iiinova — where your digital self keeps evolving

Daniel Gordon @validhorizon.bsky.social · 02/10/2026

💀💀💀💀💀💀💀💀

010

Daniel Gordon @validhorizon.bsky.social · 28/09/2026

In case anyone is curious about who broke TLP, lied about it, and then blocked me, it’s this guy.

110

Daniel Gordon @validhorizon.bsky.social · 13/09/2026

Eyal is exactly right. It has long been the case that threat actors would adopt the tools of pentesters. Now adversaries using LLMs are telling them that this is an authorized pentest and the LLM will often leave traces of that.

You can detect some AI-enabled attacks by searching for explicit indications of penetration testing. This happens because threat actors tell their LLMs they are performing authorized engagements even when using open weight models, or use pentesting harnesses like cyberstrikeAI, PentAGO, Hexstrike.

01613

Daniel Gordon @validhorizon.bsky.social · 24/07/2026

Updating blogs based on new information is normal and all naming schemes are bad in different ways; some are just less-bad.

100

Daniel Gordon @validhorizon.bsky.social · 08/06/2026

LMAO www.proofpoint.com/us/blog/thre...

000

Daniel Gordon @validhorizon.bsky.social · 20/02/2026

Oh I forgot HERE ARE THEIR PERFORMANCE REVIEWS LOL

040

Daniel Gordon @validhorizon.bsky.social · 20/02/2026

Oh we noticed a COVERT COMM CHANNEL IN HTML CODE COMMENTS. res.cloudinary.com/about-gitlab...

160

Daniel Gordon @validhorizon.bsky.social · 20/02/2026

Oh check out THIS SPREADSHEET OF THEIR FINANCES res.cloudinary.com/about-gitlab...

130

Daniel Gordon @validhorizon.bsky.social · 20/02/2026

Here is THEIR ORG CHART res.cloudinary.com/about-gitlab...

140

Daniel Gordon @validhorizon.bsky.social · 05/12/2025

Lol. Lmao. Also very on brand for them to be posting this where they did

010

Daniel Gordon @validhorizon.bsky.social · 01/12/2025

Me trying to study while North Korean hackers register new domains

040

Daniel Gordon @validhorizon.bsky.social · 27/10/2025

Sometimes they’re good at it and sometimes not. I’m going to do an entire talk on this sentence from a Kaspersky report in August.

120

Daniel Gordon @validhorizon.bsky.social · 20/09/2025

Ian is a secret operative of big Availability.

Picture of the CIA triad: Confidentiality Integrity and Availability

041

Daniel Gordon @validhorizon.bsky.social · 22/05/2025

I try not to dunk on people’s appearances but whoever thought espionage was sexy forgot to tell the GRU

050

Daniel Gordon @validhorizon.bsky.social · 25/04/2025

Why yes I did just achieve the pinnacle of my social media career, why do you ask.

Screenshot that Lesley Carhart followed me 😱

070

Daniel Gordon @validhorizon.bsky.social · 11/04/2025

Twitter somehow getting even weirder and scammier than it was already.

040

Daniel Gordon @validhorizon.bsky.social · 14/12/2024

uploads.dailydot.com/2024/06/they...

040

Daniel Gordon @validhorizon.bsky.social · 29/11/2024

I’m about to sign up for a course because I am bad at vacation. Big fan of @chrissanders88.bsky.social

140

Daniel Gordon @validhorizon.bsky.social · 25/11/2024

This was in no way a good use of my time but here’s the diagram which does not in any way resemble a Venn Diagram.

Badly spaced three bubble diagram connected by arrows to suggest a linear process. The bubbles are labeled “Terrorist Group”, “Terror Attack Victim” and “Society”. First bubble and arrow are red while the “Society” bubble is green. Arrows are labeled “the attack” and “Resultant Fear >> Political Pressure”.

1102

Daniel Gordon @validhorizon.bsky.social · 15/11/2024

I’m not just looking forward to CyberWarCon’s swag…but I am looking forward to the swag

0100

Daniel Gordon @validhorizon.bsky.social · 21/10/2024

Web server compromise. OST and commodity C2 frameworks. Hack and leak. Experimentation with new phishing filetypes. Cloud storage as infrastructure. More automation. More stages to evade sandboxes and more effort to evade analysis of a final stage Trojan that’s had development effort put into it.

Tweet from Steven Miller “In your opinion what are the biggest shifts in adversary tactics/behaviors in the last 10 years? Looking for high level, macro trends, backed by anecdotes or publicly documented examples.

142

Daniel Gordon @validhorizon.bsky.social · 13/10/2024

Options-IT is a service provider for finance sector but…looking at their website they service traditional finance orgs, NOT the kinds of crypto orgs that DPRK focused on post-2018.

100

Daniel Gordon @validhorizon.bsky.social · 15/04/2024

I am both very impressed with lineup and terrified by the power of the SleuthCon graphic design team. www.sleuthcon.com/speakers

110

Daniel Gordon @validhorizon.bsky.social · 31/03/2024

I’m sorry but “Many eyes makes all bugs shallow” is wrong but just completely an utterly unworkable unworkable in an adversarial context.

110

Daniel Gordon @validhorizon.bsky.social · 20/02/2024

This and the iSoon leak are a great way to start off the week.

000

Daniel Gordon @validhorizon.bsky.social · 19/02/2024

👀👀👀👀👀👀👀👀 x.com/azakasekai_/...

000

Daniel Gordon @validhorizon.bsky.social · 17/02/2024

I notice you glossed over that it was Code Pink doing vandalism and that Code Pink is totally fine with genocide as long as it’s in China. Also would be helpful to note that last I checked, Pelosi isn’t in the Knesset or Israeli war cabinet. 🤷‍♂️

040

Daniel Gordon @validhorizon.bsky.social · 16/02/2024

In general, I don’t like dunking on people but sometimes it’s called for.

010

Daniel Gordon @validhorizon.bsky.social · 19/01/2024

Nothing that DPRK received would offset the need for artillery and missiles in the short term leading up to a war. It only would make sense in the long term. If a full war broke out, everyone involved would lose, catastrophically.

000

Daniel Gordon @validhorizon.bsky.social · 19/12/2023

Everyone at the Desantis and Haley campaign HQs.

000

Daniel Gordon @validhorizon.bsky.social · 28/10/2023

@phildzikiy.bsky.social we gotta talk about how you use your free time.

100