Guillaume Valadon

HOW IT STARTED vs HOW IT ENDED

@guedou.bsky.social + Gaetan F. and Philippe Boneff + Roger Ng gave talks at #pts25

They met at the social event, talked/🍻, and turned ideas into a collab!

Now? Their joint research is accepted at RWC26 🚀

Want this to be you?
Our CFP 👉 2026.pass-the-salt.org

Scapy lead maintainer just released v2.7.0 for Christmas season.

github.com/secdev/scapy...

-NoisyBear APT turns out to be a phishing test
-Qantas cuts executive pay by 15% after breach
-First AI-driven ransomware was just an academic project
-Nepal blocks 26 social media sites
-New GhostAction supply chain attack

Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/RBNEWS475/

secwest.net - information nexus connector CanSecWest2025_newtype LLM Safety and Information Security (April 24/25 2025)

CanSecWest2025_newtype (secwest.net) presentation: Fresh Secrets From The Docks - Lessons Learnt from Analyzing 15 millions Public DockerHub Images - Guillaume Valadon (@guedou.bsky.social) - Do you know what *your* blobs are leaking?

Bientôt en kiosque, mijoté par @guedou.bsky.social et la communauté

The Ultralytics Supply Chain Attack: Connecting the Dots with GitGuardian’s Public Monitoring Data On December 4, 2024, the Ultralytics Python module was backdoored to deploy a cryptominer. Using GitGuardian’s data, we reconstructed deleted commits, connecting the dots with the initial analysis. Th...

We found the deleted payload used in the Ultraltrics supply chain attack from last week!

TLDR: it dumps the GitHub runner memory and exfiltrates both AccessToken and CacheServerUrl

blog.gitguardian.com/the-ultralyt...

Docker Zombie Layers: Why Deleted Layers Can Still Haunt You Docker Zombie Layers are unreferenced image layers that continue to exist for weeks in registries, even after being removed from a manifest. In this hands-on deep dive, we explore how these layers can...

Docker Zombie Layers: Why Deleted Layers Can Still Haunt You

blog.gitguardian.com/docker-zombi...