Gabriel
@morecoffeeplz.bsky.social
AI Research scientist. Former OpenAI, Apple infosec. “Professor” at John’s Hopkins SAIS Alperovitch Institute. Great deceiver of hike length and difficulty.
“Our model is very dangerous, but also not quite functional enough to cause damage
Also here are no indicators that the community could use to identify more abuse.”
Cmon folks, if you are serious about stopping AI abuse then let’s see less marketing and more actionable intel.
Also here are no indicators that the community could use to identify more abuse.”
Cmon folks, if you are serious about stopping AI abuse then let’s see less marketing and more actionable intel.
Anthropoic describes this as “AI-orchestrated cyber espionage”.
A grown-up would describe it as “a cyber espionage operator delegated the most basic and tedious tasks of an intrusion to an automation tool that said operator still had to consistently supervise and sanity check.”
brb becoming joker
A grown-up would describe it as “a cyber espionage operator delegated the most basic and tedious tasks of an intrusion to an automation tool that said operator still had to consistently supervise and sanity check.”
brb becoming joker
November 15, 2025 at 2:32 AM
“Our model is very dangerous, but also not quite functional enough to cause damage
Also here are no indicators that the community could use to identify more abuse.”
Cmon folks, if you are serious about stopping AI abuse then let’s see less marketing and more actionable intel.
Also here are no indicators that the community could use to identify more abuse.”
Cmon folks, if you are serious about stopping AI abuse then let’s see less marketing and more actionable intel.
Reposted by Gabriel
DepthAnything3 slam
November 14, 2025 at 6:47 PM
DepthAnything3 slam
Reposted by Gabriel
Good things are possible and we don’t have to settle.
November 5, 2025 at 3:35 AM
Good things are possible and we don’t have to settle.
Reposted by Gabriel
2026 DBIR sneak peek:
“Water plays an increasingly significant role in [ransomware] attacks. In 2024, 100% of recorded ransomware events were attributed to threat actors that drink water”
“Water plays an increasingly significant role in [ransomware] attacks. In 2024, 100% of recorded ransomware events were attributed to threat actors that drink water”
November 3, 2025 at 5:36 PM
2026 DBIR sneak peek:
“Water plays an increasingly significant role in [ransomware] attacks. In 2024, 100% of recorded ransomware events were attributed to threat actors that drink water”
“Water plays an increasingly significant role in [ransomware] attacks. In 2024, 100% of recorded ransomware events were attributed to threat actors that drink water”
Our presentation from LabsCon25 for those who missed it - LLM Enabled Malware In The Wild.
www.sentinelone.com/labs/labscon...
www.sentinelone.com/labs/labscon...
LABScon25 Replay | LLM-Enabled Malware In the Wild
Learn how to detect malware that generates code at runtime. SentinelLABS reveals hunting techniques and how to uncover novel AI-enabled threats.
www.sentinelone.com
November 3, 2025 at 3:43 PM
Our presentation from LabsCon25 for those who missed it - LLM Enabled Malware In The Wild.
www.sentinelone.com/labs/labscon...
www.sentinelone.com/labs/labscon...
I miss when the internet was fun.
October 31, 2025 at 5:22 PM
I miss when the internet was fun.
Reposted by Gabriel
What if we did a single run and declared victory
October 23, 2025 at 2:28 AM
What if we did a single run and declared victory
Reposted by Gabriel
"Sunset Dunes is a testament to what happens when San Francisco thinks big and invests in public spaces. [...] And it reminds us that we shouldn’t let fear of change keep us from imagining something better for our neighborhoods." www.sfchronicle.com/opinion/open...
We’re small business owners in the Sunset. Reopening the Great Highway is the last thing we need
OPINION: Some candidates hoping to replace Supervisor Joel Engardio are pledging to reopen the Great Highway and close Sunset Dunes park. That’s a mistake, Britt-Marie Alm and Poppy Gilman write.
www.sfchronicle.com
October 20, 2025 at 7:35 PM
"Sunset Dunes is a testament to what happens when San Francisco thinks big and invests in public spaces. [...] And it reminds us that we shouldn’t let fear of change keep us from imagining something better for our neighborhoods." www.sfchronicle.com/opinion/open...
The only people I know that refer to ChatGPT as “Chat” are those in romantic relationships with it.
nypost.com/2025/10/16/b...
nypost.com/2025/10/16/b...
October 16, 2025 at 5:19 PM
The only people I know that refer to ChatGPT as “Chat” are those in romantic relationships with it.
nypost.com/2025/10/16/b...
nypost.com/2025/10/16/b...
Reposted by Gabriel
"I don't have anything to hide why should I care about privacy?"
The politician in South Carolina who has introduced a bill redefining contraception as abortion also wants people who share websites to be charged with aiding and abetting homicide.
October 16, 2025 at 2:46 PM
"I don't have anything to hide why should I care about privacy?"
Reposted by Gabriel
Normal person: I asked AI and it told me--
Every AI researcher:
Every AI researcher:
October 15, 2025 at 9:31 PM
Normal person: I asked AI and it told me--
Every AI researcher:
Every AI researcher:
Reposted by Gabriel
“What if you could fuck the singularity?” is the apotheosis of technofuturism (2025)
October 14, 2025 at 9:22 PM
“What if you could fuck the singularity?” is the apotheosis of technofuturism (2025)
Reposted by Gabriel
BREAKING: Friday night massacre underway at CDC. Doznes of "disease detectives," high-level scientists, entire Washington staff and editors of the MMWR (Morbidity and Mortality Weekly Report) have all been RIFed and received the following notice:
October 11, 2025 at 2:10 AM
BREAKING: Friday night massacre underway at CDC. Doznes of "disease detectives," high-level scientists, entire Washington staff and editors of the MMWR (Morbidity and Mortality Weekly Report) have all been RIFed and received the following notice:
Some research from my team!
🔎 Attackers are embedding LLMs directly into malware, creating code that can generate malicious logic at runtime rather than embedded in code.
🔥New @sentinellabs.bsky.social research by @alex.leetnoob.com, @vkamluk.bsky.social, and Gabriel Bernadett-Shapiro at #LABScon 2025. 🔥 s1.ai/llm-mw
🔥New @sentinellabs.bsky.social research by @alex.leetnoob.com, @vkamluk.bsky.social, and Gabriel Bernadett-Shapiro at #LABScon 2025. 🔥 s1.ai/llm-mw
October 1, 2025 at 6:33 PM
Some research from my team!
Reposted by Gabriel
james comey (2025)
September 26, 2025 at 12:35 AM
james comey (2025)
Not the BPO report we need, but definitely the one we deserve.
We are releasing details on BRICKSTORM malware activity, a China-based threat hitting US tech to potentially target downstream customers and hunt for data on vulnerabilities in products. This actor is stealthy, and we've provided a tool to hunt for them. cloud.google.com/blog/topics/...
Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors | Google Cloud Blog
BRICKSTORM is a stealthy backdoor used by suspected China-nexus actors for long-term espionage.
cloud.google.com
September 24, 2025 at 8:55 PM
Not the BPO report we need, but definitely the one we deserve.
Back from a very special #Labscon25.
Got to present research on LLM-enabled malware co-authored by @alex.leetnoob.com and @vkamluk.bsky.social.
If you want the full report check out the blog: www.sentinelone.com/labs/prompts...
Got to present research on LLM-enabled malware co-authored by @alex.leetnoob.com and @vkamluk.bsky.social.
If you want the full report check out the blog: www.sentinelone.com/labs/prompts...
Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware
LLM-enabled malware poses new challenges for detection. SentinelLABS presents groundbreaking research on how to hunt for this new class of threats.
www.sentinelone.com
September 22, 2025 at 9:52 PM
Back from a very special #Labscon25.
Got to present research on LLM-enabled malware co-authored by @alex.leetnoob.com and @vkamluk.bsky.social.
If you want the full report check out the blog: www.sentinelone.com/labs/prompts...
Got to present research on LLM-enabled malware co-authored by @alex.leetnoob.com and @vkamluk.bsky.social.
If you want the full report check out the blog: www.sentinelone.com/labs/prompts...
At #LabsCon25 watching Jim Walter covering the tiers of hactivism and why they matter!
September 19, 2025 at 9:01 PM
At #LabsCon25 watching Jim Walter covering the tiers of hactivism and why they matter!
Reposted by Gabriel
🔥🔥 Fresh research drop live from #labscon Arizona. @alex.leetnoob.com and @morecoffeeplz.bsky.social with @vkamluk.bsky.social
The Hunt for LLM-enabled malware #ai #cyber #threatintel
s1.ai/llm-mw
The Hunt for LLM-enabled malware #ai #cyber #threatintel
s1.ai/llm-mw
Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware
LLM-enabled malware poses new challenges for detection. SentinelLABS presents groundbreaking research on how to hunt for this new class of threats.
s1.ai
September 19, 2025 at 5:07 PM
🔥🔥 Fresh research drop live from #labscon Arizona. @alex.leetnoob.com and @morecoffeeplz.bsky.social with @vkamluk.bsky.social
The Hunt for LLM-enabled malware #ai #cyber #threatintel
s1.ai/llm-mw
The Hunt for LLM-enabled malware #ai #cyber #threatintel
s1.ai/llm-mw
Reposted by Gabriel
September 18, 2025 at 9:00 PM
September 18, 2025 at 4:10 PM
Well I’ll be posting about #LABScon25 all day today.
At least for the On the Record talks!
events.sentinelone.com/event/LABSco...
At least for the On the Record talks!
events.sentinelone.com/event/LABSco...
LABScon 2025
events.sentinelone.com
September 18, 2025 at 3:40 PM
Well I’ll be posting about #LABScon25 all day today.
At least for the On the Record talks!
events.sentinelone.com/event/LABSco...
At least for the On the Record talks!
events.sentinelone.com/event/LABSco...
Reposted by Gabriel
12/ Finally & unfortunately: as of right now I am pretty confident that no publicly available / commercially developed third party tool can reliably detect Paragon spyware.
Beware a false sense of security.
Beware a false sense of security.
September 2, 2025 at 2:10 AM
12/ Finally & unfortunately: as of right now I am pretty confident that no publicly available / commercially developed third party tool can reliably detect Paragon spyware.
Beware a false sense of security.
Beware a false sense of security.
Reposted by Gabriel
The only movies even close to Fast & Furious franchise in levels of plot absurdity is Paw Patrol.
Movie 1 is pups saving the mayors chicken out of a tree
Movie 3 they have an aircraft carrier
Movie 1 is pups saving the mayors chicken out of a tree
Movie 3 they have an aircraft carrier
July 13, 2025 at 6:31 PM
The only movies even close to Fast & Furious franchise in levels of plot absurdity is Paw Patrol.
Movie 1 is pups saving the mayors chicken out of a tree
Movie 3 they have an aircraft carrier
Movie 1 is pups saving the mayors chicken out of a tree
Movie 3 they have an aircraft carrier
Reposted by Gabriel
Bsky needs more stuff like this
August 27, 2025 at 6:18 PM
Bsky needs more stuff like this