Chief AI Officer, Chief of Research, @SANSInstitute | Cybersecurity Expert & Threat Hunter | Godfather of DFIR | Technical Advisor to US Govt

Denver, CO
Joined February 2008
Rob T. Lee retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,261
10,560
2,757
68,797
11,836,394
Small U.S. water, power and gas utilities: free OT security tech, deployment help and SANS training for up to 500 of you. dragos.com/resources/press-r… #ICS | @Accenture | @DragosInc
1
7
2
17
3,423
Rob T. Lee retweeted
This is spectacular! Thank you for your incredible work, @joswr1ght, and for this remarkable gift to the community. TREMENDOUS!
Today at noon EDT I'm launching a book I've been working on for 20 months: Dynamic Incident Response, an iterative IR framework designed for how security teams actually work. Free in all formats. Join me for the launch today: sans.org/engage/dynamic-inci…
5
26
3,200
Success lies not in executing the loop perfectly once, but in cycling through it as many times as necessary to achieve true incident resolution." –SANS Fellow Joshua Wright
1
4
1
8
4,920
Tomorrow is the last day to nominate. Someone made this year easier for you in cybersecurity, and it's worth taking a minute to say so. #SANSDMA
1
4
1
6
3,755
Rob T. Lee retweeted
We are excited to announce our $100,000 scholarship program for [un]prompted! There is no more important gathering of AI security researchers and our scholarship program was created to provide financial assistance to practitioners and attendees whose fees are not paid by their employer Over $100,000 has been committed for scholarships through the generosity of the startups in our community. Scholarship recipients will have 100% of their registration expense ($850) paid directly to [un]prompted which is a 501c3 non-profit organization We will fast track applications based on peer review and good faith attestation of need. There is no financial means test. All applications are encouraged Thank you to all who are supporting this important cause (@vijaybolina, @jcran, @silascutler, @nahsra, @caseyjohnellis, @gadievron, @jkamdjou, @resilientcyber, @robtlee, @haroonmeer, @DanielMiessler, @hdmoore, @k8em0, @joshua_saxe, @kyleroro, @harmj0y, @edwardxwu, @awurthmann, @letswastetime, @jotunvillur and many others!) Please use the link in the comments below to apply and please like and reshare this post to spread the word!
5
21
1
31
4,257
Rob T. Lee retweeted
You have until the 8th at 23:59 to submit to @unpromptedconf! What are you waiting for? unpromptedcon.org/
2
9
2
18
3,487
Rob T. Lee retweeted
The first AI security inflection point, now known as "Mythos", commoditized vulnerability discovery. The second, similarly, which shall forever be called "Hugging Face", made "autonomous attacks" real. While we can ruminate on what the third may be, we can examine it through...
2
2
1
14
4,462
SANS named the 5 winners of Find Evil! Judged by 90 responders across 1,775 tests. go.sans.org/Dn6p7K
1
4
8
3,566
The Find Evil! winners are Mulder, TRUDI and Camel. All three open source today.
1
2
1
9
4,718
Rob T. Lee retweeted
Hey folks! @SANSInstitute is seeking nominations for this year's Difference Makers Awards, recognizing truly exceptional work in various categories across the cybersecurity community. I'm on the advisory board and would appreciate your checking out the categories and nominating people who, well, make a difference! 😃go.sans.org/H7QUx6
6
1
12
3,031
Tomorrow, 12:30 pm ET: the three Find Evil! winners, and the code goes public. Thirty minutes with @robtlee. Register and the recording reaches you either way: youtube.com/watch?v=ITmc7GoR…
1
1
2
2,169
It’s really unfortunate to see this from one of my favorite thinkers. China has been hacking the entire planet and pillaging its intellectual property for decades. It is extraordinarily naive to think they are handing out open models because they care about the world. They are doing it because they believe it is the best method for undermining US AI labs and being first to achieve AGI and ASI. If you don’t think they would like the entire world to be a lot like Hong Kong, then you are not paying attention.
Frontier Labs are incented to be fearful as it provides a moral justification for staying closed. Chinese Labs take the consistent position of doing what’s good for all and being open. So the little guys find themselves in the uncomfortable position of rooting for the Chinese…
22
9
2
112
21,406
.@RobTLee: think of an AI agent as a car. The model is the engine, the harness is what makes it drive. New reporting from @CSOonline on why the harness, not the model, is where AI agents get compromised. csoonline.com/article/420823…
5
8
3,832
Nominations for the 2026 SANS Difference Makers Awards are open through Sept 14, SANS's once-a-year moment to recognize the practitioners actually moving the needle in cybersecurity. Someone made a difference for you this year. Tell us who. Nominate below 👇 #SANSDMA
4
6
1
10
6,770
"It's like learning a new language or piano at the same time as juggling." @robtlee on the three AI jobs security teams now carry at once. youtube.com/watch?v=ld6JjNQc…
1
2
8
3,406