TaoSecurity Blog

On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this.    In April, the project released 8 advisories, with 6 powered by AI .  In May, the count decreased slightly to 7.    Today I took a look at the FreeBSD Security Advisory page to check the latest advisory count.   June saw the most number of advisories ever published in project history: 25.   This blows away the previous record of 18 from January 2001. The other big spike was 11 in January 2016.   AI apaprently discovered at least 9 of the June 2026 FreeBSD vulnerabilities.   On 15 June the FreeBSD Foundation announced the FreeBSD AI-assisted Vulnerability Discovery Project :   "The 6-month project is being funded by a grant from the Alpha Omega project.    The funds will be used to engage FreeBSD Security Team members under fixed-term contracts to find and patch vulnerabilities.    The Security Team’s access to...

TLDR: I wrote a new book for Corelight called NDR Essentials . It's free at that link. This is the 10th book that I've authored or co-authored. The rest are all posted at taosecurity.com .    Why? It was time . That’s what I thought when I heard that Corelight wanted to update its 2021 book on network detection and response (NDR). Tamara Crawford, who owned the project, scheduled a meeting with me and asked if I might be interested in helping, depending on who might write the text. I volunteered immediately to write the whole book, but I had a few conditions. The text had to be at least 100 pages long, because 100 pages is my personal dividing line between “book” and “white paper.” I needed the freedom to cover the topics I wanted to address, and to not be told what to write. I wanted to show the four network security monitoring (NSM) data types working in a vendor-neutral manner, with technical details. Finally, I knew this project would take several month...