Happy to announce I enjoyed Project Hail Mary
- Shout out to LLMs because I am learning about so much fun syntax and capabilities in querying databases that I probably never would have learned about from just googling
- Reflecting on the magnet of threats concept - having a diverse customer base (the other 98% who rarely see something “interesting”) is critically important - otherwise everything in that 2% bucket will be anomalous that you can’t easily filter out
- Question on this for Kostas and the whole group - do any EDR platforms instrument the browser to see the JS? Or too noisy?Proofpoint published research on OWAReaper, a browser implant exploiting CVE-2026-42897 in Outlook Web Access. What stands out is that everything happens inside the browser. It uses GitHub queries for commands and CDN proxies or DNS tunnelling for exfil. For most orgs out there,
