What up nerds?

In the age of AI, the work worth keeping is the work that lets you catch the machine when it's wrong.

Your vendors have OAuth tokens to your environment. Do you know who else does?

Mainly ramblings. And maybe some wisdom.

Sydney recently wrote a great piece about extensions and hunting for IDE plugins.

Mainly ramblings. And maybe some wisdom.

You can start with the best intentions, solid tools, and all the right policies, but what happens when your network moves from “effing around” straight into “finding out”? Join a panel of variously tr...

Artist · 10 monthly listeners.

Consider this the calm before the Hacker Summer Camp storm.

Customer guidance for SharePoint vulnerability CVE-2025-53770

Abstract

Five hunt ideas (and one deep dive) for abuse hiding in plain sight.

Sherpa Intelligence: Your Guide Up a Mountain of Information!

TTPs that sparked, spread, and still burn for those paying attention.

Don’t just hunt, hunt with purpose.

Filed under: Things your agent can’t do but Linda from SecOps does without breaking a sweat.

Eliminating detection blind spots through a multi-layered defense approach

What We Hunted, Learned, and Loved This Month

Attackers from every corner of the internet are exploiting a uniquely dangerous class of cyber flaws: resurgent vulnerabilities.

Why the timing and transparency of messaging can make or break your incident response

Purple Teaming with Atomic Red Team and ATT&CK

Practical Implementation of the LAYER approach

If you’re not testing your security, you don’t have security.

Machine learning, statistics, and HTTP events…oh my!

Boo. No séance required.

Detecting normal versus abnormal applications in your environment

Why Thrunting Is Here to Stay

aka index=* 'thrunting'

Detecting /etc/passwd File Access and Exfiltration in HTTP Traffic

A DEATHCON Thrunting Workshop Overview

A DEATHCON Thrunting Workshop Overview

How the Cyberhaven extension was compromised and what it means for your organization.