Building a deterministic-ish DFIR pipeline for the SANS AI hackathon
SANS recently announced their first hackathon for autonomous incident response — open to the community, build something that uses AI to figure out what the bad guys
Or: how I spent twelve hours building a workaround for a flag that already existed I run a four-node DGX Spark cluster for local DFIR inference. The biggest model on it is Intel&
read post →SANS recently announced their first hackathon for autonomous incident response — open to the community, build something that uses AI to figure out what the bad guys
I benchmarked 11 LLMs on a 69-scenario tool-calling test suite. Intel/Qwen3.6-35B-A3B-int4-AutoRound delivered the best overall result: a perfect
On 19 April 2026, Vercel disclosed a security incident. Within 48 hours, the public attack chain had resolved into something more interesting than the initial "
DORA came into force in January 2025. Financial entities across the EU are supposed to be compliant. Most aren't — at least not fully — and
So I have gotten into running my own local llm for privacy reasons, and like to use it to assist with incident response tasks and collecting
Separating the jailbreak hype from the genuine security story Today a GitHub repository appeared claiming to be a "freed" build of Anthropic's
1. Executive summary Citizen Lab and Confiant published parallel investigations into Discover-Tech, an Israel-based firm that used digital advertising to deliver zero-
1. Executive summary Signals Corps sampled 217 million HTTP page responses from Common Crawl and found 30 sites attempting indirect prompt injection through HTTP
1. Executive summary The Akira ransomware operation listed Videk, a UK provider of vision-based print verification and inserter scanning systems, on its leak
1. Executive summary Cisco Talos published its Q3 vulnerability pulse alongside new joint research with Recorded Future's Insikt Group on UAT-6275,
1. Executive summary The Eclipse Foundation has published fixes for six vulnerabilities in Eclipse Milo, the Java OPC UA stack used to build both