David J. Bianco (He/Him)

https://infosec.exchange/@DavidJBianco

Threat Hunting, Cyber Threat Intelligence, incident detection and response. SANS Certified Instructor. Special interest in helping newbies get into the field. He/Him

Blog: https://detect-respond.blogspot.com
Twitter: David J. Bianco (He/Him) (npub157v…heax)
Twittodon: https://twittodon.com/share.php?t=DavidJBianco&[email protected]
Fave Shape: Pyramid

Public Key

npub157vpu8dunkj3athnxxjs88xsu8mgffhtz5c8dzd4kml6lmznl8ks4vheax

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs20xq7rk7fmfg74menrfgrnngwra5y5m432vrk3x6mdla0a3flnmgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsv7m0dk

Publishing to

relay.primal.net

relay.damus.io

nos.lol

Author Public Key

npub157vpu8dunkj3athnxxjs88xsu8mgffhtz5c8dzd4kml6lmznl8ks4vheax

Show more details

Last Notes

2026-07-17 21:59:16 CEST

HuggingFace got hacked by an agentic system. That's not the important part. What really stuck out to me was the asymmetry in #AI guardrails they experienced. The attacker had basically no constraints, but HF's initial response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local-only models. In the middle of an incident.
Another aspect for your IR plans.
https://huggingface.co/blog/security-incident-july-2026
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/937/087/730/249/171/original/f0a57f05fe593540.png

2026-07-16 17:06:46 CEST

For years, I've been very clear: "You can't automate threat hunting. It is an essentially human process." Now I'm not so sure.
Read why I've reconsidered my stance in my fresh new post: "The Hunter's Paradox: Is it time to embrace automated threat hunting?"
https://blog.talosintelligence.com/the-hunters-paradox-is-it-time-to-embrace-automated-threat-hunting/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/930/275/263/014/075/original/19b56fafc373df09.jpeg

2026-05-29 21:53:10 CEST

If you think you have a "supply chain", you're wrong. What you actually have is a "supply web".
Changing your mental model can help you gauge supply web risks more accurately.

2026-05-20 22:55:47 CEST

If AI driven attacks become more prevalent, it'll only be a matter of time before attackers push the token burden on to their victims, using the AI that's already (probably) there.
I'm calling it "living off the lAInd".*
*Jokey name. Probably will happen, though.