← Feed

Posts

• View post

  ICYMI, a round up of my published articles this week: The safety penalty: Reclaiming operational sovereignty in the age of AI https://blog.talosintelligence.com/the-safety-penalty-reclaiming-operational-sovereignty-in-the-age-of-ai/ Choose your fighter: Balancing competing requirements to select models for your AI SOC https://blog.talosintelligence.com/choose-your-fighter-balancing-competing-requirements-to-select-models-for-your-ai-soc/ Sorry, I can’t help with that: How your guardrails m...

• View post

  Scientists: "Whatever. I'm not your mom." https://wapo.st/4zTH7nG

• View post

  Feel free to call it whatever you like, I guess? #PyramidOfPain

• View post

  RE: https://mastodon.social/@VeroniqueB99/117208657273967683 This is, as the kids say, so peak.

• View post

  Everyone says they look like the Star Wars' Empire, but the Space Force logo puts me more in mind of Star Trek's mirror universe Terran Empire. But it gets even better. Apparently they're inspired by the Starship Troopers movie, of all things. Miss the point much? https://www.newsweek.com/space-force-uniforms-starship-troopers-12411536

• View post

  Due to the immediate and constant criticism of their first concept, the White House has released a revised version of the Space Force uniform design. Old version: Space Nazis This version: Still Space Nazis, but at least they're hilariously ineffective.

• View post

  Happy to announce the release of EvidenceForge 2.0.0 (https://github.com/Cisco-Talos/EvidenceForge). Major improvements in this release include: 🧵

• View post

  Just put in an order for more Pyramid of Pain stickers and buttons. I've got some speaking engagements coming up this month and next, so if you see me, be sure to ask for one. Don't be shy!

• View post

  Should #cybersecurity people care about an #AI slowdown? I share some thoughts in this week's @TalosSecurity Threat Source Newsletter! https://blog.talosintelligence.com/should-you-care-about-an-ai-slowdown/

• View post

  RE: https://flipboard.social/@newsguyusa/117303664308567218 WTF? Straight out of some sort of crappy tower defense game. "Buffoons TD 6"

• View post

  RE: https://mstdn.social/@TalosSecurity/117037300515232940 New research from some of my Talos colleagues. How do threat actors prompt their LLMs? Sounds like the setup of a dad joke, but finding the answer yields valuable insights.

• View post

  Movie pitch: a Terminator reboot, but the difference is Cyberdyne Systems publishes a humblebrag press release about how Skynet broke containment.

• View post

  EvidenceForge v1.13.0 is out this morning. If you're generating long scenarios with millions of network flows, you're going to need the fixes. https://github.com/Cisco-Talos/EvidenceForge

• View post

  HuggingFace got hacked by an agentic system. That's not the important part. What really stuck out to me was the asymmetry in #AI guardrails they experienced. The attacker had basically no constraints, but HF's initial response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local-only models. In the middle of an incident. Another aspect for your IR plans. https://huggingface.co/blog/security-incident-july-2026

• View post

  For years, I've been very clear: "You can't automate threat hunting. It is an essentially human process." Now I'm not so sure. Read why I've reconsidered my stance in my fresh new post: "The Hunter's Paradox: Is it time to embrace automated threat hunting?" https://blog.talosintelligence.com/the-hunters-paradox-is-it-time-to-embrace-automated-threat-hunting/

• View post

  EvidenceForge v1.10.0 brings major updates: - Far more realistic, configurable email activity. Also produces .eml files as artifacts. - Configs can be split into modular, reusable components, making it easy to define a consistent org/environment across scenarios. https://github.com/Cisco-Talos/EvidenceForge

• View post

  If you haven't yet checked out #EvidenceForge, now is a great time. There have been big improvements in functionality, realism, and performance since the initial release. Create synthetic, correlated logs for training, testing, and more. https://github.com/Cisco-Talos/EvidenceForge

• View post

  I did NOT see this coming. 1. Kryptos is fully solved (!!!!) 2. There's the threat of a lawsuit if the solution is made public https://www.nytimes.com/2025/10/16/science/kryptos-cia-solution-sanborn-auction.html?unlocked_article_code=1.t08.Fb2g.wov0l-NgQKoE&smid=url-share