Triaging the Week 126
Identity Under Siege — Device Code Phishing, Vishing & MFA Bypass // AI Coding Agents Under Attack // Supply Chain & Dev Ecosystem Residential Proxies, Botnets, & ORBs in triaging the week 126.
Adam Goss
Triaging the Week 125
AI Agents & MCP Targeted // Riding the AI Hype Wave // Developers & Researchers Under Siege // Nation-State Espionage & Targeted Intrusions // The Browser & Identity Battleground in triaging the week 125.
Why Your CTI Analyst Career Is Stuck (It’s Not a Skills Problem)
Most people think breaking into cyber threat intelligence (CTI) is a skills problem. It is not. It is a signal problem. I came up through a managed security services provider (MSSP) security operations center (SOC), triaging alerts before I could…
Triaging the Week 124
IABs & Backdoor Tradecraft // Vulnerabilities & Exploitable Infrastructure // Social Engineering & Trust Abuse // AI Supply Chain & Agentic Risks // Law Enforcement Wins & Phishing Evolution in triaging the week 124.
Volt Typhoon: Hunting the Ghost Already Living in Your Network
Volt Typhoon hides inside your own tools and waits. Learn how this Chinese APT pre-positions in critical infrastructure and how to hunt it in your network.
Triaging the Week 123
AI Both the Weapon and the Weak Link // Trusted Channels Weaponized // Covert Surveillance // Critical Exploits & Active Campaigns // The Future of Vulnerability Management in triaging the week 123.
Triaging the Week 122
AI on the Offensive // The AI Layer as an Attack Surface // Poisoning the Supply Chain & Hunting Developers // Deception-Led Delivery & Trusted Infrastructure // Guarding the Access Layer in triaging the week 122.
CTI for SMB: How Small Businesses Can Operationalize Threat Intelligence for Free
Learn how to build a threat intelligence program for your SMB using free tools like OTX and MISP. Get actionable CTI for SMBs this afternoon.
Triaging the Week 121
The Supply Chain Siege // MFA Bypass & Identity-Based Intrusions // Evading Detection (Fileless, Stealth & Living-off-the-Land) // Critical Vulns & the Vanishing Patch Window // Social Engineering Remains Rampant in triaging the week 121.
Triaging the Week 120
Developer Ecosystem Attacks // Critical Vulnerabilities Under Active Exploitation // Cloud, Identity & Data Breaches // APT & Nation-State Activity // AI Security, Malware Infrastructure & Takedowns in Triaging the Week 120
Detection Engineering in 2026: The Complete Lifecycle (Sigma, YARA, DaC & AI)
Detection engineering is more than writing SIEM rules. Learn the 6-phase lifecycle, the detection-as-code model, and why identity is the new battlefield.
Triaging the Week 119
The AI Arms Race Continues // Supply Chain & Open Source Ecosystem Poisoning // Platform, Website & AI Ecosystem Abuse // Critical Vulnerabilities // Persistence, Detection Failures & Major Breaches in triaging the week 119.
Triaging the Week 118
AiTM & Identity Hijacking Wave // Supply Chain Compromise Continue // Cloud, Web & Infrastructure Exploitation // Banking Trojans & State-Sponsored Smokescreens in triaging the week 118.
The Best CTI Certification Path: 4 Certs to Land Your First Threat Intelligence Role
Cut through the noise. Discover the four CTI certifications that actually get you hired, in the right order, without wasting time or money.
Triaging the Week 117
Social engineering & identity abuse // developer ecosystem under seige // AI weapon & target // network edge targeted // mass breaches & destructive outcomes in triaging the week 117.