Threat hunting and malware analysis live! Let's find these naughty malware authors!
#VTuber #Malware #ReverseEngineering #ThreatHunting #URLScan #Ghidra
| mlget | http://github.com/xorhex/mlget |
| blog | https://blog.xorhex.com |
| twittodon | https://twittodon.com/share.php?t=xorhex&[email protected] |
Threat hunting and malware analysis live! Let's find these naughty malware authors!
#VTuber #Malware #ReverseEngineering #ThreatHunting #URLScan #Ghidra
Ironically, S4 dropped my talk on vibe coding ICS malware on the same day that non-functional AI-slop OT "malware" is making headlines. It’s hype “malware” distracting us from real threats.
More to say, but it's Friday :) In the meantime, I hope you enjoy the talk.

RE: https://infosec.exchange/@dwmetz/116422294193472571
Thanks for the shout out @bakerstreetforensics.com 🫶
For those that have not checked out #MalChela, it's pretty slick. You can integrate your own custom python scripts into it, allowing them to be found and executed in one place 😀
Obfuscation vs The Optimizer: A Battle in LLVM Middle End.
@yates82 shows us how the continuous improvement of the LLVM optimizer defeats naive code obfuscation, and how the obfuscator can fight back.
An eternal fight in which all victories are ephemeral
https://blog.quarkslab.com/obfuscation-vs-the-optimizer-an-llvm-middle-end-arms-race.html
From the same author as BlueHammer we now have RedSun.
This works ~100% reliably to go from unprivileged user to SYSTEM against Windows 11 and Windows Server 2019+ with April 2026 updates, as well as Windows 10, as long as you have Windows Defender enabled. Any system that has cldapi.dll should be affected.
Olympic National Park Backcountry permits are open today.
Enchanted Valley is inaccessible due to multiple road washouts. TBD if it opens at all this year. Sul Doc area still has some mid week availability. The Hoh and Grand Valley have plenty still available.
I'm planning a two night, newbie trip for September. Was going to do Enchanted Valley. Now I'm not sure. Might see if I can get Mt Margaret Wilderness again...
Missed a talk at Insomni'hack 2026? Good news: every session is now available to stream on our YouTube channel.
Watch your favourite topic: https://ow.ly/y8Tj50YJUhr