Triaging the Week 142
AI Tools Are the New Attack Surface // AI Supercharges the Offense // Trust Betrayed: Supply Chain Compromises // Humans Are the Front Door // Exposed & Unpatched: Edge, Devices, and OT in triaging the week 142.
CU-GIR: How to Use the Cyber Underground General Intelligence Requirements to Get Ahead of Cybercrime
Learn how the CU-GIR turns cybercrime underground listings into intelligence requirements your CTI team can act on before ransomware ever hits.
Triaging the Week 141
AI Goes on Offense // Securing the AI Frontier // Trusted Tools Turned Against You // Software Supply Chain Under Siege // Nation-States, Mega-Heists & Hitting Back in triaging the week 141.
Triaging the Week 140
AI Agents Are Going Off-Script // Dev Secrets Are the New Crown Jewels // Patch Windows Are Now Measured in Hours // Trusted Access, Turned Against You // ClickFix Scales Up, Defenders Hit Back in triaging the week 140.
Detection Rule Documentation: The ADS Framework Guide
Learn detection rule documentation with Palantir's ADS framework: the 10 sections, detection as code, and a full worked example for your SOC.
Triaging the Week 139
Rogue Agents & Fragile Models // AI on Both Sides of the Fight // Trust Abused // Ads, Apps & the Cybercrime Service Economy // When Cyber Gets Physical in triaging the week 139.
Triaging the Week 138
Rogue AI Agents & the AI Governance Gap // Impersonation Everywhere // Poisoned Trust // Patch or Pay // Geopolitics, Law Enforcement & Accountability in triaging the week 138.
How to Run a CTI-CMM Assessment That Survives Leadership Scrutiny
Run a CTI-CMM assessment that holds up. Score your CTI maturity with evidence, prioritize the gaps, and show leadership measurable progress.
Triaging the Week 137
Trusted Tools, Malicious Intent // Espionage, Theft and Influence // Supply Chain, Cloud Identities and Edge Devices // AI Is the New Attack Surface // Workforce Strain, Skills Gaps and Cybercriminal Blunders in triaging the week 137.
Triaging the Week 136
Poisoned Pipelines // Rogue Agents & AI-Powered Adversaries // Fake Lures, Real Losses // Identity Is the Perimeter // North Korea & ShinyHunters in triaging the week 136.
Detection as Code: A Pipeline That Won’t Flood Your SOC
Learn detection as code with a four-stage pipeline to validate, translate, test, and deploy Sigma rules, plus the mistakes that sink SOC migrations.
Triaging the Week 135
Agentic AI Crosses the Line // Social Engineering at Industrial Scale // The Browser Is the Endpoint Now // Identity and Cloud // Adversary Infrastructure in triaging the week 135.
Triaging the Week 134
The Collapsing Exploit Window // AI Systems as the New Attack Surface // Identity Is the Perimeter // Hiding in Plain Sight // Scams at Scale in triaging the week 134.
Lazarus Group: The Complete Guide to North Korea’s Billion-Dollar Hacking Machine
Discover how the Lazarus Group became the world's most successful cybercrime syndicate, and the detection gaps most security teams still miss.
Triaging the Week 133
Trusted Software Is the Delivery Vehicle // The Supply Chain Turns Hostile // Your AI Toolchain Under Attack // Adversaries Are Operationalizing AI // Already Inside the Walls in triaging the week 133.