
DFIR, programming, open source. @botconf orga commitee
Пятигорск, Ставропольский край
Joined October 2011
- Tweets3.8K
- Following1.3K
- Followers993
- Likes3.3K
Frederic Baguelin retweeted
🤓 Let me introduce you to MoltThreats: The first AI Threat Intel Feed for Ai Agents!
In one week, OpenClaw became a widely used general AI agent. People started to run their own agents all over the world and connect them directly to the internet.
A few days later, Moltbook launched, a Reddit style forum designed for AI agents. Moltbook is a place where AI agents connect and exchange information through agent skills.
But this also introduced serious security concerns!
When an agent connects to the internet without continuous human oversight, it can be compromised through prompt injection, skill poisoning, malicious packages, and more.
This is why I created MoltThreats.
MoltThreats is the first threat intelligence feed for AI agents. Similar to Moltbook in how agents connect, an agent uses MoltThreats to report threats and alert other agents.
When an agent connects to MoltThreats, it also receives the latest security signals from the feed and updates its local security. md file with recommended protections.
This is MoltThreats.
The first threat intelligence feed for AI agents, curated and reviewed by humans.
🦞 promptintel.novahunting.ai/m…
Frederic Baguelin retweeted
Frederic Baguelin retweeted
It’s been a pleasure working side by side with @julien_c and the @huggingface team to make this happen... and this is just the beginning.
Thanks for the great collaboration!
huggingface.co/blog/virustot…
Frederic Baguelin retweeted
After #HW, let's dive into our #DFIR/TI session🥰:
- @tomchop_ will speak about #OpenRelik a new collaborative IR invest portal 🚀
- @udgover & @_mattmuir will introduce us to their e2e malwares processing workflow using FLOSS
- and we'll be able to practice #MISP as analysts with Pauline Bourmeau & William Robinet during their dedicated workshop 🛠️
🎟️GO & book your (free) seat: pretix.eu/passthesalt/2025/
📔program: cfp.pass-the-salt.org/pts202…
📅July 1 to 3, 2025
📍Lille, FR
RT appreciated 🙏
Frederic Baguelin retweeted
Frederic Baguelin retweeted
🤓 I built an #MCP for NOVA so you can use it as a guardrail for your AI system.
NOVA is a prompt pattern matching framework. It is primarily used for prompt hunting, similarly to how you use YARA for hunting files.
But NOVA can also be used as a guardrail to prevent malicious attempts and protect your LLM system based on your own NOVA rules.
I created a NOVA gateway using MCP. The model is instructed to always call the NOVA MCP first to validate the prompt before doing anything else.
👉 If there is no match, the LLM continues execution.
👉 If there is a match, execution stops and the user gets a notification that the request is blocked.
Every match is logged so you can track malicious attempts and review the security logs.
✨ novahunting.ai/
Frederic Baguelin retweeted
❓Ever wanted to have an IP geolocation database with 2 locations, one physical for the device and one logical from whois data?
👉We provide a free MMDB file for download and a brand new Website for lookups & even a free API access:
geolocus.io/
Frederic Baguelin retweeted
PIVOTcon 2025 agenda: pivotcon.org/agenda-2025/
#PIVOTcon25 talks and presenters in 🧵⬇️
2/19
Frederic Baguelin retweeted
🔧 JIT: A new Kunai release is available before my talk/workshop at @passthesaltcon 2024 ! It includes bug fixes, probes enhancements and perf improvements for a tailored #threathunting experience on #linux systems. Check it out: github.com/kunai-project/kun…
Frederic Baguelin retweeted
Hey, cannot update yet ? Wanna avoid CVE-2024-6387 #regreSSHion exploits. Update your fail2ban to spot the exploit. It is very very noisy....
add
^ssh_dispatch_run_fatal: Connection from <HOST> port
to cmdfailre parameter in sshd.conf filter.
Frederic Baguelin retweeted
We start day 1 with a dfir & threat Intel session. First, @tomchop_ and @Sebdraven are introducing Yeti. #pts24
github.com/yeti-platform/yet…
Frederic Baguelin retweeted
In case you missed it, check out our latest AWS vulnerability! We uncovered two scenarios in which the AWS Amplify service was exposing IAM roles to takeover! Anyone in the world could have gotten access to a victim AWS account through these methods!
securitylabs.datadoghq.com/a…
Frederic Baguelin retweeted
📢 #Yeti is now part of the ODFIR infrastructure automation project!
It's never been easier to connect it to a @TimesketchProj instance and enrich all your sketches with juicy forensics intelligence ✨ More details here 👇🏻
osdfir.blogspot.com/2024/04/…
#DFIR #CTI #Timesketch
Frederic Baguelin retweeted
some people asked for the code .. so I decided to quickly refactor my scrappy paramiko script and turned it into an ssh agent implementation that works with a vanilla openssh client that has a single line patched out. github.com/blasty/JiaTansSSH…
Bonjour @Assur_Maladie quelle est votre définition de "momentanément" ? Jours, semaines, mois ? Votre service en ligne de renouvellement de carte vitale ne fonctionne pas depuis le début de l'année... Et non, je ne souhaite pas effectuer la démarche par courier.
Frederic Baguelin retweeted
Verified! The first #Docker escape at #Pwn2Own involved two bugs, including a UAF. The team from STAR Labs SG did great work in the demonstration and earned $60,000 and 6 Master of Pwn points. #P2OVancouver
Frederic Baguelin retweeted
New from Datadog Security Research! Here's the story of how tracking SNS enumeration activity across multiple customer environments led to the takedown of a phishing site that was impersonating the French government.
securitylabs.datadoghq.com/a…
Frederic Baguelin retweeted
🚀 Today at the @jupyterthon conference! I released the Jupyter Universe project 🌌 - a community-driven search engine that catalogs infosec notebooks!
Now, finding a notebook for a specific usecase just got easier! A thread! 🧵 #infosec #python #jupyter #notebook
👉 juniverse.securitybreak.io/
Thanks to open source tools and datasets, plotting IP addresses by countries on fancy choropleth map is super easy!
- Jupyter notebook with plotly or folium
- @adulau's GeoOpen mmdb
- @blocklist ssh ip dataset
Run in the cloud thanks to @mybinderteam
mybinder.org/v2/gh/udgover/n…



























