Taking a Much Needed Break!

I’ll try to make a few posts from my cruise this week but no guarantee. Happy easter all!
Finally We Have the AI Geo Guesser We Deserve

OpenAI just launched two new models of ChatGPT, o3 and o4-mini. I played with giving o3 images and asking it “where exactly was this image taken”. Within a minute or so it would have an answer and while I’m sure I’ll find some misses, it hasn’t missed for me yet. One of my tests was […]
SANS Orlando is in Full Swing!

Did a poster signing today at the SANS Cyber Defense booth and am now at dinner with an amazing group of people.
I’ll be doing a third talk at GISEC!

I’ll be giving a third talk at GISEC now discussing cutting edge techniques using AI for audio analysis.
I’ll Be Doing a Second Talk at GISEC!

I’ve agreed to give a second talk at the GISEC conference in Dubai next month. Here is the outline: Title: 24/7 Threat Tracking on Telegram: How to Automate Infostealer Log Monitoring With Python Synopsis: In this fast-paced session, Matt Edmondson (author of SANS OSINT courses SEC497 and SEC587) takes you behind the scenes of his […]
Deep Research on PDF Redaction Failures and Security: Risks, Exploits, and Best Practices

I was doing a demonstration for a tal,k and I needed to demonstrate deep research, so I picked a topic that I had just written a blog post about on Methods to discover redacted information from a pdf and since deep research put in the work and came up with a lot of analysis citations […]
Orlando Kicks off Tomorrow!!

I always have a great time teaching for SANS, but the big conferences like Orlando and Las Vegas always hit harder with bigger crowds, more activities etc. Looking forward to a great week!
How to Really Check If Your Document Redactions Actually Work

I had a student reach out and ask about ways to “unredact” information from a PDF. They work for an organization that releases a lot of redacted material and they wanted to ensure they weren’t accidentally leaking out sensitive information. When you need to redact documents, it’s important to verify the sensitive information is actually […]
2025 Supply Chain Technical Exchange Symposium

It was a huge honor to speak at the 2025 Supply Chain Technical Exchange Symposium yesterday. Got to see a few old friends and make some new ones today! Having lived in the area for five years, it’s always nice to get back at catch up.
GISEC Talk Description

I took a day to figure out exactly what I wanted to talk about at the GISEC Conference next month in Dubai and came up with the following: Necessity Breeds Innovation: OSINT Solutions When Budgets Fail This talk explores how security professionals can implement powerful Open Source Intelligence (OSINT) monitoring strategies with minimal to no […]