Triaging the Week 138
Rogue AI Agents & the AI Governance Gap // Impersonation Everywhere // Poisoned Trust // Patch or Pay // Geopolitics, Law Enforcement & Accountability in triaging the week 138.
How to Run a CTI-CMM Assessment That Survives Leadership Scrutiny
Run a CTI-CMM assessment that holds up. Score your CTI maturity with evidence, prioritize the gaps, and show leadership measurable progress.
Triaging the Week 137
Trusted Tools, Malicious Intent // Espionage, Theft and Influence // Supply Chain, Cloud Identities and Edge Devices // AI Is the New Attack Surface // Workforce Strain, Skills Gaps and Cybercriminal Blunders in triaging the week 137.
Triaging the Week 136
Poisoned Pipelines // Rogue Agents & AI-Powered Adversaries // Fake Lures, Real Losses // Identity Is the Perimeter // North Korea & ShinyHunters in triaging the week 136.
Detection as Code: A Pipeline That Won’t Flood Your SOC
Learn detection as code with a four-stage pipeline to validate, translate, test, and deploy Sigma rules, plus the mistakes that sink SOC migrations.
Triaging the Week 135
Agentic AI Crosses the Line // Social Engineering at Industrial Scale // The Browser Is the Endpoint Now // Identity and Cloud // Adversary Infrastructure in triaging the week 135.
Triaging the Week 134
The Collapsing Exploit Window // AI Systems as the New Attack Surface // Identity Is the Perimeter // Hiding in Plain Sight // Scams at Scale in triaging the week 134.
Lazarus Group: The Complete Guide to North Korea’s Billion-Dollar Hacking Machine
Discover how the Lazarus Group became the world's most successful cybercrime syndicate, and the detection gaps most security teams still miss.
Triaging the Week 133
Trusted Software Is the Delivery Vehicle // The Supply Chain Turns Hostile // Your AI Toolchain Under Attack // Adversaries Are Operationalizing AI // Already Inside the Walls in triaging the week 133.
Triaging the Week 132
ClickFix Goes Industrial // Identity Is the Only Perimeter // AI as Target and Threat Actor // Nation-State Ops Move From Espionage to Physical Impact // Law Enforcement Crackdowns in triaging the week 132.
Sigma Rules Explained: Architecture, pySigma, Modifiers, & Correlation
Learn how Sigma rules, modifiers, and pySigma power platform-agnostic detection engineering and threat hunting, plus the pitfalls tutorials skip.
Triaging the Week 131
ClickFix & macOS Endpoint Under Siege // Blinding the Defender // Developer Pipeline & AI Assistants Targeted // The Extortion Economy & Its Infrastructure // Fraud at Scale in triaging the week 131.
Triaging the Week 130
AI as Weapon and Target // Your Marketplace Is Your Perimeter // Ransomware & the Vanishing Patch Window // The Hiring Pipeline Is an Attack Vector // SaaS, Silicon, and Statecraft in triaging the week 130.
How to Detect North Korean Remote Workers Hiding Inside Your Company
North Korean remote workers pass interviews, then extort you. Learn the DPRK remote IT worker hiring pipeline, TTPs, and seven detection opportunities.
Triaging the Week 129
The Package Registry Is the Attack Surface // ClickFix Has Gone Cross-Platform // Trust Guarantees That Didn't Hold // The Perimeter You Stopped Looking At // Agentic AI for Offense and Defense in triaging the week 129