How to Detect North Korean Remote Workers Hiding Inside Your Company
North Korean remote workers pass interviews, then extort you. Learn the DPRK remote IT worker hiring pipeline, TTPs, and seven detection opportunities.
Adam Goss
Triaging the Week 129
The Package Registry Is the Attack Surface // ClickFix Has Gone Cross-Platform // Trust Guarantees That Didn't Hold // The Perimeter You Stopped Looking At // Agentic AI for Offense and Defense in triaging the week 129
CTI For SMB: When Your Small Business Is Actually Ready For Threat Intelligence
Learn when your business is ready for CTI for SMB, which controls come first, and a 60-day roadmap to run threat intelligence on a real budget.
Triaging the Week 128
Your AI Agent Is the New Insider Threat // AI Infrastructure Is Now a Primary Target // Developers Are the Softest Path Into the Supply Chain // Identity & Trusted Platforms as the Attack Surface // Patch, Then Assume Breach in triaging the week 128.
Triaging the Week 127
The Agentic Attack Surface // The MFA Bypass Era // Poisoned Supply Chains & Fake Repos // Stealers, Ransomware & the macOS Frontier // Infrastructure, Privacy & Critical Patches in triaging the week 127.
Triaging the Week 126
Identity Under Siege — Device Code Phishing, Vishing & MFA Bypass // AI Coding Agents Under Attack // Supply Chain & Dev Ecosystem Residential Proxies, Botnets, & ORBs in triaging the week 126.
Triaging the Week 125
AI Agents & MCP Targeted // Riding the AI Hype Wave // Developers & Researchers Under Siege // Nation-State Espionage & Targeted Intrusions // The Browser & Identity Battleground in triaging the week 125.
Why Your CTI Analyst Career Is Stuck (It’s Not a Skills Problem)
Most people think breaking into cyber threat intelligence (CTI) is a skills problem. It is not. It is a signal problem. I came up through a managed security services provider (MSSP) security operations center (SOC), triaging alerts before I could…
Triaging the Week 124
IABs & Backdoor Tradecraft // Vulnerabilities & Exploitable Infrastructure // Social Engineering & Trust Abuse // AI Supply Chain & Agentic Risks // Law Enforcement Wins & Phishing Evolution in triaging the week 124.
Volt Typhoon: Hunting the Ghost Already Living in Your Network
Volt Typhoon hides inside your own tools and waits. Learn how this Chinese APT pre-positions in critical infrastructure and how to hunt it in your network.
Triaging the Week 123
AI Both the Weapon and the Weak Link // Trusted Channels Weaponized // Covert Surveillance // Critical Exploits & Active Campaigns // The Future of Vulnerability Management in triaging the week 123.
Triaging the Week 122
AI on the Offensive // The AI Layer as an Attack Surface // Poisoning the Supply Chain & Hunting Developers // Deception-Led Delivery & Trusted Infrastructure // Guarding the Access Layer in triaging the week 122.
CTI for SMB: How Small Businesses Can Operationalize Threat Intelligence for Free
Learn how to build a threat intelligence program for your SMB using free tools like OTX and MISP. Get actionable CTI for SMBs this afternoon.
Triaging the Week 121
The Supply Chain Siege // MFA Bypass & Identity-Based Intrusions // Evading Detection (Fileless, Stealth & Living-off-the-Land) // Critical Vulns & the Vanishing Patch Window // Social Engineering Remains Rampant in triaging the week 121.
Triaging the Week 120
Developer Ecosystem Attacks // Critical Vulnerabilities Under Active Exploitation // Cloud, Identity & Data Breaches // APT & Nation-State Activity // AI Security, Malware Infrastructure & Takedowns in Triaging the Week 120