Lenny Zeltser
@lennyzeltser.com
📤 2335
📥 376
📝 21
Builder of security products and programs. Teacher of those who run them.
https://zeltser.com
Which malware analysis toolkits and frameworks should you consider including in your workflow? Here's my overview:
loading . . .
Free Toolkits and Frameworks for Malware Analysis
Open-source sandbox platforms, analysis environments, and AI-assisted tools let you build your own malware analysis capability without commercial licenses. Options include CAPEv2, DRAKVUF Sandbox, REM...
https://zeltser.com/malware-analysis-tool-frameworks
7 days ago
0
3
1
The new REMnux MCP server connects AI agents to 200+ malware analysis tools on REMnux. I was surprised at the depth of investigation it delivers. Most of my time went into capturing how I approach the analysis and providing guidance to AI at the right time, so it can think and adapt as it works.
loading . . .
Using AI Agents to Analyze Malware on REMnux
To analyze malware effectively, AI agents need practitioners' expertise and access to the analysis tools. The REMnux MCP server provides both, connecting AI to 200+ tools on REMnux with guidance on wh...
https://zeltser.com/ai-malware-analysis-remnux
8 days ago
0
8
6
What if the CISO's real job is calibrating the right amount of insecurity? Frame the role around that and you become an enabler, not an obstacle. The acronym still works.
loading . . .
The Chief Insecurity Officer
What if the CISO's job isn't to maximize security but to calibrate the right amount of insecurity? Reframing the role this way turns security leaders from obstacles into enablers of business velocity.
https://zeltser.com/chief-insecurity-officer
20 days ago
0
2
0
I released a free tool to generate animated, annotated replays of text conversations, so you can embed them in articles, training, and docs. For example, it's a nice way to explain influence tactics of a social engineering scam. See it in action:
loading . . .
Interactive Replays of Conversations: A New Tool
Conversation replays add an engaging dimension to training materials and docs. Save the conversation and your annotations in a data file, then use my tool to generate a self-contained HTML player you ...
https://zeltser.com/interactive-replays
about 1 month ago
1
4
0
How to give AI raw incident notes and get a solid draft of an IR report? Now you can point your AI tool at my MCP server for guidance based on proven writing principles. Your data isn't shared with my server; it only provides guidance.
loading . . .
Write Good Incident Response Reports Using Your AI Tool
I released an MCP server to give your AI expertise to write good IR reports from raw notes or to get constructive feedback on existing content. You can replicate my approach to codify your own experti...
https://zeltser.com/good-ir-reports-with-ai
about 1 month ago
0
1
0
I released a tool for making your website or docs easily available to AI assistants via an MCP server. This helps ensure people's AI tooling can access the latest details at the right time. For instance, this is how REMnux users now can get info about its malware analysis tools.
loading . . .
Publishing Your Website Content to AI Assistants
When people ask AI assistants about your product or project, they often get outdated information. Here's how to publish your static website content directly to AI tools using Cloudflare Workers and th...
https://zeltser.com/publishing-to-ai-assistants
about 1 month ago
0
1
2
While cybersecurity and data privacy leaders have distinct expertise, their goals are aligned. Edy Glozman and I discussed how these functions can support each other based on our collaboration at Axonius:
zeltser.com/security-pri...
loading . . .
How Security and Privacy Teams Break Barriers Together
While cybersecurity and data privacy leaders have distinct expertise, our fundamental goals are aligned. By understanding each other’s perspectives and priorities, we can support each other to stre
https://zeltser.com/security-privacy-break-barriers/
8 months ago
1
3
0
Here are the key trends that cybersecurity leaders should keep in mind for our work in 2025:
loading . . .
The CISO’s Midset for 2025: Outcomes, Automation, and Leadership
As the year 2025 rushes forward, the responsibilities of CISOs are continuing to evolve. We increasingly recognize the importance of not just identifying risks but actively addressing them through di
https://zeltser.com/ciso-mindset-2025/
about 1 year ago
1
6
0
reposted by
Lenny Zeltser
Lesley Carhart
about 1 year ago
Terrible news today about the loss of Amit Yoran. He was a larger than life figure in cybersecurity and we will be lesser without him. May his family and friends find peace.
2
53
12
reposted by
Lenny Zeltser
Joshua Wright
about 1 year ago
Happy birthday to the unusual number of my cybersecurity friends who all have January 1st birthdays on Facebook! 🧐🧐🧐
0
8
1
reposted by
Lenny Zeltser
Elizabeth Smith
about 1 year ago
For those going home to visit family this weekend: • Samsung calls it Auto Motion Plus • LG calls it TruMotion • Sony calls it Motionflow • Roku calls it Action Smoothing • Google TV calls it Motion Enhancement • Vizio calls it Smooth Motion Effect.
423
17723
6662
reposted by
Lenny Zeltser
Yael N
about 1 year ago
Just because you’re good at a job doesn’t mean you’ll necessarily be equally good as the manager of people doing that job.
1
5
1
reposted by
Lenny Zeltser
Corey Quinn
about 1 year ago
You can keep up to date on which AI search companies haven’t bent the knee to Amazon pretty easily via their robots.txt:
0
24
2
reposted by
Lenny Zeltser
Royans Tharakan
about 1 year ago
PyPI adds digital attestations to bolster Python package security. #Python #PyPI #Security
loading . . .
PyPI Now Supports Digital Attestations for Package Security
PyPI adds digital attestations to bolster Python package security. #Python #PyPI #Security
https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-digital-attestations/
0
5
3
reposted by
Lenny Zeltser
Jamie Levy 🦉
over 1 year ago
woot woot, we just got
@huntress.com
up. keep an eye out for new content there! 🥳🎉
1
18
4
reposted by
Lenny Zeltser
David Oxley
over 1 year ago
I’ve created a Starter Pack around cyber threat intelligence to make it easier to find that community here on Bluesky. Let me know of folks I missed, as I’m sure there are many!
go.bsky.app/TxQYHap
add a skeleton here at some point
32
186
74
Security teams' visibility allows us to help the company lower expenses while also decreasing risk. Reducing costs associated with unneeded user accounts and apps, for example, is another way for security leaders to add value:
loading . . .
Security Leaders Can Lower Expenses While Reducing Risk
As companies seek to optimize operations and constrain expenses, cybersecurity leaders worry about funding the projects we consider essential. Fortunately, in such an economic climate, we can achieve
https://zeltser.com/lower-cybersecurity-expenses-reduce-risk/
over 2 years ago
0
2
0
reposted by
Lenny Zeltser
Corey Quinn
over 2 years ago
I am the greatest Prompt Engineer in the world.
13
118
38
How long until adventurous skiers replace their ski goggles with Apple Vision Pro?
over 2 years ago
0
3
0
Kvetching about bad business and security practices is therapeutic, so I wrote this: Withholding SSO from customers is bad for business and security.
https://zeltser.com/witholding-sso/
over 2 years ago
0
1
0
reposted by
Lenny Zeltser
Laura Helmuth
over 2 years ago
We ran an editorial at Scientific American about the overwhelming evidence that school should start later. A teacher got his students to write to us & the school! changed! its! schedule!!!
https://www.scientificamerican.com/article/high-school-students-need-more-sleep-and-later-school-start-times/
loading . . .
High School Students Need More Sleep and Later School Start Times
After reading a Scientific American editorial on sleep and school start times, students and their teacher wrote to the editors about their experiences. Their district listened, and school will start later next year
https://www.scientificamerican.com/article/high-school-students-need-more-sleep-and-later-school-start-times/
9
105
39
I’m new here.
over 2 years ago
1
1
0
you reached the end!!
feeds!
log in