The future of cybersecurity will be dictated by a defender's ability to not only ingest unique attacks, but generate the strains that don't exist yet and ship the detection ahead of them. As the rest of the industry degrades, the largest financial institutions will consolidate on the single provider that can do this at scale. That provider needs a constant supply of unique attacks to work from, and a subnet is the only structure that pays a swarm of attackers to supply them. bittensor:native #SN61#

What if every cyberattack made your defenses stronger? That's the idea behind RedTeam (SN61), using Bittensor intelligence to build an Internet Immune System that continuously identifies, analyzes, and adapts to emerging cyber threats. Join us and @_redteam_ live for our next Subnet Spotlight to learn how they're pioneering a self-improving approach to cybersecurity, powering real-world deployments and gaining traction with enterprise customers. $TAO This Wednesday, 8/19 at 10am ET.

We have now seen client traffic where more than 95% of requests are automated. Humans are in the vast minority online. Part of that shift is agentic automation doing legitimate work for real users. Malicious bot traffic is spiking inside the same wave, much of it running the same frameworks, and from the traffic alone the two are getting harder to separate. bot_virus_v1 is live on Subnet 61, built to watch that tooling from the attacker's side. The challenge is completely open ended. Miners bring any tool, any framework, any attack vector, and every submission is scored on what it gets past our detection stack. Everything captured here feeds the immune system. A system that ingests miner attacks, and what comes out are novel attacks and detection that could not have been produced anywhere else.

We have now integrated our solution for testing with 5 more enterprise platforms (combined valuation of over $22B), reaching 900M+ accounts and ingesting over a billion weekly transactions. 11 months of continuous attacks from miners took our detection rate from 74.3% to 99.5%, while the average across competing vendors fell to 14.6%.

Miner burn has been completely removed from SN61. Miner emissions now flow to miners in full. The intelligence coming out of this subnet has been quietly making its way into enterprise infrastructure at a rapid rate. Big news coming soon.

Every month for eleven months, we tested every major bot detection vendor against a continuously growing set of real attacks and measured each one's true detection rate. The attacks came from two sources, miners who competed in RedTeam's humanize_behaviour challenges to generate human-like bot behaviour, and attacks built in-house by our team. Over this period, the average detection rate among these vendors decayed from 59% to 14.6%. Even the market leaders dropped by over 50%. Meanwhile, our detection rate jumped from 74.3% to 99.5%. The attacks these vendors failed against in testing are the same ones we find sitting in live traffic when clients switch to us from these providers. Our miners aggregate methods used by the most dangerous fraud operations on the internet and continuously sharpen them with techniques of their own. The reason we can compound against these frontier attacks while other vendors degrade is that every attack is instantly reverse-engineered and folded back into the system. Next month, we release the immune system alongside our new bot virus challenge. It's exactly what the name suggests, an evolving system that keeps improving while the market around it degrades, and one built to generate and neutralise attacks that don't yet exist anywhere in the wild. We believe that as AI continues to advance, this is the only defense structure that survives. Stay tuned.

Attackers don't just automate browsers anymore. They run anti-detect browsers, spoofing and obfuscating every signal a fingerprint is built from. Our job is to fingerprint the device anyway. Network packets are a layer that obfuscation often cannot reach. Once a request leaves the device, the packets are what they are. FlowPrint v1 goes live today. It classifies the device operating system (Android, iOS, Windows, Linux, Chromium OS, macOS) from flow features alone. You can rewrite the user agent. You can't rewrite the packets. Three challenges now live on SN61, each hardening different layers of our products: ab_sniffer_v6: detecting automation and anti-detect tooling flowprint_v1: OS classification from network flows flowradar_v2: VPN detection from network flows

True identity behind every alias. RedTeam/Innerworks anchors identity to the device, past every fresh wallet, account, or browser they spin up. Live across every client: fraud, multi-account abuse, and tracking sanctioned actors across burner identities. Observed on a single client platform: 1 in 5 requests originated from a single device. A pattern that recurs across deployments at varying severity Shipping out of Subnet 61.

Geolocation Intelligence: resolving where a user actually is, even behind a VPN or residential proxy. Live across every Innerworks client today: compliance for regulated finance, and detection of sanctioned actors. Used alongside lead investigators on the $1.5bn Bybit incident. Real intelligence shipping out of SN61.