part of the premise for this talk is great. Sam is great. Leveraging API functionality for enumeration is great. I think that means that this talk is going to be great!
2
1
7
493
We're happy to announce Tracebit is a Bronze sponsor for fwd:cloudsec! @tracebit_com tracebit.com/
1
5
432
Load more