wessorh

@gadi@infosec.exchange What I found super impressive this week is all the EDR tools that were completely reversed and unpacked with open weight LLMs and if that isn't hard to accomplish then the shields are down and everyone still thinks they are working

How are the EDR companies responding to this?

I'm still waiting for the information security industry to pivot from the FUD cycle. Why is everyone using Fear to motivate?

@Sempf@infosec.exchange Some places you just can't grow tomatoes, find what works in your location.

@corq@infosec.exchange Untrue. Check out instant Malware Signatures https://cyberwarhead.com/2026/07/01/extending-yara-clamav-and-zeek-with-instant-holloman-fingerprints/

@micahflee@infosec.exchange where/when does you fiction writes meet, I'd like to learn more

@micahflee@infosec.exchange I live in Oakland, do you have a link to learn more about the group?

@monitorsg@infosec.exchange include "holloman" rule hash_fb1db11a8c87 { meta: description = "Hash fb1db11a8c8794c9649cbb2277deda6596f946fb5adfd9d6be005b8a28088486" sha256 = "fb1db11a8c8794c9649cbb2277deda6596f946fb5adfd9d6be005b8a28088486" sha1 = "da42210a05eaae079285c3db244074f4a8fb4549" md5 = "909055f515c9fa397b5d97341b5c39fd" fingerprint = "27405a5800074d530000040500000000" tag = "Malicious" condition: holloman.cluster_id == "h.27405a5800074d530000040500000000" }

@patrickcmiller@infosec.exchange I read your article and thought we might enjoy a conversation on clustering. I've been using a technique to fingerprint malware and I'd like to try it with what you saw. Could you share the hashes, or possably share the samples. thanks, -rick

@sambowne@infosec.exchange yes, AI creates all the FP that endpoint security alert on. yes these companies are super smart, but AI...

@still@infosec.exchange take a look at https://plan10.org/ when we use math to do detection it can be fast and efficient

@stroz@infosec.exchange are you giving a jab to the cyber security industry and their threats?

@zak@infosec.exchange try Wekiva Springs they are usually very cold

@danirabbit@mastodon.online gardening. just go outside -- then you can talk about the weather

@nixCraft@mastodon.social I've been working on a system to detect simular things, It works for malware and spam, would you like some help detecting the bots? I'd be happy to see if it would work you can read some about it at https://cyberwarhead.com or https://plan10.org/