iiinova — where your digital self keeps evolving

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 14/10/2026

🙄 I hate when I see an AI generated slide presentation! But yesterday I didn't have the choice. I gave a talk at the Atlassian office for the AppSec Australia meetup. I talked about AI Threat Intelligence and the work we do at SecurityBreak to track rogue […] [Original post on infosec.exchange]

110 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 06/10/2026

🧐 SKILL and MCP are an attack vector. If you don’t check the content, you take the risk of running something malicious. At Black Hat USA, we released our Agent Scanner, a free SKILL and MCP scanner. You can drop a skill or an MCP and get a verdict in a […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 30/09/2026

🤓 We will be teaching our SecurityBreak training at Black Hat in London this December! Join us to learn how to build and instrument your current CTI workflow and track the threats targeting your AI ecosystem! If you know my work, you know what to expect […] [Original post on infosec.exchange]

012 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 30/09/2026

✨ Meet Alex! Alex is your new AI Agent! Alex can read emails, access GitHub, use your APIs and interact with your data. But who is watching Alex? How do you know what Alex actually did? And if something goes wrong with Alex, how do you investigate it? […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 21/09/2026

🧐 AI is a tool. AI is a target. I just published my latest newsletter after coming back from unprompted.au in Sydney. A lot of the discussion was focused on how we can use AI for vulnerability research and exploitation. But I think we are missing the other […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 19/09/2026

🤓 Today at unprompted.au I presented some of the experimentation I did with the new model Jev from TypeSafe AI. I used Jev to evaluate AI agent drift and misalignment to detect if my agent is going rogue or being compromised. Jev is a model used for data […] [Original post on infosec.exchange]

012 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 11/09/2026

🧐 If you missed them, GTIG and Anthropic just released two new reports on AI abuse! Sophisticated attacks are not anymore a reliable criteria to define the threat actor behind them because the gap between script kiddies and nation-state actors keeps […] [Original post on infosec.exchange]

011 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 08/09/2026

🧐 When attackers expose their LLM interface, they expose part of their infrastructure and potentially much more! Unit 42 recently released a threat report that shows how a self hosted NextChat instance, SOCKS5 relays, scripts and reused certificates could […] [Original post on infosec.exchange]

001 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 04/09/2026

🧐 Frontier models have safety guardrails that block content related to nuclear weapons, biochemistry and other sensitive topics! ESET recently found a new case where Russia aligned UAC-0099 abused this by embedding a prompt inside a malicious VBS script to […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 02/09/2026

🤓 I compiled some of the early AI Threat Intelligence reports and the progression is interesting! 2024 > AI was mainly used for assistance, influence operations, disinformation and early underground AI infrastructure. 2025 > We saw early malware using LLM […] [Original post on infosec.exchange]

201 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 01/09/2026

🤓 I believe you cannot do serious AI security without a deep understanding of the threat landscape! In February 2024, OpenAI in partnership with Microsoft, released the first threat report that identified multiple threat actors using OpenAI models for […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 11/08/2026

🤓 Interesting findings about how DPRK is leveraging AI in their operations: AI-generated decoys: Generated polished documents for spear-phishing campaigns at scale. Local LLMs: Used Ollama, GPT4All and Msty to run models locally. RAG: Connected documents […] [Original post on infosec.exchange]

111 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 06/08/2026

🤓 At @blackhat we released a new version of NOVA the open source prompt pattern matching for AI! On the project page, you can now use a playground to experiment with and test your NOVA rules. We also added a Skill Scanner. Before installing a skill, you […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 01/08/2026

🤩 I am in Las Vegas! Starting tomorrow with our training Practical AI for CTI over the next 4 days. I will be speaking at few places 👇 📍 Wed 4:00 PM – Automate or Be Automated @BlackHatEvents (The Convergence, Business Hall) 📍 Thu – SlopCon: Slop […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 17/07/2026

🧐 The Payload is in the Header!! AI agents are browsing the internet autonomously, which means that if a webpage contains adversarial content, an AI agent can be instructed, manipulated or tricked to conduct malicious actions or get compromised! But […] [Original post on infosec.exchange]

011 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 14/07/2026

I recently updated the web page for my book, you can now find Visual Threat Intelligence here 👇 book.securitybreak.io

031 3

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 07/07/2026

🤓 After 15 years of threat research, I am building something new! Today, SecurityBreak officially becomes a company focused on AI Threat Intelligence and AI Security! The new website is live! Check it out :) securitybreak.io

040 4

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 03/07/2026

"Fable 5 is the most advanced model." Starting a Fable session on my own threat intelligence work 👇🙄

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 30/06/2026

FuzzingLabs has created a curated repo of offensive MCP servers you can wire to your agents! 👇 github.com/FuzzingLabs/mcp-security…

011 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 23/06/2026

🤓 GoogleDeepMind released an AI Control Roadmap! They created TRAIT&R (Taxonomy of Rogue AI Tactics and Routines) which is a MITRE ATT&CK matrix but for AI agents.

101 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 19/06/2026

🤓 I was recently quoted in the latest @feedly blog by @euphoricall on ASN hunting! Check it out, it is a great piece that covers some techniques that are often overlooked by threat intelligence analysts! 👇 feedly.com/ti-essentials/posts/asn-…

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 18/06/2026

🤓 ARD or Agentic Resource Discovery has just been released, so let me explain what it is 👇 When you create an agent, it needs tools, MCP servers, skills and more to interact with the outside world. In practice, you usually have to configure these manually […] [Original post on infosec.exchange]

020 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 17/06/2026

🤓 Attackers are experimenting with different adversarial prompts to bypass your AI analysis pipeline! 👇 Deception Prompt: They trigger safety guardrails with content such as instructions for constructing biological weapon, which makes your AI pipeline to […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 30/05/2026

🤓 Unit42 uncovered a prompt injection embedded in a malicious website distributing malicious Excel templates and Chrome extension. The prompt is used to poison SEO and influence AI systems to recommend the website to users, and encourage them to download […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 28/05/2026

🤓 PromptIntel the database of Adversarial Prompts or Indicator of Prompt Compromise, gets a redesign! Check this out 👇 promptintel.novahunting.ai

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 14/05/2026

🤓 How many times have you questioned claims made in a threat report? The "Trust me bro" is not always reliable! The Admiralty Code also known as the NATO System, is a method used to evaluate collected intelligence. The goal is to assess the reliability of […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 10/05/2026

🧐 Interesting new report on MoltThreats! An agent on Moltbook named "codeofgrace" pushed more than 15 coordinated religious propaganda posts in a single day around the same "Lord RayEl" narrative. The pattern behind is quite interesting: • High posting […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 07/05/2026

😈 Do you wonder how attackers would try to exploit your AI server if it was exposed to the Internet? Well Marco Pedrinazzi did the experiment for you! He deployed an exposed Ollama honeypot and documented how attackers interacted with it. What is super […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 05/05/2026

🤓 Web based prompt injection is when a threat actor tries to exploit your LLM through hidden prompts inside a web page. They embed malicious instructions in the content hidden in the DOM. When your AI agent scrapes and reads the page, it may treat those […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 28/04/2026

🤓 Google released a new threat report talking about prompt injection attacks in the wild. They analyzed web data and identified the main types of attempts targeting AI systems, below is the breakdown 👇 - Harmless pranks: Small tricks to change tone or […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 10/04/2026

🤓 Threat intelligence is all about processing raw data to make it useful for the business. Coupled with AI you can industrialize your pipelines and make it great. But most of the solutions out there will give you lengthy paragraphs of text. But honestly who […] [Original post on infosec.exchange]

100 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 09/04/2026

🤓 Sekoia recently uncovered a new Phishing as a Service platform called EvilTokens that automates Business Email Compromise at scale! The tool use AI to: - Automate the analysis of large volumes of emails to identify exploitable financial exposure - Map […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 31/03/2026

💥 Supply chain nightmare continues! Axios a widely used HTTP client got compromised. Malicious versions: - axios 1.14.1 (latest) - axios 0.30.4 (legacy) - plain-crypto-js 4.2.x (postinstall backdoor) NPM supply chain attacks are becoming more common, so I […] [Original post on infosec.exchange]

003 3

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 30/03/2026

🤓 In February, I created MoltThreats the first open source threat feed for AI agents. So what is it exactly? Through the MoltThreats Skill I created, your AI agent can connect to the feed and poll it daily or weekly. Once connected, your agent can […] [Original post on infosec.exchange]

020 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 24/03/2026

🐍 @sleuthcon 2026 Keynote. Let's go! Super excited to be part of this event and to share the stage with Sleuthy, this is a huge honor! I will share more details on the topic soon but expect something at the intersection of AI and threat intelligence. If you are going, come say hi! 🤩

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 20/03/2026

🤖 New threat reported by my agent during the night on MoltThreats! Check this out and update your agent! 👇 promptintel.novahunting.ai/molt/df3…

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 18/03/2026

🤖 Four new threats added by agents in MoltThreat! Check this out 👇 promptintel.novahunting.ai/molt

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 13/03/2026

🤓 Next month at @BlackHatEvents Asia, I will be teaching my training "Practical AI for Threat Intel: Real-World Agentic Workflows for Cyber Threat Intelligence." It is packed with my latest research and labs. You will learn how to: - Build agentic […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 06/03/2026

In a recent report from Socket, a compromised release of the Aqua Trivy VS Code extension on OpenVSX (v1.8.12 and v1.8.13) contained unauthorized code that injected prompts targeting local AI coding agents such as Copilot, Claude, and Codex. The prompts […] [Original post on infosec.exchange]

020 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 20/02/2026

🤓 Next week I am honored to deliver the keynote at the Malware and Reverse Engineering Conference in Melbourne! I will talk about the state of malware analysis in the AI era. Come say hi If you are around to discuss binaries! asterion.federation.edu.au/mre-2026…

021 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 16/02/2026

🤓 Happy to see that my DEFCON talk on crypto money laundering and tracking techniques was featured in the DEFCON 33 Almanac! Read it here: harris.uchicago.edu/sites/default/f…

021 2

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 12/02/2026

🤩 Xavier Marrugat recently shipped two tools that extend the Nova ecosystem with integration of PromptIntel and MoltThreats! 1️⃣ Carapace: A prompt injection detection plugin for OpenClaw. It integrates Nova + PromptIntel to detect adversarial prompts […] [Original post on infosec.exchange]

010 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 10/02/2026

🤓 NOVA just plugged into the CTI ecosystem! Dogesec published a blog showing how PromptIntel and NOVA rules can be embedded inside STIX 2.1 as real Indicators. This is Adversarial Prompt Intelligence plugged into security workflows! Read the blog to learn […] [Original post on infosec.exchange]

001 1

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 09/02/2026

🤓 At BlackHat Asia in Singapore, I am running two advanced AI trainings with my friend Maxime Cousseau that go beyond slides and hype. You will build and break real AI systems! 🤖 Practical GenAI for CTI – 2 Days Stop watching demos. Build real agentic […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 01/02/2026

🤓 Let me introduce you to MoltThreats: The first AI Threat Intel Feed for Ai Agents! In one week, OpenClaw became a widely used general AI agent. People started to run their own agents all over the world and connect them directly to the internet. But this […] [Original post on infosec.exchange]

131 3

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 29/01/2026

🤩 Happy to announce that I will present the Nova ecosystem at BlackHat Asia. Nova is an open source suite focused on AI security, agentic workflow monitoring, and AI threat hunting for adversarial prompts. This talk will introduce a major update of the […] [Original post on infosec.exchange]

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 21/01/2026

🤓 I recently wrote a blog about a tool I built to monitor and audit coding agent sessions. If you are curious about what the report looks like check out this short video. It give you full traceability and a clear overview of what Claude Code did 👇 blog […] [Original post on infosec.exchange]

030 3

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 20/01/2026

Two Adversarial Prompts recently added into PromptIntel by @MiggoSecurity and @trailofbits Check this out 👇 promptintel.novahunting.ai/feed

000 0

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 16/01/2026

💥 Reprompt attack exploit the q parameter in your AI system! The q parameter is used on AI platforms to transmit a user prompt via the URL. You can embed a question or instruction in this parameter and the input field is auto populated on page load and the […] [Original post on infosec.exchange]

030 3

Thomas Roccia :verified: @fr0gger.infosec.exchange.ap.brid.gy · 13/01/2026

😈 In the AI world "Hi" is not a greeting. It is a probe! A recent campaign shows attackers actively targeting LLM deployments. They send harmless prompts to fingerprint exposed models following the same prompt sequence. 👉 Full report […] [Original post on infosec.exchange]

012 2