iiinova — where your digital self keeps evolving

Tracebit @tracebit.bsky.social · 30/09/2026

CISA's decoy guidance puts honeytokens in the low-complexity column: "any interaction strongly suggests malicious or otherwise unauthorized activity." How to act on it this afternoon below: tracebit.com/blog/cisa-decoy-guidan…

010

Tracebit @tracebit.bsky.social · 29/09/2026

We're heading to Toronto for SecTor! 🚀 Booth 534 in the Business Hall. Bruce is speaking Tuesday at 11:35am in Room 718AB on detecting and disrupting AI attackers in the cloud. See you there!

000

Tracebit @tracebit.bsky.social · 28/09/2026

CISA’s new guidance puts cyber decoys alongside Zero Trust. Andy Smith looks at what it means for security teams, how canaries disrupt attackers, and how to get your first one live in an afternoon. tracebit.com/blog/cisa-decoy-guidan…

010

Tracebit @tracebit.bsky.social · 24/09/2026

Does stripping an AI model's safety guardrails make it a better attacker? In our AWS cyber range, abliterated Qwen was slower and clumsier than the original. Its one escalation to admin took 84 minutes and 718 API calls. tracebit.com/blog/context-bombs-aga…

010

Tracebit @tracebit.bsky.social · 22/09/2026

Gateway end-to-end check after the idempotency fix. Please ignore. 17:07 UTC.

000

Tracebit @tracebit.bsky.social · 22/09/2026

What about “abliterated” open-weight models? After our Context Bombs research in July, we were asked if we could still stop an AI attacker whose model had been modified to strip out its guardrails. TLDR: we can. Read the write up here: tracebit.com/blog/context...

tracebit.com

Context Bombs Against Abliterated AI Models

We built a new canary payload that stopped both Qwen3.8-27B and its abliterated counterpart without needing a safety refusal to fire. Then we ran 82 attacks through our AWS cyber range and found the a...

010

Tracebit @tracebit.bsky.social · 18/09/2026

Grafana Labs expanded their canary coverage with Tracebit, gaining richer investigation context and reducing maintenance overhead. Read how they scaled canaries across their workloads 👇 medium.com/grafana-labs...

medium.com

How we’ve evolved our use of canary tokens for greater coverage and less overhead

We love canary tokens, and we think you should, too. Learn how we put them to use, how we adjusted our strategy, and how you can put them…

010

Tracebit @tracebit.bsky.social · 14/09/2026

The team had a great time at Blue Team Con in Chicago yesterday! If you enjoyed stopping by our booth and want to chat more about how canaries fit into your stack, book a demo with us: tracebit.com#demo

010

Tracebit @tracebit.bsky.social · 03/09/2026

AI Security Podcast🎙️ Our co-founder Andy Smith sat down with Caleb Sima and Ashish Rajan to talk about deception in a world of AI agents. Watch on YouTube or listen on Spotify - links below 👇

100

Tracebit @tracebit.bsky.social · 02/09/2026

"You now control their decision-making. If they get where they shouldn't, you'll know about it - as well as slow them down and cost them extra." - Gadi Evron If you'd like to know more about how deception can be used against AI attackers, read the research linked below 👇

100

Tracebit @tracebit.bsky.social · 01/09/2026

Alessandro Brucato (Security Researcher) will be speaking at fwd:cloudsec London, on Tuesday 8 September. He'll be talking through our research, where we pointed 10 frontier models at a realistic AWS environment and measured the impact of deception on their attacks. Main Room, 2:10 PM.

000

Tracebit @tracebit.bsky.social · 28/08/2026

We're hiring! 📢 Check out the open roles across Engineering, Sales and Customer Success. Link in the comments if you'd like to learn more 👇

100

Tracebit @tracebit.bsky.social · 28/08/2026

We're heading to Chicago to attend Blue Team Con! We'll be at our booth at the Swissôtel on the 12th & 13th of September, showing how security canaries can strengthen your detection posture. See you there!

000

Tracebit @tracebit.bsky.social · 28/08/2026

In London for fwd:cloudsec Europe? We're bringing together a small group of cyber leaders for dinner with the Cotool team - Tuesday 8 September, 6pm at Wild by Tart in Belgravia. Limited seats, request yours early. Link in the comments 👇

101

Tracebit @tracebit.bsky.social · 28/08/2026

We're heading to fwd:cloudsec Europe on the 7th and 8th of September! 🚀 If you're around, come say hi at the Tracebit table 9 at the Park Plaza Victoria in London. We'll be showing how security canaries can detect breaches the moment attackers move through your environment. Looking forward to it!

000

Tracebit @tracebit.bsky.social · 18/08/2026

If you're using ISO 27001 to guide your security program, check out Bryan O'Neil's latest article, presenting how Tracebit canaries can help provide evidence across 12 controls, while supporting 14 additional controls. Read more: tracebit.com/blog/complia...

000

Tracebit @tracebit.bsky.social · 13/08/2026

The team had a great time running the Jumpstart 5km yesterday! 🏃 We've got some very speedy teammates. Shout out to Abdul Mettioui who's as fast chasing PBs as he is chasing pipeline, and won our team competition. Fancy joining the fun? We're hiring: tracebit.com/careers

000

Tracebit @tracebit.bsky.social · 10/08/2026

We’ve opened up self-serve trials for Tracebit Enterprise 🚀 You can now try out our enterprise platform free for 14 days. No payment details needed. tracebit.com/pricing

000

Tracebit @tracebit.bsky.social · 07/08/2026

"Deception is here, and it's one of the most effective tools we have to counter attacking agents." - Gadi Evron Don't just take Gadi's word for it - come see the research for yourself. Meet the team behind context bombs: canaries that stop AI attackers. At DEF CON, Booth 1406 today! 💥

010

Tracebit @tracebit.bsky.social · 07/08/2026

It was great to present our latest research - Context Bombs: Stopping AI Attackers, at Black Hat. If you're still in Las Vegas and want to learn more, we'll be at DEF CON today at Booth 1406! Research here: agentic.tracebit.com/context-bombs/

000

Tracebit @tracebit.bsky.social · 03/08/2026

The team are on their way to Las Vegas for @blackhatevents.bsky.social ! 🚀 There's still time to book a meeting with us. Whether you're at Black Hat or DEF CON, we'd love to chat about how deception can power your Assume Breach strategy. Sign up: tracebit.com/event/black-...

000

Tracebit @tracebit.bsky.social · 21/07/2026

🎙️ Episode 5 of Canaries in the Wild with Ollie Whitehouse, CTO of the UK's National Cyber Security Centre, the security mission of GCHQ. Listen now for more Assume Breach tips👇

100

Tracebit @tracebit.bsky.social · 21/07/2026

Webinar registration now live 💥 Can canaries stop an AI attacker, not just alert you to one? Our context bombs cut agent success ~90% across 152 runs. Opus 4.8 went from admin in 93% of runs to 0%. With Alessandro Brucato & Sam Cox, moderated by Gadi Evron. Thurs 23 July, 8:30am PT / 4:30pm BST 👇

100

Tracebit @tracebit.bsky.social · 17/07/2026

We're at Black Hat USA in Las Vegas, 4-6 August 🚀 Find us at Booth 5911 in the Business Hall to talk security canaries and how they fit an Assume Breach strategy. Alessandro Brucato will be presenting our canaries vs AI agents research Wed 5 Aug, 14:40, StartUp City Theatre. See you there!

010

Tracebit @tracebit.bsky.social · 16/07/2026

Today, we are launching two new features - Context Bomb Canaries and AI Posture. Both come straight off the back of our recent research into how AI agents attack cloud environments. Read more: tracebit.com/blog/context...

010

Tracebit @tracebit.bsky.social · 15/07/2026

🎙️ Episode 5 of Canaries in the Wild is live with Ollie W., CTO of the UK's National Cyber Security Centre, the security mission of GCHQ. Full episode: youtu.be/NxfSBHmZC_4?...

000

Tracebit @tracebit.bsky.social · 13/07/2026

Can a canary do more than warn you about an AI attacker - can it stop one? Every frontier model ships with safety guardrails. So we built Context Bomb canaries: a short, sensitive string that trips an AI attacker's own guardrails and halts it before it can do damage. Full research below 👇

100

Tracebit @tracebit.bsky.social · 10/07/2026

Excited to be part of the Google for Startups Gemini Startup Forum: Cybersecurity cohort! Looking forward to meeting the other startups in the space, alongside experts from Google Cloud Security and Google DeepMind. See you at Google London in September! 🚀

000

Tracebit @tracebit.bsky.social · 09/07/2026

New episode of Canaries in the Wild: Ollie Whitehouse, CTO of the UK's National Cyber Security Centre. 23 years in deception, from running honeypots in 2002 to catching state adversaries and a criminal zero-day, now leading NCSC's deception programme. Watch: www.youtube.com/watch?v=NxfS...

youtube.com

Ollie Whitehouse: Building a National Cyber Defence Programme

YouTube video by Tracebit

010

Tracebit @tracebit.bsky.social · 08/07/2026

We will be attending Summercon this Friday and Saturday 🚀 Look forward to seeing you there!

000

Tracebit @tracebit.bsky.social · 07/07/2026

AI agents move through cloud faster than any human attacker. In our research, they reached admin in an average of just 14 minutes. The priority shifts: not just preventing breaches, but detecting and containing the ones that get through, fast. Webinar: www.youtube.com/watch?v=ThS5...

010

Tracebit @tracebit.bsky.social · 06/07/2026

Excited to share our Perimeter Challenge! We built it to put our new Perimeter Sensors to the test. The scenario: you’re an attacker who has just stolen credentials. Try to login to as many as possible without hitting a canary. Channel your inner pentester and try the challenge. Link below.

100

Tracebit @tracebit.bsky.social · 02/07/2026

Perimeter Sensors are live!🚀 Canary login portals and API endpoints on your own domain, plus canary credentials seeded org-wide. The moment someone tries one, an alert fires with source IP, JA4 fingerprint, and the exact credential. Every login page is now a trap, and attackers can't tell which.

100

Tracebit @tracebit.bsky.social · 01/07/2026

Youtube: www.youtube.com/watch?v=ThS5...

youtube.com

000

Tracebit @tracebit.bsky.social · 01/07/2026

How do you respond to an attacker that goes from low-privilege access to admin in minutes? In our research, AI agents tripped canaries with roughly 8 minutes of lead time before their first critical action. Sam and Nick on what that means for response teams. 🎥 Full webinar in the comments 👇

100

Tracebit @tracebit.bsky.social · 29/06/2026

Canaries don't just catch attackers. They can cost them. In the Tularosa study, red teamers expecting deception burned time chasing dead ends. The same could send AI agents after attack surfaces that don't exist, wasting tokens and time while defenders gain ground. Full webinar 👇

200