ThreatIntel Strategist at VirusTotal. Former Kaspersky - GReAT. APT hunter and Threat Intel war veteran. Progressive metal fan. Tweets are my own.
Barcelona
Joined July 2008
- Tweets1.7K
- Following575
- Followers2.7K
- Likes375
Vicente Diaz retweeted
New Monday Brief is live.
This week the attacker's R&D budget shrank while your attack surface grew. Tricked AI bots, automated EDR evasion, a Claude Code repo takeover, and fake recruiters. No zero-days needed.
Plus a first for us: our debut guest perspective, featuring the great Vicente Diaz @trompi
Douglas McKee (@fulmetalpackets) thinks 🔴
Ismael Valenzuela (@aboutsecurity) 🔵
Vicente Diaz (@trompi) adds the threat intel lens 🔍
open.substack.com/pub/themon…
#ThinkRedActBlue #TheMondayBrief
Vicente Diaz retweeted
📢 Yes. It’s here. Absolutely mind blowing. The highlights of the #PIVOTcon24 #agenda.
You have goosebumps all over your bodies? Drrrrrrrrumrrrrrrrroll.. 🥁🥁🥁 Go ahead and check them out! We still have some tickets😉
#ThreatIntel #CTI 🧵1/15
pivotcon.org/agenda/
Vicente Diaz retweeted
1/4 While our PC is reviewing all submissions, we decided to tell you a bit more about pivotal people who are standing behind #PIVOTcon24.
#ThreatIntel #CTI
Vicente Diaz retweeted
We are not here to judge! We want to carefully pick the most interesting content for @pivot_con. Welcome our Program Committee and don’t forget to submit your paper pivotcon.org/programme-commi…
#PIVOTcon24 #ThreatIntel #CTI #PIVOTconCFP
Vicente Diaz retweeted
PIVOTcon is finally out! This has been a nice project in the making, and we are just starting: join me + @secman_pl in Malaga, 8-10 May 2024 for a #threatintel conference, in a trusted environment (vetted attendees only) where we can push the #cti bar a little further #PIVOTcon24
Are you ready to pivot?!
Come to Malaga on May 8-10, 2024!
#PIVOTcon24 is crafted to bring together professionals from diverse backgrounds – private sector, government, law enforcement, military, academics, and investigative journalists.
#ThreatIntel #CTI
Vicente Diaz retweeted
Seeing some qs on what Gemini *is* (beyond the zodiac :). Best way to understand Gemini’s underlying amazing capabilities is to see them in action, take a look ⬇️
Readers added context they thought people might want to know
Google has admitted that the researchers fed still images to the model and edited together successful responses, partially misrepresenting the model's capabilities.
As noted on their youtube channel description provided a disclosure of video edits.
bbc.com/news/technolog…
Vicente Diaz retweeted
New VT Academy training for SOC and IR analysts, led by @digihash! Learn how to efficiently and successfully investigate and contextualize any malicious activity. Watch now: youtube.com/playlist?list=PL…
Chinese Gov Hackers Caught Hiding in Cisco Router Firmware securityweek.com/chinese-gov…
Results of Major Technical Investigations for Storm-0558 Key Acquisition: crash dump contains crypto key, dump moved to debug env (not air gapped) for analysis, attackers sit there, use key to access gov corp mail as api accepts consumer key in corp env msrc.microsoft.com/blog/2023…
Vicente Diaz retweeted
Join us next August 30th 17:00 CEST for a new Threat Hunting live session with a focus on VT's new YARA Netloc capabilities, by @leximagination: brighttalk.com/webcast/18282…
Vicente Diaz retweeted
We keep adding more security partners to our Crowdsourced AI effort. We are thrilled to welcome NICS Lab and their AI analysis engine for Powershell scripts, learn more about it at blog.virustotal.com/2023/08/…, by @bquintero
Vicente Diaz retweeted
@VirusTotal's new YARA Netloc feature is insanely helpful for infrastructure tracking. If you are not using it already, you should fix that.
Fresh blog with ideas on getting started. Includes highlights of some DPRK #kimsuky fun. 👇
sentinelone.com/blog/illicit…
Vicente Diaz retweeted
You can now automatically generate YARA LiveHunt rules for IOC tracking. Learn how, by @leximagination:
blog.virustotal.com/2023/08/…
Vicente Diaz retweeted
Our new VirusTotal Malware Trends Report: "Emerging formats and delivery techniques" is out! by @gerardofn, @alexey_firsh, @entdark_ blog.virustotal.com/2023/07/…
Vicente Diaz retweeted
Today we announce YARA Netloc, a new feature extending YARA's supported entities from traditional files to network infra, including domains, URLs and IPs. This opens endless possibilities for hunting and monitoring. All details here, by @leximagination: blog.virustotal.com/2023/07/…
Vicente Diaz retweeted
Today we launch VirusTotal's Crowdsourced AI, our open initiative for the security community to explore AI's capabilities to improve threat detection and response: blog.virustotal.com/2023/07/… by @bquintero
Vicente Diaz retweeted
Syntax highlighting, auto-complete, templates, testing capabilities ... Our new YARA editor couldn't look better! Check out all the details here, by @leximagination: blog.virustotal.com/2023/07/…
Vicente Diaz retweeted
We improved the identification of file formats using Generative AI. Find here all the details, by @bquintero: blog.virustotal.com/2023/06/…
Vicente Diaz retweeted
We've been working with @Mandiant's @JWilsonSecurity
to add Permhash to VirusTotal, a new way to unearth adversary's infrastructure and toolkits by leveraging permissions similarity. Details here, by @zenitrame: blog.virustotal.com/2023/05/…
