Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing IOC-Hunter

hunt.io | blog | #ai-security | #threat-intelligence | #automation | #llm | #ioc | #ioc-hunter

Summary

Hunt launches IOC-Hunter, which monitors 140+ security publications and uses LLM APIs to extract structured IOCs — IPs, hostnames, file hashes — in real time to speed up investigations.
Published
Collected

original ↗

Related coverage

blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
blog · projectzero.google
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
How Project Zero evolved Project Naptime into Big Sleep, using large language models to find vulnerabilities in real-world software, with early results and observations.
blog · projectzero.google
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Project Naptime evaluates the offensive security capabilities of large language models, presenting a methodology, tooling setup, and early successes finding real vulnerabilities.
blog · jfrog.com
Integrating Vector Databases with LLMs: A Hands-On Guide
Welcome to our hands-on guide where we dive into the world of Large Language Models (LLMs) and their synergy with Vector Databases. LLMs have been a game-changer in the tech world, driving innovation in application development. However, their full potential is often untapped when used in isolation. This is where Vector Databases step in, enhancing…
research · hunt.io
[CVE-2024-21762] Thai Broadband Provider Targeted via FortiGate SSL-VPN and MeshCentral Persistence
Hunt.io uncovered an open directory revealing an active intrusion into Thai ISP 3BB: FortiGate SSL-VPN exploitation via CVE-2024-21762, MeshCentral persistence, and RADIUS credential theft.
back