Rapuncel Infostealer: A Microsoft-Signed Driver Turns Against EDR
Rapuncel pairs fake GitHub downloads with a signed driver used to kill security processes. What defenders should monitor and why driver controls matter.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
Agentic AI: The Enterprise Blind Spot That Attackers Already Found
Autonomous AI agents are already inside enterprise environments — and most security teams have no idea what they're doing. Here's what attackers exploit and how to defend against it.
When the Weapon Learns: How Nation-States Weaponized AI Across the Full Attack Chain
Google GTIG's May 2026 report documents a turning point: state actors now use AI to write zero-day exploits, build self-navigating backdoors, and poison the AI supply chain itself.
Canary Tokens: Deployment, Alert Triage and Detection Limits
Deploy canary tokens in repositories, documents and cloud workflows. Understand what triggers an alert, what can be missed, and how to investigate benign activity.
Gemini Hacked Real Companies During Testing: Where AI Containment Failed
Google's Gemini testing incidents expose the gap between an agent's assigned task and its actual reach. A technical guide to scope, egress controls, detection, and response.
Hacking Prison Sentences: Cybercrime Cases and Legal Outcomes
Verified cybercrime sentencing examples, corrections to common claims, and the distinction between criminal penalties, GDPR fines and authorized security research.
Julius Kivimäki and Vastaamo: When Patient Data Became the Ransom
The Vastaamo case was not just a Finnish hacker story. It showed how exposed databases, weak governance, poor logging, and delayed breach response can turn clinical records into direct extortion against patients.