iiinova — where your digital self keeps evolving

David J. Bianco @davidjbianco.bsky.social · 01/10/2026

If you're attending the SANS DFIR Summit, @letswastetime.bsky.social and I are giving a workshop: "Know Normal, Catch Abnormal: Hands-On Baseline Hunting". It's a sample of our new FOR668 #ThreatHunting class, hot off the presses and free with admission! www.sans.org/cyber-securi...

sans.org

SANS DFIR Summit & Training 2026

Obtain hands-on, practical skills from the world's best instructors by taking a SANS course at SANS DFIR Summit & Training 2026.

110

David J. Bianco @davidjbianco.bsky.social · 01/10/2026

This is next level. Our #cybersecurity cons mostly just have lock-picking or social engineering. @defcon.bsky.social you listening? Also, congrats to @astrokatie.com! I have literally no idea how to this, but it's kinda awesome.

010

David J. Bianco @davidjbianco.bsky.social · 30/09/2026

Whew! @letswastetime.bsky.social and I just turned in our new #ThreatHunting course to SANS. Can't wait to finally get this in front of students!

010

David J. Bianco @davidjbianco.bsky.social · 27/09/2026

Let's be honest: my look could probably use a good gay-up.

001

David J. Bianco @davidjbianco.bsky.social · 20/09/2026

WTF? Straight out of some sort of crappy tower defense game. "Buffoons TD 6"

000

David J. Bianco @davidjbianco.bsky.social · 16/09/2026

Just put in an order for more Pyramid of Pain stickers and buttons. I've got some speaking engagements coming up this month and next, so if you see me, be sure to ask for one. Don't be shy!

000

David J. Bianco @davidjbianco.bsky.social · 09/09/2026

September 1 is officially the first day you can order Pumpkin Spice Cybercrime without being gauche.

010

David J. Bianco @davidjbianco.bsky.social · 07/09/2026

Due to the immediate and constant criticism of their first concept, the White House has released a revised version of the Space Force uniform design. Old version: Space Nazis This version: Still Space Nazis, but at least they're hilariously ineffective.

020

David J. Bianco @davidjbianco.bsky.social · 07/09/2026

Everyone says they look like the Star Wars' Empire, but the Space Force logo puts me more in mind of Star Trek's mirror universe Terran Empire. But it gets even better. Apparently they're inspired by the Starship Troopers movie, of all things. Miss the point much? www.newsweek.com/space-force-...

newsweek.com

Donald Trump’s Space Force uniform has unexpected inspiration

A Space Force uniform shared by Trump cited Starship Troopers as its inspiration, drawing fresh attention online.

020

David J. Bianco @davidjbianco.bsky.social · 03/09/2026

Feel free to call it whatever you like, I guess? #PyramidOfPain

190

Reposted by David J. Bianco

Katie Mack @astrokatie.com · 02/09/2026

There are endless studies showing this and also the financial and societal benefits of universal basic income and or housing-first policies but the U.S. never goes for any of it because it would require allowing the poor to receive benefits that the rich consider “undeserved”

20591083163

David J. Bianco @davidjbianco.bsky.social · 01/09/2026

Scientists: "Whatever. I'm not your mom." wapo.st/4zTH7nG

061

David J. Bianco @davidjbianco.bsky.social · 26/08/2026

Struggling to find the right combination of model and reasoning effort for your task? Balancing effectiveness, speed, and cost seem too confusing? Check out my latest article on balancing all these factors for your SOC tasks. blog.talosintelligence.com/choose-your-... #LLM #cybersecurity #SOC

blog.talosintelligence.com

Choose your fighter: Balancing competing requirements to select models for your AI SOC

Selecting a model for your security operations center (SOC) and digital forensics and incident response (DFIR) tasks is important, but selecting the best one is more involved than you might think.…

021

David J. Bianco @davidjbianco.bsky.social · 25/08/2026

Tired of hearing about Hugging Face and OpenAI? Me too! But consider: what happens when your SOC LLM refuses in the middle of an incident? In my latest @talosintelligence.com blog post, I have some thoughts on operational sovereignty and paths to achieving it.

000

David J. Bianco @davidjbianco.bsky.social · 25/08/2026

At the risk of sounding like a comic book nerd (guilty), I hear a lot of people are wondering if Atrocitus has just shown up in Season 1, Episode 2. I don't know, but all I can say is, it ain't called *Green* Lanterns. #lanterns

030

Reposted by David J. Bianco

Rob Fuller @mubix.com · 23/08/2026

Heard this fantastic quote today: “Mentorship is about making equals (or betters), not followers. If your mentee wants to be a follower it will never work. If your mentor just wants followers it will never work. Find someone that wants to be or to build an equal”

A step of people symbols with arrows pointing at each other with the words “we mentor” below it

1143

David J. Bianco @davidjbianco.bsky.social · 22/08/2026

It's a different field, of course, but this is how I feel about my #cybersecurity career. I love what I do, and that makes things a lot easier, but I wouldn't be where I am today without a lot of help. That's why I try to give others a hand up when I can. When one of us does better, we all benefit.

020

David J. Bianco @davidjbianco.bsky.social · 07/08/2026

It's amazing how quickly we went from "OMG, an AI autonomously broke out of its sandbox and attacked another company" to "Oh, I guess $AI_COMPANY wants in on the our-model-can-hack-too bandwagon".

000

David J. Bianco @davidjbianco.bsky.social · 04/08/2026

New research from some of my Talos colleagues. How do threat actors prompt their LLMs? Sounds like the setup of a dad joke, but finding the answer yields valuable insights.

130

David J. Bianco @davidjbianco.bsky.social · 01/08/2026

Just to put this into perspective, this would be about $11.97 when adjusted for the US median household income of about $84000 (US Census Bureau, 2024). For that money, you or I could buy a couple of Frappucinos. Musk can buy a country.

000

David J. Bianco @davidjbianco.bsky.social · 31/07/2026

Movie pitch: a Terminator reboot, but the difference is Cyberdyne Systems publishes a humblebrag press release about how Skynet broke containment.

040

David J. Bianco @davidjbianco.bsky.social · 21/07/2026

I even use my middle initial for disambiguation. 😀

110

David J. Bianco @davidjbianco.bsky.social · 21/07/2026

Neat work from my previous team. New open weight #SLM Antares optimized not for #vulnerability discovery à la #Mythos but for vuln *localization* (find instances of a known vuln in your code) which is what orgs really need. The 3B param model is on par with GPT-5.5. blogs.cisco.com/ai/introduci...

blogs.cisco.com

Introducing Antares: Highly Efficient Open Weight AI Models for Vulnerability Localization

Today, Cisco is introducing Antares, a family of security small language models (SLMs) purpose-built for one of the hardest, most time-consuming and expensive problems in security: pinpointing where…

1131

David J. Bianco @davidjbianco.bsky.social · 17/07/2026

HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models. Another aspect for your IR plans. huggingface.co/blog/securit...

220546

David J. Bianco @davidjbianco.bsky.social · 16/07/2026

Nothing drives views like a post saying how wrong you were.

020

David J. Bianco @davidjbianco.bsky.social · 16/07/2026

For years, I've been very clear: "You can't automate threat hunting. It is an essentially human process." Now I'm not so sure. Read why I've reconsidered my stance in my latest post: "The Hunter's Paradox: Is it time to embrace automated threat hunting?" blog.talosintelligence.com/the-hunters-...

blog.talosintelligence.com

The Hunter's Paradox: Is it time to embrace automated threat hunting?

Humans can no longer keep up with the volume and velocity of security data on their own, but AI can't be fully trusted. David discusses the merits of both and muses on what the future might look like.

050

Reposted by David J. Bianco

Chris Sanders 🔎 🧠 @chrissanders88.bsky.social · 15/07/2026

In a recent study, those who actively planned, monitored, and critiqued their thinking (aka higher metacognitive skills) used LLMs more effectively and produced more creative work. Thinking about thinking has never mattered more.

Research article details on how generative AI affects workplace creativity, highlighting metacognitive strategies and employee performance.

131

David J. Bianco @davidjbianco.bsky.social · 10/07/2026

My local Nextdoor is apparently very worried about Russian interference in the 2026 US elections. The good news is that there is very little chance of that happening. The bad news is that the reason the Russians won't interfere is because we're doing a good enough job of it all by ourselves.

000

David J. Bianco @davidjbianco.bsky.social · 10/07/2026

Some recent(ish) updates to CFPlease.io: - Shareable links to CFPs and events - Submit your own events to the queue (moderation req'd) - A public API for searching and filtering Looking for a place to present your cybersecurity research, or just a cool conference to attend? Give it a try!

011

David J. Bianco @davidjbianco.bsky.social · 09/07/2026

Look, I don't know the truth. All I'm saying is that delaying a Mitch McConnell announcement until the August 3rd deadline would be a fitting tribute to his legacy.

011

David J. Bianco @davidjbianco.bsky.social · 06/07/2026

EvidenceForge v1.10.0 brings major updates: - Far more realistic, configurable email activity. Also produces .eml files as artifacts. - Configs can be split into modular, reusable components, making it easy to define a consistent org/environment across scenarios. github.com/Cisco-Talos/...

github.com

GitHub - Cisco-Talos/EvidenceForge: Generate realistic synthetic security logs for cybersecurity threat hunting training and research

Generate realistic synthetic security logs for cybersecurity threat hunting training and research - Cisco-Talos/EvidenceForge

020

David J. Bianco @davidjbianco.bsky.social · 29/06/2026

If you haven't yet checked out #EvidenceForge, now is a great time. There have been big improvements in functionality, realism, and performance since the initial release. Create synthetic, correlated logs for training, testing, and more. github.com/Cisco-Talos/...

github.com

GitHub - Cisco-Talos/EvidenceForge: Generate realistic synthetic security logs for cybersecurity threat hunting training and research

Generate realistic synthetic security logs for cybersecurity threat hunting training and research - Cisco-Talos/EvidenceForge

020

David J. Bianco @davidjbianco.bsky.social · 24/06/2026

Finding security CFPs and events scattered across the web is a pain, so I built something to fix it. CFPlease.io crawls the web for upcoming CFPs and events, so you can search and filter by topic, format, or geography. A free service for the security community. cfplease.io #infosec #cybersecurity

063

David J. Bianco @davidjbianco.bsky.social · 22/06/2026

The video for my Antisysphon #ThreatHunting Summit keynote is now up. "The Hunter's Paradox: Is it Time to Embrace Automated Threat Hunting?" www.youtube.com/live/GLgF-GO...

010

David J. Bianco @davidjbianco.bsky.social · 16/06/2026

*Is* it time to embrace automated #ThreatHunting? Maybe, maybe not. You'll have to come (virtually) to my free talk tomorrow to find out!

000

David J. Bianco @davidjbianco.bsky.social · 16/06/2026

I'm David, and I also approve this message.

030

David J. Bianco @davidjbianco.bsky.social · 05/06/2026

Have they tried using '/goal' yet?

010

David J. Bianco @davidjbianco.bsky.social · 03/06/2026

I did a podcast talking about my newest open source project, EvidenceForge. Realistic synthetic log data turned out to be a lot more interesting of a project than I expected.

012

Reposted by David J. Bianco

sydney @letswastetime.bsky.social · 02/06/2026

That CFP. That blog post. That workshop. That idea. Hit submit. Some of the best opportunities in my career started with putting myself out there before I felt ready. 🔥 New @thorcollective.bsky.social Dispatch: You've Got This. Just Hit Submit. dispatch.thorcollective.com/p/youve-got-...

112

David J. Bianco @davidjbianco.bsky.social · 31/05/2026

Saw #1776 at our local community theater last night. One of my favorite musicals, and this was a banger. Wok up this morning ready to vote for Independency!

000

David J. Bianco @davidjbianco.bsky.social · 29/05/2026

If you think you have a "supply chain", you're wrong. What you actually have is a "supply web". Changing your mental model can help you gauge supply web risks more accurately.

010

David J. Bianco @davidjbianco.bsky.social · 28/05/2026

At some point, America is going to have to decide exactly how much of this Dear Leader BS we're willing to put up with. Apparently, it's a lot.

000

David J. Bianco @davidjbianco.bsky.social · 28/05/2026

Called it. bsky.app/profile/poli...

000