@Marcus Hutchins :verified:
Cybersecurity
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
Machine Speed is a lie: stop trying to fight AI with AI
Marketing departments are screaming that attackers are moving at "machine speed" and only AI-powered defenses can stop them. But cyberattacks have always been automated, and proactive defense beats reactive AI.
https://malwaretech.com/2026/09/machine-speed-is-a-lie-stop-trying-to-fight-ai-with-ai.html?a=1
Marketing departments are screaming that attackers are moving at "machine speed" and only AI-powered defenses can stop them. But cyberattacks have always been automated, and proactive defense beats reactive AI.
https://malwaretech.com/2026/09/machine-speed-is-a-lie-stop-trying-to-fight-ai-with-ai.html?a=1
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqnyqeg55nq5eudx30py8fgff82ensxt9j063w6chkzu4leyfjygwsfcp9u9
I remember when Windows required Ctrl-Alt-Del to be able to log in.
@nprofile1q... I've seen it on servers, but I don't remember it on desktop machines. Though if it was an XP thing, then I've probably long since forgotten about it
1
Found an interesting new malware loader which creates a fake Windows lock screen to phish the user's system login password. The fully-modular loader also bridges multitude different programming languages, including: Python, C#, C++, and PowerShell.
This extensive use of cross-language components, along with shipping an entire runtime environment, lead to us dubbing it SynkLoader (Sink Loader), because it brings everything but the kitchen sink.
While the original loader runs all of its modules in memory only, we were able to collect them by reverse engineering the command-and-control protocol, then building our own version of the loader which logs everything to disk.
Additionally, we were able to to lure the operator into thinking they had a reverse shell on our honeypot system. This allowed us to watch as they attempted to execute PowerShell commands, which were being printed to our system's console instead of being run.
Full analysis: https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/
This extensive use of cross-language components, along with shipping an entire runtime environment, lead to us dubbing it SynkLoader (Sink Loader), because it brings everything but the kitchen sink.
While the original loader runs all of its modules in memory only, we were able to collect them by reverse engineering the command-and-control protocol, then building our own version of the loader which logs everything to disk.
Additionally, we were able to to lure the operator into thinking they had a reverse shell on our honeypot system. This allowed us to watch as they attempted to execute PowerShell commands, which were being printed to our system's console instead of being run.
Full analysis: https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/
4
@nprofile1q... In my experience intelligent people don't desperately try to sound smart by invoking every fallacy name they can think of when losing an argument. Best of luck with whatever the fuck you're trying to accomplish in life, but you're getting blocked now.
@nprofile1q... No, I just think you're an idiot. I make videos for an audience who wants to hear my takes on mainstream cybersecurity news. You are either one of them, or you're not. If it's the latter, then you can just scrolled past instead of leaving your uninformed opinion.
A very important media literacy skill is knowing when some media is intended for you. If it's not intended for you and you respond as if it were tailored for you specifically, you just end up looking like a fool like you do now.
A very important media literacy skill is knowing when some media is intended for you. If it's not intended for you and you respond as if it were tailored for you specifically, you just end up looking like a fool like you do now.
@nprofile1q... Only to people who aren't smart enough to at least watch the first 5 seconds of the video before commenting
@nprofile1q... there's no "sorry that you think that". You came in and accused me of having no self-awareness, then backtracked to try and claim I was doing something that I did not do. You're a grade A clown. I title my YouTube videos so people watch them, not to appeal to 1 weird nerd on a niche social media platform.
@nprofile1q... yup, and that's why it got 10,000 views in less than 24h, instead of if I'd used my alternate headline option of: "A deep dive into OpenAI's claim that their model escaped a sandboxed and hacked hugging face, where I debunk said claim and talk about OpenAI's reckless behavior and also include my life story in this headline because why not and also I had eggs for breakfast btw"
@nprofile1q... This whole post reads like a neckbeard trying to sound intelligence. It's 2 paragraphs of "well akshully".
If you'd watch the video you'd know I spent the whole video tearing apart OpenAI and debunking their BS claim, but you didn't because you think judging a book by its cover and inventing the story is an intelligent way to behave.
If you'd watch the video you'd know I spent the whole video tearing apart OpenAI and debunking their BS claim, but you didn't because you think judging a book by its cover and inventing the story is an intelligent way to behave.